@IceWolf@masto.brightfur.net yup, PHP type juggling attacks are an entire rabbit hole... another fun one: your password comparison mechanism very likely has a timing attack embedded somewhere, unless you use a framework or special newer PHP functions built for security