X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Floader.php;h=2216d8ac012dd843c40fa5eeeb68f1471291504d;hb=e19231f39d9d6583cc5753dbd2638c597957fdd1;hp=b3395fa389c8fa4f82982332c506967a2009f5aa;hpb=596c8ab32594401ca84abfbfe35513ddfff31bec;p=mailer.git diff --git a/inc/modules/loader.php b/inc/modules/loader.php index b3395fa389..2216d8ac01 100644 --- a/inc/modules/loader.php +++ b/inc/modules/loader.php @@ -16,7 +16,7 @@ * $Author:: $ * * -------------------------------------------------------------------- * * Copyright (c) 2003 - 2009 by Roland Haeder * - * Copyright (c) 2009 - 2012 by Mailer Developer Team * + * Copyright (c) 2009 - 2016 by Mailer Developer Team * * For more information visit: http://mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -41,12 +41,18 @@ if (!defined('__SECURITY')) { } // END - if // Is an URL specified? -if ((isGetRequestElementSet('url')) && (isGetRequestElementSet('hash'))) { +if ((isGetRequestElementSet('url')) && (isGetRequestElementSet('hash')) && (isGetRequestElementSet('salt'))) { // Decode URL $decodedUrl = decodeString(str_replace(' ', '+', compileUriCode(urldecode(getRequestElement('url'))))); + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'decodedUrl=' . $decodedUrl . ',hash=' . getRequestElement('hash')); + // Generate hash for comparing it - $hash = encodeHashForCookie(generateHash($decodedUrl, getRequestElement('hash'))); + $hash = encodeHashForCookie(generateHash($decodedUrl . getSiteKey() . getDateKey(), getRequestElement('salt'))); + + // Debug message + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'decodedUrl=' . $decodedUrl . ',hash=' . $hash); // Validate the URL and hash if ($hash != getRequestElement('hash')) {