News for hackers. Stuff that matters.
Re:PHP: md5('240610708') == md5('QNKCDZO') by redthrowaway on Monday May 04, 2015 @02:16PM (#9487973)
Type coercion is fine so long as you recognize it as the syntactic sugar that it is. JS and PHP support easy type coercion because HTTP is string-only and it would be a pain in the ass to explicitly cast every value you get over the wire. You just have to be sure that, when you use it, you do so intentionally and not out of laziness.
Re:PHP: md5('240610708') == md5('QNKCDZO') by steego on Monday May 04, 2015 @04:01PM (#9488715)
Here's what I took away::

It's pain in the ass to validate and sanitize your input.