Steve-Dee-Designs
/
woocommerce
mirror of https://github.com/woocommerce/woocommerce.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

code standards

This commit is contained in:
Max Rice 2014-04-03 16:10:08 -04:00
parent 342737907a
commit 9f463e4644
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
includes/api/class-wc-api-authentication.php
View File

@ -197,8 +197,9 @@ class WC_API_Authentication {
array_walk( $params, array( $this, 'normalize_parameters' ) ); array_walk( $params, array( $this, 'normalize_parameters' ) );
// sort parameters // sort parameters
if ( ! uksort( $params, 'strcmp' ) ) if ( ! uksort( $params, 'strcmp' ) ) {
throw new Exception( __( 'Invalid Signature - failed to sort parameters', 'woocommerce' ), 401 ); throw new Exception( __( 'Invalid Signature - failed to sort parameters', 'woocommerce' ), 401 );
}
// form query string // form query string
$query_params = array(); $query_params = array();
@ -210,15 +211,17 @@ class WC_API_Authentication {
$string_to_sign = $http_method . '&' . $base_request_uri . '&' . $query_string; $string_to_sign = $http_method . '&' . $base_request_uri . '&' . $query_string;
if ( $params['oauth_signature_method'] !== 'HMAC-SHA1' && $params['oauth_signature_method'] !== 'HMAC-SHA256' ) if ( $params['oauth_signature_method'] !== 'HMAC-SHA1' && $params['oauth_signature_method'] !== 'HMAC-SHA256' ) {
throw new Exception( __( 'Invalid Signature - signature method is invalid', 'woocommerce' ), 401 ); throw new Exception( __( 'Invalid Signature - signature method is invalid', 'woocommerce' ), 401 );
}
$hash_algorithm = strtolower( str_replace( 'HMAC-', '', $params['oauth_signature_method'] ) ); $hash_algorithm = strtolower( str_replace( 'HMAC-', '', $params['oauth_signature_method'] ) );
$signature = base64_encode( hash_hmac( $hash_algorithm, $string_to_sign, $user->woocommerce_api_consumer_secret, true ) ); $signature = base64_encode( hash_hmac( $hash_algorithm, $string_to_sign, $user->woocommerce_api_consumer_secret, true ) );
if ( $signature !== $consumer_signature ) if ( $signature !== $consumer_signature ) {
throw new Exception( __( 'Invalid Signature - provided signature does not match', 'woocommerce' ), 401 ); throw new Exception( __( 'Invalid Signature - provided signature does not match', 'woocommerce' ), 401 );
}
} }
/** /**