需要对安全算法进行从md5到SHA-256 HMAC php的更改

Question

if($type == "Credit Card") {
    unset($_POST["type"]);
    unset($_POST["order_id"]);
    $SECURE_SECRET = "MIGS_SS";  
    $vpcURL = $_POST["virtualPaymentClientURL"] . "?";  
    unset($_POST["SubButL"]);
    unset($_POST["virtualPaymentClientURL"]); 
    $md5HashData = $SECURE_SECRET;
    ksort ($_POST);
    $appendAmp = 0;

foreach($_POST as $key => $value) {
  if (strlen($value) > 0) {      
if ($appendAmp == 0) {
  $vpcURL .= urlencode($key) . '=' . urlencode($value);
  $appendAmp = 1;
  } else {
  $vpcURL .= '&' . urlencode($key) . "=" . urlencode($value);
}
  $md5HashData .= $value;
  }
}

if (strlen($SECURE_SECRET) > 0) {
  $vpcURL .= "&vpc_SecureHash=" . strtoupper(md5($md5HashData));
}

header("Location: ".$vpcURL);
} else {
header("Location: index.php?dz=eft&id=".$order_id."\n\n");
}

            foreach($_POST as $key => $value) {
         // create the hash input and URL leaving out any fields that have no  value
            if (strlen($value) > 0) {
        ?>
             <input type="hidden" name="<?php echo($key); ?>"  value="<?php    echo($value); ?>"/><br>
      <?php             
            if ((strlen($value) > 0) && ((substr($key, 0,4)=="vpc_") ||       (substr($key,0,5) =="user_"))) {
         $hashinput .= $key . "=" . $value . "&";
        }
        }

       }

       $hashinput = rtrim($hashinput, "&");
        ?>      
             <!-- attach SecureHash -->
             <input type="hidden" name="vpc_SecureHash"  value="<?php echo(strtoupper(hash_hmac('SHA256', $hashinput, pack('H*',$securesecret)))); ?>"/>
            <input type="hidden" name="vpc_SecureHashType" value="SHA256">

如果你能在我应该改变的地方写出正确的代码吗？

Answer 1

你为什么要改变整个代码..

只需将MD5函数更改为SHA即可。

if (strlen($SECURE_SECRET) > 0) {
  $vpcURL .= "&vpc_SecureHash=" . strtoupper(md5($md5HashData));
}

到

if (strlen($SECURE_SECRET) > 0) {
  $vpcURL .= "&vpc_SecureHash=" . strtoupper(sha1($md5HashData));
}