LChecker: Detecting Loose Comparison Bugs in PHP

Penghui Li, Wei Meng · 2021

Weakly-typed languages such as PHP support loosely comparing two operands by implicitly converting their types and values. Such a language feature is widely used but can also pose severe security threats. In certain conditions, loose comparisons can cause unexpected results, leading to authentication bypass and other functionality problems.

Read the paper · More papers on PaperTik