Skip to content

Commit

Permalink
skrill validation update
Browse files Browse the repository at this point in the history
  • Loading branch information
danielkerr committed Feb 2, 2015
1 parent d68a3a5 commit 6e8db77
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion upload/catalog/controller/payment/skrill.php
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ public function callback() {
$md5hash = strtoupper(md5($hash));
$md5sig = $this->request->post['md5sig'];

if ($md5hash != $md5sig) {
if (($md5hash != $md5sig) || (strtolower($this->request->post['pay_to_email']) != strtolower($this->config->get('config_moneybookers_email'))) || ((float)$this->request->post['amount'] != $this->currency->format((float)$order_info['total'], $order_info['currency_code'], $order_info['currency_value'], false))) {
$verified = false;
}
}
Expand Down

0 comments on commit 6e8db77

Please sign in to comment.