Merge pull request #12 from sambohler/master

Security Patch
bitpay · Oct 10, 2014 · 0fd6651 · 0fd6651
2 parents e8688fa + 92fdf13
commit 0fd6651
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/bitpay/bp_lib.php b/bitpay/bp_lib.php
@@ -130,7 +130,12 @@ function bpVerifyNotification($apiKey = false) {
 		return 'authentication failed (bad hash)';
 	$json['posData'] = $posData['posData'];
 
-	return $json;
+	if (!array_key_exists('id', $json))
+        {
+            return 'Cannot find invoice ID';
+        }
+
+        return bpGetInvoice($json['id'], $apiKey);
 }
 
 // $options can include ('apiKey')
@@ -143,6 +148,10 @@ function bpGetInvoice($invoiceId, $apiKey=false) {
 	if (is_string($response))
 		return $response; // error
 	$response['posData'] = json_decode($response['posData'], true);
+	if($bpOptions['verifyPos'])
+        {
+            $response['posData'] = $response['posData']['posData'];
+        }
 	return $response;	
 }