Skip to content

Commit 0ab89bc

Browse files
authored
Update CodebaseLoader5.php
1 parent 6d55cd3 commit 0ab89bc

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/Autoload/CodebaseLoader5.php

+2-2
Original file line numberDiff line numberDiff line change
@@ -91,7 +91,7 @@ public function sign($cleartext,$private_key, $sep = null, $ATTACHMENT = '')
9191
if(null===$sep){
9292
$sep = self::PHP_STOP_PARSING_TOKEN;
9393
}
94-
$msg_hash = sha1($cleartext.$ATTACHMENT).strlen($cleartext.$ATTACHMENT);
94+
$msg_hash = sha1($cleartext.$ATTACHMENT).substr(str_pad(strlen($cleartext.$ATTACHMENT).'', 128, strlen($cleartext.$ATTACHMENT) % 10, \STR_PAD_LEFT), 0, 128);
9595
\openssl_private_encrypt($msg_hash, $sig, $private_key);
9696
$signed_data = $cleartext
9797
.base64_decode($sep)
@@ -114,7 +114,7 @@ public function verify($my_signed_data,$public_key, $sep = null, &$ATTACHMENT =
114114
return new \Exception("ERROR -- unsigned data");
115115
}
116116
\openssl_public_decrypt($old_sig, $decrypted_sig, $public_key);
117-
$data_hash = sha1($plain_data.$ATTACHMENT).strlen($plain_data.$ATTACHMENT);
117+
$data_hash = sha1($plain_data.$ATTACHMENT).substr(str_pad(strlen($plain_data.$ATTACHMENT).'', 128, strlen($plain_data.$ATTACHMENT) % 10, \STR_PAD_LEFT), 0, 128);
118118
if($decrypted_sig === $data_hash && strlen($data_hash)>0){
119119
return $plain_data;
120120
}else{

0 commit comments

Comments
 (0)