WordPress.org
Get WordPress

Plugin Directory

Changeset 2827864


Ignore:
Timestamp:
12/02/2022 05:22:05 PM (3 years ago)
Author:
fygaro
Message:

Security Improvements

Location:
fygaro/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • fygaro/trunk/Fygaro_WC_gateway_0_0_1.php

    r2802637 r2827864  
    66 * Author: Fygaro
    77 * Author URI: http://www.fygaro.com
    8  * Version: 0.0.2
     8 * Version: 0.0.3
    99 *
    1010
    … …  
    386386
    387387            // verify it matches the signature provided in the jwt
    388             $is_signature_valid = ($base64_url_signature === $signature_provided);
     388            $is_signature_valid = hash_equals($base64_url_signature, $signature_provided);
    389389           
    390390            if ($is_token_expired || !$is_signature_valid) {

  • fygaro/trunk/Readme.txt

    r2827855 r2827864  
    22Tags: Fygaro, Online Payments, Gateway, Payment Button, Caribbean Payments, Central America Payments, Bank Integration, PayPal integration
    33Requires at least: 4.7
    4 Tested up to: 6.1
     4Tested up to: 6.1.1
    55Stable tag: 0.0.3
    66Contributors: fygaro
Note: See TracChangeset for help on using the changeset viewer.