TestLink up to and including 1.9.20 allows type juggling for authentication bypass because === is not used.
testlink testlink