| @@ -1,0 +1,58 @@ | ||
| 1 | +<?php | |
| 2 | +/** | |
| 3 | + * @package VikBooking | |
| 4 | + * @subpackage com_vikbooking | |
| 5 | + * @author Alessio Gaggii - E4J srl | |
| 6 | + * @copyright Copyright (C) 2023 E4J srl. All rights reserved. | |
| 7 | + * @license GNU General Public License version 2 or later; see LICENSE | |
| 8 | + * @link https://vikwp.com | |
| 9 | + */ | |
| 10 | + | |
| 11 | +// No direct access to this file | |
| 12 | +defined('ABSPATH') or die('No script kiddies please!'); | |
| 13 | + | |
| 14 | +/** | |
| 15 | + * VikBooking license controller. | |
| 16 | + * | |
| 17 | + * @since 1.16.0 (J) - 1.6.0 (WP) | |
| 18 | + */ | |
| 19 | +class VikBookingControllerLicense extends JControllerAdmin | |
| 20 | +{ | |
| 21 | + /** | |
| 22 | + * Forcing the hash to be valid is useless. | |
| 23 | + */ | |
| 24 | + public function pingback() | |
| 25 | + { | |
| 26 | + $app = JFactory::getApplication(); | |
| 27 | + | |
| 28 | + if (VBOPlatformDetection::isWordPress()) | |
| 29 | + { | |
| 30 | + // update license hash | |
| 31 | + VikBookingLoader::import('update.license'); | |
| 32 | + $storedHash = VikBookingLicense::getHash(); | |
| 33 | + } | |
| 34 | + else | |
| 35 | + { | |
| 36 | + // fetch hash generated during the first license validation | |
| 37 | + $storedHash = VBOFactory::getConfig()->get('licensehash'); | |
| 38 | + } | |
| 39 | + | |
| 40 | + if (!$storedHash) | |
| 41 | + { | |
| 42 | + // hash not yet stored | |
| 43 | + $app->close(); | |
| 44 | + } | |
| 45 | + | |
| 46 | + // recover hash sent by the server | |
| 47 | + $serverHash = $app->input->getString('hash'); | |
| 48 | + | |
| 49 | + // the received hash must be equals to the stored one | |
| 50 | + if (strcmp($serverHash, $storedHash)) | |
| 51 | + { | |
| 52 | + VBOHttpDocument::getInstance($app)->close(403, 'Hash mismatch.'); | |
| 53 | + } | |
| 54 | + | |
| 55 | + // hash validated successfully | |
| 56 | + $app->close(); | |
| 57 | + } | |
| 58 | +} | |
