D3Public/XRechnung4OXID
8
0
Fork 0
Code Pull Requests Actions Packages Projects Releases Activity

add/remove comments

Browse Source
This commit is contained in:
Markus Gärtner 2024-12-20 10:18:15 +01:00
parent a4ff51093e
commit 04dbe33ae7
1 changed files with 6 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/public/connect.php
View File

@ -218,16 +218,12 @@ MSQL;
public function checkParameter()
{
//todo add more check, maybe for methode
$aParameter = $this->getParameter();
// todo check accesstoken
//fnc
//oxid
//
//simple check, should optimize
$myConfig = Registry::getConfig();
$sSHOPCONNECTTOKEN = $myConfig->getConfigParam("d3xrechnung_SHOPCONNECTTOKEN");
$sSHOPCONNECTTOKEN = md5($aParameter['OXID'].$myConfig->getConfigParam("d3xrechnung_SHOPCONNECTTOKEN"). $aParameter['OXID']);
//dumpvar($aParameter,true);
//dumpvar($sSHOPCONNECTTOKEN,true);
if($aParameter['ID'] != $sSHOPCONNECTTOKEN)
{
return false;
@ -237,8 +233,9 @@ MSQL;
public function getParameter()
{
//todo maybe to some sanitize
return array(
'SecureID' => $_GET['ID'],
'ID' => $_GET['ID'],
'FNC' => $_GET['FNC'],
'OXID' => $_GET['OXID'],
);