| @@ -82,9 +82,9 @@ | ||
| 82 | 82 | } |
| 83 | 83 | |
| 84 | 84 | if ( $ticket_id && $auth_code ) { |
| 85 | 85 | $ticket = new WPSC_Ticket( $ticket_id ); |
| 86 | - self::$url_auth = $ticket->auth_code == $auth_code ? true : false; | |
| 86 | + self::$url_auth = ( $ticket->auth_code && hash_equals( (string) $ticket->auth_code, $auth_code ) ); | |
| 87 | 87 | } |
| 88 | 88 | } |
| 89 | 89 | |
| 90 | 90 | ob_start();?> |
