@MrCoderMay 31.2007 — #Make sure all the values are typecasted as strings.
If the client passed the username of "0" and the password of "0" this could match since strings when compared with == will concate to the numeric value of 0.
This is quite advanced but it is something to look out for, always compare with === insted of == if you know what type of value you are comparing.