• Hello,

    I had a problem with a newsletter where the links were causing an “Invalid signature” error.
    I’m using version 9.4.1, and the newsletter was sent using version 9.3.9.
    I investigated the source of the error and had to modify the verify_signature function in the statistics.php file to fix the problem.

    Here’s the modification I made:

        function verify_signature($text, $signature) {
    $signature = trim($signature);
    if (!$signature) {
    return 0;
    }

    $parts = explode('.', $signature, 2);
    if (count($parts) === 2) {
    $time = (int) $parts[0];

    $verified = hash_equals(md5($text . $time . $this->get_key()), $parts[1]);

    if (!$verified) {
    return 0;
    }
    return $time >= time() ? 1 : 2;
    } else {
    //return $this->check_signature($text, $signature) ? 2 : 0;
    return (md5($text . $this->get_key()) === $signature) ? 2 : 0;
    }
    }

    Can you please fix this in the next version.

Viewing 2 replies - 1 through 2 (of 2 total)
  • We had the exact same bug. All our links in the latest newsletter are broken.
    I applied the fixed but that’s annoying, a lot of subscribers faced buggy link 🙁

    Thanks for fix suggestion

    Plugin Support Michael Travan

    (@michael-travan)

    Hello @ixesse,

    I can confirm the bug and that your solution is the correct one, we will publish a new updated version of Newsletter as soon as possible with that patch included.

    On behalf of the whole Newsletter team, I’d like to thank you!

    Michael

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.