Fixed null error on hash_equal in Mage_Oauth_Model_Server (#3870)

OpenMage · Mar 5, 2024 · 40c9f1c · 40c9f1c
1 parent db3e41c
commit 40c9f1c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/code/core/Mage/Oauth/Model/Server.php b/app/code/core/Mage/Oauth/Model/Server.php
@@ -309,7 +309,7 @@ protected function _initToken()
             if (self::REQUEST_TOKEN == $this->_requestType) {
                 $this->_validateVerifierParam();
 
-                if (!hash_equals($this->_token->getVerifier(), $this->_protocolParams['oauth_verifier'])) {
+                if (!hash_equals((string)$this->_token->getVerifier(), $this->_protocolParams['oauth_verifier'])) {
                     $this->_throwException('', self::ERR_VERIFIER_INVALID);
                 }
                 if (!hash_equals((string)$this->_token->getConsumerId(), (string)$this->_consumer->getId())) {