Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

I once found a login form where 1e3 was a correct password, when yours was 1000. I'm still not sure if it eval'd your password, but it was PHP for sure.


What does this have to do with faults of the language? I can think of a lot of stupid things to do in any language; it doesn't mean the language is the problem.


The weak typing of PHP doesn't make life easier for the programmer in this instance.

For example, this specific problem is harder to create in stronger-typed languages, since you would need to explicitly cast from an integer to a string.


It does if the language itself makes it easier for you to make those kind of mistakes.


It's easy to make any kind of mistake in any language. Singling PHP out for it because some people are shitty programmers is BS, IMHO. Not all of us are asshats who have no idea what we're doing.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: