One potential security issue in your application may be comparing strings with loose comparison. Let me show the example.

http://www.youtube.com/watch?v=bwa1XKMMklA2024-11-18 15:00:31