WordPress.org
Get WordPress

Plugin Directory

Changeset 2834199


Ignore:
Timestamp:
12/15/2022 07:07:18 AM (3 years ago)
Author:
integrationdevpaytm
Message:

Minor security bug fix

Location:
paytm-payments/trunk
Files:
2 edited

Legend:

Unmodified
Added
Removed

  • paytm-payments/trunk/class.paytm.php

    r2833844 r2834199  
    740740        $mid = sanitize_text_field($_POST['mid']);
    741741        if ($_POST['is_webhook']==1) {
    742             $webhookUrl = $_POST['webhookUrl'];
     742            $webhookUrl = sanitize_text_field($_POST['webhookUrl']);
    743743        } else {
    744744            $webhookUrl = esc_url("https://www.dummyUrl.com"); //set this when unchecked

  • paytm-payments/trunk/includes/PaytmHelper.php

    r2833844 r2834199  
    102102            // Create token header as a JSON string
    103103            $header = json_encode(['alg' => 'HS512','typ' => 'JWT']);
    104             /* Create token payload as a JSON string
    105             $time = time()- (1* 60); */
    106             date_default_timezone_set("Asia/Kolkata");
    107             /* if($environment == 0){
    108              $time = time()- (33);
    109              }else{
    110              $time = time();
    111              }*/
     104            /* Create token payload as a JSON string */
    112105            $time = time();
    113106            $payload = json_encode(['client-id' => $clientId,'iat'=>$time]);
Note: See TracChangeset for help on using the changeset viewer.