Important security fix

2026-08-09 21:01:00 +00:00 · 2026-08-05 10:39:38 +03:00
parent 94f5593f22
commit ae2d835a84
5 changed files with 40 additions and 10 deletions
@@ -98,7 +98,7 @@ class Market
        if (
            isset($get['t'], $get['a']) &&
            $get['t'] == 1 &&
-            $get['a'] == $session->mchecker &&
+            hash_equals((string) $session->mchecker, (string) ($get['a'] ?? '')) &&
            !isset($get['del'])
        ) {
            $session->changeChecker();