Use hash_equals where needed
This commit is contained in:
parent
e24ca9d3bc
commit
ba2bf67bb9
|
@ -668,7 +668,7 @@ class WC_Gateway_Simplify_Commerce extends WC_Payment_Gateway_CC {
|
|||
$order_id = absint( $_REQUEST['reference'] );
|
||||
$order = wc_get_order( $order_id );
|
||||
|
||||
if ( $signature === $_REQUEST['signature'] ) {
|
||||
if ( hash_equals( $signature, $_REQUEST['signature'] ) ) {
|
||||
$order_complete = $this->process_order_status( $order, $_REQUEST['paymentId'], $_REQUEST['paymentStatus'], $_REQUEST['paymentDate'] );
|
||||
|
||||
if ( ! $order_complete ) {
|
||||
|
|
Loading…
Reference in New Issue