Merge branch 'rogervila-check-payments-with-hash-equals'

ssheduardo · Oct 8, 2023 · 8ae4fe9 · 8ae4fe9
2 parents cba1838 + b9f4eec
commit 8ae4fe9
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Sermepa/Tpv/Tpv.php b/src/Sermepa/Tpv/Tpv.php
@@ -875,7 +875,7 @@ public function check($key, $postData)
         $signatureReceived = $postData["Ds_Signature"];
         $signature = $this->generateMerchantSignatureNotification($key, $parameters);
 
-        return ($signature === $signatureReceived);
+        return hash_equals($signature, $signatureReceived);
     }
 
     /**