OX6-161: Replace key hash algorithm from md5 to sha384

PAYONE-GmbH · May 17, 2024 · dba92b8 · dba92b8
1 parent dc6a9df
commit dba92b8
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/lib/fcporequest.php b/lib/fcporequest.php
@@ -148,7 +148,7 @@ public function __construct()
 
         $this->addParameter('mid', $oConfig->getConfigParam('sFCPOMerchantID')); //PayOne Merchant ID
         $this->addParameter('portalid', $oConfig->getConfigParam('sFCPOPortalID')); //PayOne Portal ID
-        $this->addParameter('key', md5($oConfig->getConfigParam('sFCPOPortalKey'))); //PayOne Portal Key
+        $this->addParameter('key', hash('sha384', $oConfig->getConfigParam('sFCPOPortalKey'))); //PayOne Portal Key
         if ($oConfig->isUtf()) {
             $this->addParameter('encoding', 'UTF-8'); //Encoding
         }
@@ -638,7 +638,7 @@ protected function _fcpoAddSecInvoiceParameters($oOrder) {
         $oConfig = $this->getConfig();
 
         $sSecinvoicePortalId = $oConfig->getConfigParam('sFCPOSecinvoicePortalId');
-        $sSecinvoicePortalKeyHash = md5($oConfig->getConfigParam('sFCPOSecinvoicePortalKey'));
+        $sSecinvoicePortalKeyHash = hash('sha384', $oConfig->getConfigParam('sFCPOSecinvoicePortalKey'));
         $this->addParameter('portalid', $sSecinvoicePortalId);
         $this->addParameter('key', $sSecinvoicePortalKeyHash);
 
@@ -659,7 +659,7 @@ protected function _fcpoAddBNPLPortalParameters() {
         $oConfig = $this->getConfig();
 
         $sPortalId = $oConfig->getConfigParam('sFCPOPLPortalId');
-        $sPortalKeyHash = md5($oConfig->getConfigParam('sFCPOPLPortalKey'));
+        $sPortalKeyHash = hash('sha384', $oConfig->getConfigParam('sFCPOPLPortalKey'));
         $this->addParameter('portalid', $sPortalId);
         $this->addParameter('key', $sPortalKeyHash);
     }
@@ -2629,7 +2629,7 @@ protected function _fcpoSetSecurePayPortal($oOrder)
         }
 
         $this->addParameter('portalid', $sFCPOSecinvoicePortalId);
-        $this->addParameter('key', md5($sFCPOSecinvoicePortalKey));
+        $this->addParameter('key', hash('sha384', $sFCPOSecinvoicePortalKey));
     }
 
     /**