Gecko [ nrupathungauniversityblr.ac.in ]

Name	Size	Permission
Errors	[ DIR ]	drwxr-xr-x
Api.php	1.71 KB	-rwxr-xr-x
ArrayableInterface.php	190 B	-rwxr-xr-x
Card.php	196 B	-rwxr-xr-x
Collection.php	324 B	-rwxr-xr-x
Customer.php	661 B	-rwxr-xr-x
Entity.php	4.65 KB	-rwxr-xr-x
Invoice.php	414 B	-rwxr-xr-x
Order.php	594 B	-rwxr-xr-x
Payment.php	1014 B	-rwxr-xr-x
Refund.php	410 B	-rwxr-xr-x
Request.php	5.51 KB	-rwxr-xr-x
Resource.php	1.09 KB	-rwxr-xr-x
Token.php	707 B	-rwxr-xr-x
Utility.php	1.71 KB	-rwxr-xr-x

Code Editor : Utility.php

<?php

namespace Razorpay\Api;

class Utility
{
    const SHA256 = 'sha256';

public function verifyPaymentSignature($attributes)
    {
        $expectedSignature = $attributes['razorpay_signature'];
        $orderId = $attributes['razorpay_order_id'];
        $paymentId = $attributes['razorpay_payment_id'];

$payload = $orderId . '|' . $paymentId;

return self::verifySignature($payload, $expectedSignature);
    }

public function verifyWebhookSignature($payload, $expectedSignature)
    {
        return self::verifySignature($payload, $expectedSignature);
    }

public function verifySignature($payload, $expectedSignature)
    {
        $actualSignature = hash_hmac(self::SHA256, $payload, Api::getSecret());

// Use lang's built-in hash_equals if exists to mitigate timing attacks
        if (function_exists('hash_equals'))
        {
            $verified = hash_equals($actualSignature, $expectedSignature);
        }
        else
        {
            $verified = $this->hashEquals($actualSignature, $expectedSignature);
        }

if ($verified === false)
        {
            throw new Errors\SignatureVerificationError(
                'Invalid signature passed');
        }
    }

private function hashEquals($actualSignature, $expectedSignature)
    {
        if (strlen($expectedSignature) === strlen($actualSignature))
        {
            $res = $expectedSignature ^ $actualSignature;
            $return = 0;

for ($i = strlen($res) - 1; $i >= 0; $i--)
            {
                $return |= ord($res[$i]);
            }

return ($return === 0);
        }

return false;
    }
}

${this.title}

Code Editor : Utility.php