[Spmn]

Quote:

Originally Posted by Luicy. Wanna know magic? Enter nothing and bomm, you're inside of anyones account. The strcmp() can't compare null with something else and then it will return true.

Thank God you're not a magician. What you said doesn't apply here because OP compares stored password against hashed input, which is guaranteed to be a non-null string.