Skip to content

Commit

Permalink
fixed , OPENSSL_NO_PADDING (#2135)
Browse files Browse the repository at this point in the history
* Fixed Security issue

Fixed Insecure randomness vulnerability

* Update BaseClient.php
  • Loading branch information
wr3nch0x1 committed Jun 29, 2021
1 parent e331782 commit 0be9f81
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/MicroMerchant/Kernel/BaseClient.php
Expand Up @@ -204,7 +204,7 @@ protected function encryptSensitiveInformation(string $string)

$encrypted = '';
$publicKeyResource = openssl_get_publickey($certificates);
$f = openssl_public_encrypt($string, $encrypted, $publicKeyResource);
$f = openssl_public_encrypt($string, $encrypted, $publicKeyResource, OPENSSL_NO_PADDING);
openssl_free_key($publicKeyResource);
if ($f) {
return base64_encode($encrypted);
Expand Down

0 comments on commit 0be9f81

Please sign in to comment.