Merge pull request #13 from superbrave/check-transaction-reference

Check if we're updating the correct transaction
superbrave · Mar 5, 2020 · 3759bb0 · 3759bb0
2 parents e6cb614 + 2515ea0
commit 3759bb0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/Message/TransactionStatusRequest.php b/src/Message/TransactionStatusRequest.php
@@ -77,6 +77,12 @@ private function getTransactionStatusFromPostBack(): ?TransactionStatusResponse
 
         $this->setContractProfileId($contentAsStdObj->ContractProfileId);
 
+        // Make sure we're updating the correct payment by reference, and not all of them.
+        // Note: $contentAsArray['Reference'] is not the same as TransactionReference.
+        if ($this->getTransactionReference() !== trim($contentAsArray['TransactionId'])) {
+            return null;
+        }
+
         if ($this->validateSecurityHashMatch($this->httpRequest, $contentAsStdObj) === false) {
             return null;
         }