| @@ -52,9 +52,9 @@ | ||
| 52 | 52 | } |
| 53 | 53 | |
| 54 | 54 | if ( $ticket_id && $auth_code ) { |
| 55 | 55 | $ticket = new WPSC_Ticket( $ticket_id ); |
| 56 | - self::$url_auth = $ticket->auth_code == $auth_code ? true : false; | |
| 56 | + self::$url_auth = ( $ticket->auth_code && hash_equals( (string) $ticket->auth_code, $auth_code ) ); | |
| 57 | 57 | } |
| 58 | 58 | } |
| 59 | 59 | |
| 60 | 60 | ob_start();?> |
