3 ms·
One thing to note. The md5 and sha1 interfaces have a second param which prevents this bug. Instead of returning a string it will return binary data which won
by ejcx 11y ago
One thing to note.
The md5 and sha1 interfaces have a second param which prevents this bug.
Instead of returning a string it will return binary data which won't get coerced to a float.
For example:
<?php
if (md5('240610708', true) == md5('QNKCDZO', true)){
printf("Will never go here\n");
}
PHP has a lot of.....PHPisms.
- mrclay 11y agoThere's no "binary data" type. Raw hash output can certainly start with bytes matching "0e" or "0E", it's just a lot more rare.