Benign ^100% php Download

subtain-laravel-payments v5.2.1

PHP secret variable compared to literalCalls a URL query serializer

SHA-256522d99c8c0e824c862ebac62abdb235be5a6f36590d1819b791b0e787fb24d91

Evidence

PHP function handle method core.blade.php · lines 93–103

⋯5 lines
98In the listener:
99```php
100public function handle(PaymentSucceeded $event): void
101{
102    $orderId = $event->result->invoiceId;    // from your metadata or invoiceId
103    $payment =  …

PHP secret variable compared to literal SignatureService.php · lines 65–74

48… ad)) {
              continue;
          }
68
          if ($key === 'amount') {
              $concatenated .= self::formatAmount($payload[$key]);
          } elseif ($key === 'customer') {
              $concatenated .= self::formatCustomer($payload[$key]);
          } else {
              $concatenated .= …

Calls the PHP hash() function SignatureService.php · lines 76–86

76        }
77
78        $concatenated .= $apiSecret;
79
80        return hash('sha384', $concatenated);
81    }
82
⋯4 lines

Compares two PHP values with hash_equals SignatureService.php · lines 109–117

109:72… onCurrency . $status . $apiToken . $apiSecret);
110
111        return hash_equals($expected, strtolower($receivedSignature));
112    }
113
⋯4 lines

PHP JSON deserialization SignatureService.php · lines 71–79

71:51… g $rawBody, string $postbackKey): bool
72    {
73        $payload = json_decode($rawBody, true);
74
75        if (! is_array($payload)) {
⋯4 lines

No evidence locations were recorded for this file. Raw result