Posted by Robin Vickery on 10/13/05 19:17

On 10/13/05, Graham Anderson <grahama@siren.cc> wrote:

> $realcmd = decrypt($cmd);
[...]
> elseif(decrypt($cmd) == $realcmd)

That's obviously going to succeed no matter what $cmd decrypts into.
It doesn't really tell you anything useful.

> $realcmd = decrypt($cmd); // 'makesmil'
[...]
> if( decrypt($cmd) == 'makesmil')

If this really fails, it means that $cmd doesn't decrypt into
'makesmil'. Are you sure that it's not been padded with spaces or
something?

-robin

[Back to original message]