| Index: trunk/extensions/DonationInterface/payflowpro_gateway/extras/minfraud/minfraud.php |
| — | — | @@ -29,16 +29,6 @@ |
| 30 | 30 | $wgPayflowGatewayLog = ''; |
| 31 | 31 | |
| 32 | 32 | /** |
| 33 | | - * Custom string for 'salting' hashes |
| 34 | | - * |
| 35 | | - * Used to help make hashes harder to predict by potential attackers |
| 36 | | - * to help prevent CSRF, etc. PLEASE use this! |
| 37 | | - * Declare in LocalSettings.php |
| 38 | | - */ |
| 39 | | -global $wgPayflowGatewaySalt, $wgSecretKey; |
| 40 | | -$wgPayflowGatewaySalt = $wgSecretKey; |
| 41 | | - |
| 42 | | -/** |
| 43 | 33 | * Your minFraud license key. |
| 44 | 34 | */ |
| 45 | 35 | global $wgMinFraudLicenseKey; |
| Index: trunk/extensions/DonationInterface/payflowpro_gateway/payflowpro_gateway.php |
| — | — | @@ -45,7 +45,8 @@ |
| 46 | 46 | * potentially leave you and your users vulnerable to CSRF or other forms of |
| 47 | 47 | * attack. |
| 48 | 48 | */ |
| 49 | | -$wgPayflowGatewaySalt = ''; |
| | 49 | +global $wgPayflowGatewaySalt, $wgSecretKey; |
| | 50 | +$wgPayflowGatewaySalt = $wgSecretKey; |
| 50 | 51 | |
| 51 | 52 | global $wgPayflowGatewayDBserver, $wgPayflowGatewayDBname, $wgPayflowGatewayDBuser, $wgPayflowGatewayDBpassword; |
| 52 | 53 | $wgPayflowGatewayDBserver = $wgDBserver; |