LChecker: Detecting Loose Comparison Bugs in PHP
Penghui Li, Wei Meng
Abstract
Weakly-typed languages such as PHP support loosely comparing two operands by implicitly converting their types and values. Such a language feature is widely used but can also pose severe security threats. In certain conditions, loose comparisons can cause unexpected results, leading to authentication bypass and other functionality problems.
Topics & Concepts
OperandComputer scienceFeature (linguistics)Programming languageAuthentication (law)Message authentication codeComputer securityOperating systemCryptographyLinguisticsPhilosophyWeb Application Security VulnerabilitiesSecurity and Verification in ComputingAdvanced Malware Detection Techniques