The Hidden Risks of Hash Functions: Length Extension Attacks and Server-Side Security Vulnerabilities