PHP Weak Comparison with MD5 Collisions