FM / xero

/home/desid573/public_html/gcdriver/payment/xero/

/home/desid573/public_html/gcdriver/payment/xero

Name	Size	Mode	Actions
certs/	-	0755	rm
lib/	-	0755	rm
tests/	-	0755	rm
.gitignore	142	0644	edit dl rm
.pdf	80381	0644	edit dl rm
7320c944-101d-4f21-924f-5c49298ec5df.pdf	80381	0644	edit dl rm
addContact.php	7956	0644	edit dl rm
addNewContact.php	0	0644	edit dl rm
class.phpmailer.php	80046	0644	edit dl rm
class.pop3.php	10385	0644	edit dl rm
class.smtp.php	24586	0644	edit dl rm
composer.json	556	0644	edit dl rm
error_log	1092195	0644	edit dl rm
getInvoice.php	7956	0644	edit dl rm
getInvoiceReturn.php	7956	0644	edit dl rm
index.php	500	0644	edit dl rm
invoiceRetrieve.php	2137	0644	edit dl rm
invoiceSend.php	10187	0644	edit dl rm
license.txt	1055	0644	edit dl rm
partner.php	4100	0644	edit dl rm
private.php	1622	0644	edit dl rm
public.php	4252	0644	edit dl rm
README.md	7266	0644	edit dl rm
webhook.php	1641	0644	edit dl rm
_config.php	2281	0644	edit dl rm

Edit: /home/desid573/public_html/gcdriver/payment/xero/webhook.php (1641B)

<?php
$payload = file_get_contents("php://input");
$webhookKey = "Nl+87oJjzw9MzP2FFmSxSxkh9XCQzl0A5xF4MvqSa+2ZshLLs1U8zUJNHuDuN06d5k8LGqEcN0BUoK7XFaikIw==";

$yourHash = base64_encode(hash_hmac('sha256', $payload, $webhookKey, true));
error_log($payload);
$isEqual = false;
if ($yourHash === $_SERVER['HTTP_X_XERO_SIGNATURE']) {
	http_response_code(200);
	$isEqual = true;
} else {
	http_response_code(401);
}

// Store information into file

// Request Headers
$filedata = sprintf(
  "%s %s %s\n\n---- Request headers ----\n",
  $_SERVER['REQUEST_METHOD'],
  $_SERVER['REQUEST_URI'],
  $_SERVER['SERVER_PROTOCOL']
);
foreach (getHeaderList() as $name => $value) {
  $filedata .= $name . ': ' . $value . "\n";
}

// Request Body
$filedata .= "\n---- Request body ----\n";
$filedata .= $payload . "\n";

// Signature key
$filedata .= "\n---- Signature key ----";

$filedata .= "\nComputed signature key:\n";
$filedata .= $yourHash;

$filedata .= "\nXero signature key:\n";
$filedata .= $_SERVER['HTTP_X_XERO_SIGNATURE'];

// Result
$filedata .= "\n\n---- Result ----\n";
if ($isEqual) {
  $filedata .= "Match";
} else {
  $filedata .= "Not match";
}

// Store to file
$currentTime = microtime();
$filename = substr($currentTime, 11) . substr($currentTime, 2, 8);

//output to file
//file_put_contents('./'.$filename.'.txt', $filedata);

// ----------------------------------------------------------------------------
// Helper function(s)

function getHeaderList() {
  $headerList = [];
  foreach ($_SERVER as $name => $value) {
    if (preg_match('/^HTTP_/',$name)) {
      $headerList[$name] = $value;
    }
  }
  return $headerList;
}

$value) { $filedata .= $name . ': ' . $value . "\n"; } // Request Body $filedata .= "\n---- Request body ----\n"; $filedata .= $payload . "\n"; // Signature key $filedata .= "\n---- Signature key ----"; $filedata .= "\nComputed signature key:\n"; $filedata .= $yourHash; $filedata .= "\nXero signature key:\n"; $filedata .= $_SERVER['HTTP_X_XERO_SIGNATURE']; // Result $filedata .= "\n\n---- Result ----\n"; if ($isEqual) { $filedata .= "Match"; } else { $filedata .= "Not match"; } // Store to file $currentTime = microtime(); $filename = substr($currentTime, 11) . substr($currentTime, 2, 8); //output to file //file_put_contents('./'.$filename.'.txt', $filedata); // ---------------------------------------------------------------------------- // Helper function(s) function getHeaderList() { $headerList = []; foreach ($_SERVER as $name => $value) { if (preg_match('/^HTTP_/',$name)) { $headerList[$name] = $value; } } return $headerList; } ?>