News for hackers. Stuff that matters.

A comment on Parsing JSON is a Minefield. Parent comment

Re:Parsing JSON is a Minefield by wtetzner on Wednesday October 26, 2016 @11:13AM (#12797081)
> Setting the session flag for "this user is logged in" before checking (or even decoding!) the password seems rather backwards to me.

Yeah, that seems like a problem regardless of whether or not you're parsing JSON.

[ Parent | on HN ]
Re:Parsing JSON is a Minefield by rch on Wednesday October 26, 2016 @11:19AM (#12797146)
Probably a symptom of the PHP multiverse: anything that can happen, has happened.
[ Parent | on HN ]
Re:Parsing JSON is a Minefield by oblio on Wednesday October 26, 2016 @01:53PM (#12798769)
And will continue to happen in a Wordpress setup somewhere.
[ Parent | on HN ]