PHP — Type Juggling

PHP — Type Juggling

Type Juggling it’s a kind of bug that occurs only on PHP, mainly due to the way the language “compares” one thing to another.

In PHP there’re a pair of operators that, although look similar, they do perform different tasks, those are == and ===.

Double equals essentially evaluate if the variable, or whatever being compared, is empty or not. We can see that on the first condition, which “verifies” if $txt is really empty or …

bug code review ctf cybersecurity hacking language pentest php txt variable