Invalid Signature
-
Hello,
I had a problem with a newsletter where the links were causing an “Invalid signature” error.
I’m using version 9.4.1, and the newsletter was sent using version 9.3.9.
I investigated the source of the error and had to modify theverify_signaturefunction in thestatistics.phpfile to fix the problem.Here’s the modification I made:
function verify_signature($text, $signature) {
$signature = trim($signature);
if (!$signature) {
return 0;
}
$parts = explode('.', $signature, 2);
if (count($parts) === 2) {
$time = (int) $parts[0];
$verified = hash_equals(md5($text . $time . $this->get_key()), $parts[1]);
if (!$verified) {
return 0;
}
return $time >= time() ? 1 : 2;
} else {
//return $this->check_signature($text, $signature) ? 2 : 0;
return (md5($text . $this->get_key()) === $signature) ? 2 : 0;
}
}Can you please fix this in the next version.
Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
You must be logged in to reply to this topic.