mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-27 00:05:46 +02:00
Code Issues Releases Wiki Activity

Fixed Downloads security NGINX MD5 generation

Browse Source 
- FIX: Blocker bug generating the wrong MD5 string for NGINX
       secure_link_md5
- FIX: Bad instructions in LAN_DL_SECURITY_DESCRIPTION
This commit is contained in:
Nick Liu
2018-05-01 05:26:40 -05:00
parent 0d7f7dc543
commit e36b029f78
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
e107_plugins/download/handlers/NginxSecureLinkMd5Decorator.php
View File

@@ -43,7 +43,7 @@ class NginxSecureLinkMd5Decorator implements SecureLinkDecorator
);
$query_string = $url_parts['query'];
parse_str($query_string, $query_args);
$query_args['md5'] = md5($evaluation);
$query_args['md5'] = str_replace(array('+', '/', '='), array('-', '_', ''), base64_encode(md5($evaluation, true)));
if (strpos($prefs['download_security_expression'], '$secure_link_expires') !== false)
$query_args['expires'] = $expiry;
require_once(__DIR__.'/../includes/shim_http_build_url.php');