gper/Gnuboard5
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[security]비회원 주문/개인결제 조회 uid를 HMAC-SHA256으로 강화

Browse Source
This commit is contained in:
thisgun
2026-04-16 02:15:29 +00:00
parent 3e0e8be6da
commit c00c73465a
14 changed files with 42 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mobile/shop/personalpayformupdate.php
+2 -2
View File
@@ -47,7 +47,7 @@ $hash_data = md5($pp_id.$good_mny.$pp['pp_time']);
if($pp['pp_tno']){
if( $default['de_pg_service'] == 'inicis' && ($pp_id === get_session('ss_personalpay_id') && $hash_data === get_session('ss_personalpay_hash')) ){
$uid = md5($pp['pp_id'].$pp['pp_time'].$_SERVER['REMOTE_ADDR']);
$uid = function_exists('get_shop_uid') ? get_shop_uid('personalpay', $pp['pp_id'], $pp['pp_time'], $_SERVER['REMOTE_ADDR']) : md5($pp['pp_id'].$pp['pp_time'].$_SERVER['REMOTE_ADDR']);
set_session('ss_personalpay_uid', $uid);
goto_url(G5_SHOP_URL.'/personalpayresult.php?pp_id='.$pp['pp_id'].'&uid='.$uid);
@@ -311,7 +311,7 @@ sql_query($sql);
set_session('ss_personalpay_id', '');
set_session('ss_personalpay_hash', '');
$uid = md5($pp['pp_id'].$pp['pp_time'].$_SERVER['REMOTE_ADDR']);
$uid = function_exists('get_shop_uid') ? get_shop_uid('personalpay', $pp['pp_id'], $pp['pp_time'], $_SERVER['REMOTE_ADDR']) : md5($pp['pp_id'].$pp['pp_time'].$_SERVER['REMOTE_ADDR']);
set_session('ss_personalpay_uid', $uid);
$is_noti_pay = isset($is_noti_pay) ? $is_noti_pay : false;