← All changes | includes/Api.php +5 -3 1.4.0 → 1.8.0 View file →

		@@ -35,13 +35,15 @@
35	35	*
36	36	* @return bool
37	37	*/
38	38	public function has_valid_key() {
39		- if ( flywp()->has_key() && flywp()->get_key() === $this->get_bearer_token() ) {
40		- return true;
	39	+ $token = $this->get_bearer_token();
	40	+
	41	+ if ( ! flywp()->has_key() || ! is_string( $token ) ) {
	42	+ return false;
41	43	}
42	44
43		- return false;
	45	+ return hash_equals( flywp()->get_key(), $token );
44	46	}
45	47
46	48	/**
47	49	* Get bearer token from Authorization header.