Use hash_equals where needed

This commit is contained in:
Mike Jolley 2017-06-13 13:54:02 +01:00
parent e24ca9d3bc
commit ba2bf67bb9
1 changed files with 1 additions and 1 deletions

View File

@ -668,7 +668,7 @@ class WC_Gateway_Simplify_Commerce extends WC_Payment_Gateway_CC {
$order_id = absint( $_REQUEST['reference'] );
$order = wc_get_order( $order_id );
if ( $signature === $_REQUEST['signature'] ) {
if ( hash_equals( $signature, $_REQUEST['signature'] ) ) {
$order_complete = $this->process_order_status( $order, $_REQUEST['paymentId'], $_REQUEST['paymentStatus'], $_REQUEST['paymentDate'] );
if ( ! $order_complete ) {