Logging in without a token in Laravel: the array that passed itself off as a token
A critical flaw in Laravel's TokenGuard let an attacker log in as a real user just by sending a simple array instead of a token. The bug is small, but its lesson matters to anyone who writes PHP.
- Laravel