FM / src

/home/techb158/ileadtechnology.com/SSM/vendor/razorpay/razorpay/src/

/home/techb158/ileadtechnology.com/SSM/vendor/razorpay/razorpay/src

Name	Size	Mode	Actions
Errors/	-	0755	rm
Addon.php	381	0644	edit dl rm
Api.php	1648	0644	edit dl rm
ArrayableInterface.php	177	0644	edit dl rm
Card.php	182	0644	edit dl rm
Collection.php	304	0644	edit dl rm
Customer.php	721	0644	edit dl rm
Entity.php	5523	0644	edit dl rm
Invoice.php	2371	0644	edit dl rm
Order.php	563	0644	edit dl rm
Payment.php	1834	0644	edit dl rm
Plan.php	341	0644	edit dl rm
Refund.php	387	0644	edit dl rm
Request.php	5947	0644	edit dl rm
Resource.php	1063	0644	edit dl rm
Settlement.php	839	0644	edit dl rm
Subscription.php	755	0644	edit dl rm
Token.php	677	0644	edit dl rm
Transfer.php	1442	0644	edit dl rm
Utility.php	2223	0644	edit dl rm
VirtualAccount.php	749	0644	edit dl rm

Edit: /home/techb158/ileadtechnology.com/SSM/vendor/razorpay/razorpay/src/Utility.php (2223B)

<?php

namespace Razorpay\Api;

class Utility
{
    const SHA256 = 'sha256';

public function verifyPaymentSignature($attributes)
    {
        $actualSignature = $attributes['razorpay_signature'];

$paymentId = $attributes['razorpay_payment_id'];

if (isset($attributes['razorpay_order_id']) === true)
        {
            $orderId = $attributes['razorpay_order_id'];

$payload = $orderId . '|' . $paymentId;
        }
        else if (isset($attributes['razorpay_subscription_id']) === true)
        {
            $subscriptionId = $attributes['razorpay_subscription_id'];

$payload = $paymentId . '|' . $subscriptionId;
        }
        else
        {
            throw new Errors\SignatureVerificationError(
                'Either razorpay_order_id or razorpay_subscription_id must be present.');
        }

$secret = Api::getSecret();

self::verifySignature($payload, $actualSignature, $secret);
    }

public function verifyWebhookSignature($payload, $actualSignature, $secret)
    {
        self::verifySignature($payload, $actualSignature, $secret);
    }

public function verifySignature($payload, $actualSignature, $secret)
    {
        $expectedSignature = hash_hmac(self::SHA256, $payload, $secret);

// Use lang's built-in hash_equals if exists to mitigate timing attacks
        if (function_exists('hash_equals'))
        {
            $verified = hash_equals($expectedSignature, $actualSignature);
        }
        else
        {
            $verified = $this->hashEquals($expectedSignature, $actualSignature);
        }

if ($verified === false)
        {
            throw new Errors\SignatureVerificationError(
                'Invalid signature passed');
        }
    }

private function hashEquals($expectedSignature, $actualSignature)
    {
        if (strlen($expectedSignature) === strlen($actualSignature))
        {
            $res = $expectedSignature ^ $actualSignature;
            $return = 0;

for ($i = strlen($res) - 1; $i >= 0; $i--)
            {
                $return |= ord($res[$i]);
            }

return ($return === 0);
        }

return false;
    }
}

hashEquals($expectedSignature, $actualSignature); } if ($verified === false) { throw new Errors\SignatureVerificationError( 'Invalid signature passed'); } } private function hashEquals($expectedSignature, $actualSignature) { if (strlen($expectedSignature) === strlen($actualSignature)) { $res = $expectedSignature ^ $actualSignature; $return = 0; for ($i = strlen($res) - 1; $i >= 0; $i--) { $return |= ord($res[$i]); } return ($return === 0); } return false; } }