PHP : Undocumented feature: security parameters modification

The application contains the code that changes the logic of authentication by overwriting the variable that indicates whether the authentication is successful.

Using the assignment operator (=) instead of the comparison operator (==) is a common mistake. It is particularly dangerous and may be the part of the backdoor when occurs in the methods related to authentication.