The guy was talking about comparing $name and $pass, so my guess is that the latter (which I presume to be the hash value) is a string. Comparing "foo"=="bar" will return true, which isn't worth much as a password check.