The Web Security Mailing List
Hope you enjoy it.
http://danuxx.blogspot.com/2013/03/unauthorized-access-bypassing-php-strcmp.html
-- DanUx