40 lines
669 B
Plaintext
40 lines
669 B
Plaintext
include::../description.adoc[]
|
|
|
|
== Noncompliant Code Example
|
|
|
|
[source,php]
|
|
----
|
|
$data = $_GET["data"];
|
|
$object = unserialize($data);
|
|
// ...
|
|
----
|
|
|
|
== Compliant Solution
|
|
|
|
[source,php]
|
|
----
|
|
$data = $_GET["data"];
|
|
|
|
list($hash, $data) = explode('|', $data, 2);
|
|
$hash_confirm = hash_hmac("sha256", $data, "secret-key");
|
|
|
|
// Confirm that the data integrity is not compromised
|
|
if ($hash === $hash_confirm) {
|
|
$object = unserialize($data);
|
|
// ...
|
|
}
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
'''
|
|
== Implementation Specification
|
|
(visible only on this page)
|
|
|
|
include::../message.adoc[]
|
|
|
|
include::../highlighting.adoc[]
|
|
|
|
endif::env-github,rspecator-view[]
|