FM / src

/home/techb158/ileadtechnology.com/vendor/razorpay/razorpay/src/

/home/techb158/ileadtechnology.com/vendor/razorpay/razorpay/src

Name	Size	Mode	Actions
Errors/	-	0755	rm
Addon.php	556	0644	edit dl rm
Api.php	1648	0644	edit dl rm
ArrayableInterface.php	177	0644	edit dl rm
Card.php	182	0644	edit dl rm
Collection.php	308	0644	edit dl rm
Customer.php	721	0644	edit dl rm
Entity.php	5706	0644	edit dl rm
FundAccount.php	522	0644	edit dl rm
Invoice.php	2371	0644	edit dl rm
Item.php	654	0644	edit dl rm
Order.php	916	0644	edit dl rm
Payment.php	5090	0644	edit dl rm
PaymentLink.php	1783	0644	edit dl rm
PaymentPage.php	582	0644	edit dl rm
Plan.php	341	0644	edit dl rm
QrCode.php	1501	0644	edit dl rm
Refund.php	752	0644	edit dl rm
Request.php	6056	0644	edit dl rm
Resource.php	1158	0644	edit dl rm
Settlement.php	2003	0644	edit dl rm
Subscription.php	2246	0644	edit dl rm
Token.php	677	0644	edit dl rm
Transfer.php	1442	0644	edit dl rm
Utility.php	2694	0644	edit dl rm
VirtualAccount.php	1363	0644	edit dl rm
Webhook.php	727	0644	edit dl rm

Edit: /home/techb158/ileadtechnology.com/vendor/razorpay/razorpay/src/Utility.php (2694B)

<?php

namespace Razorpay\Api;

class Utility
{
    const SHA256 = 'sha256';

public function verifyPaymentSignature($attributes)
    {
        $actualSignature = $attributes['razorpay_signature'];

$paymentId = $attributes['razorpay_payment_id'];

if (isset($attributes['razorpay_order_id']) === true)
        {
            $orderId = $attributes['razorpay_order_id'];

$payload = $orderId . '|' . $paymentId;
        }
        else if (isset($attributes['razorpay_subscription_id']) === true)
        {
            $subscriptionId = $attributes['razorpay_subscription_id'];

$payload = $paymentId . '|' . $subscriptionId;
        }
        else if (isset($attributes['razorpay_payment_link_id']) === true)
        {
            $paymentLinkId     = $attributes['razorpay_payment_link_id'];

$paymentLinkRefId  = $attributes['razorpay_payment_link_reference_id'];

$paymentLinkStatus = $attributes['razorpay_payment_link_status'];

$payload = $paymentLinkId . '|'. $paymentLinkRefId . '|' . $paymentLinkStatus . '|' . $paymentId;
        }
        else
        {
            throw new Errors\SignatureVerificationError(
                'Either razorpay_order_id or razorpay_subscription_id or razorpay_payment_link_id must be present.');
        }

$secret = Api::getSecret();

self::verifySignature($payload, $actualSignature, $secret);
    }

public function verifyWebhookSignature($payload, $actualSignature, $secret)
    {
        self::verifySignature($payload, $actualSignature, $secret);
    }

public function verifySignature($payload, $actualSignature, $secret)
    {
        $expectedSignature = hash_hmac(self::SHA256, $payload, $secret);

// Use lang's built-in hash_equals if exists to mitigate timing attacks
        if (function_exists('hash_equals'))
        {
            $verified = hash_equals($expectedSignature, $actualSignature);
        }
        else
        {
            $verified = $this->hashEquals($expectedSignature, $actualSignature);
        }

if ($verified === false)
        {
            throw new Errors\SignatureVerificationError(
                'Invalid signature passed');
        }
    }

private function hashEquals($expectedSignature, $actualSignature)
    {
        if (strlen($expectedSignature) === strlen($actualSignature))
        {
            $res = $expectedSignature ^ $actualSignature;
            $return = 0;

for ($i = strlen($res) - 1; $i >= 0; $i--)
            {
                $return |= ord($res[$i]);
            }

return ($return === 0);
        }

return false;
    }
}

hashEquals($expectedSignature, $actualSignature); } if ($verified === false) { throw new Errors\SignatureVerificationError( 'Invalid signature passed'); } } private function hashEquals($expectedSignature, $actualSignature) { if (strlen($expectedSignature) === strlen($actualSignature)) { $res = $expectedSignature ^ $actualSignature; $return = 0; for ($i = strlen($res) - 1; $i >= 0; $i--) { $return |= ord($res[$i]); } return ($return === 0); } return false; } }