Changeset 1671299

Timestamp:

06/05/2017 09:03:18 PM (9 years ago)

Author:

briancolinger

Message:

Check that the return value from openssl_verify() is 1.

File:

• vaultpress/trunk/vaultpress.php (modified) (1 diff)

vaultpress/trunk/vaultpress.php

@@ -1848 +1848 @@
                 unset( $post['sslsig'] );
             }
-            if ( openssl_verify( serialize( array( 'uri' => $uri, 'post' => $post ) ), base64_decode( $sslsig ), $this->get_option( 'public_key' ) ) ) {
+            if ( 1 === openssl_verify( serialize( array( 'uri' => $uri, 'post' => $post ) ), base64_decode( $sslsig ), $this->get_option( 'public_key' ) ) ) {
                 return true;
             } else {