Hi,

We implemented the Perl code described at 

http://www.mail-archive.com/e-gold-tech%40talk.e-gold.com/msg00403.html

but keep running into a serious problem: The condition

if ($handshake ne $INPUT{'V2_HASH'})

is ALWAYS true!

Does anyone have a few seconds to check out the code below? It's basically the same as 
at http://www.mail-archive.com/e-gold-tech%40talk.e-gold.com/msg00403.html, so I don't 
quite understand what's wrong.

Thanks for any suggestions!

Sincerely

Zing


-------------------------------
 

read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});

@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
        ($name, $value) = split(/=/, $pair);
        $value =~ tr/+/ /;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
        if ($INPUT{$name}) { $INPUT{$name} = $INPUT{$name}.",".$value; }
        else { $INPUT{$name} = $value; }
      $value =~ s/<!--(.|\n)*-->//g;
}

use Digest::Perl::MD5 'md5_hex';

$AltPassphrase="xxxxxxxxxxxx";

$handshake=uc(md5_hex 
qq!$INPUT{'PAYMENT_ID'}:$INPUT{'PAYEE_ACCOUNT'}:$INPUT{'PAYMENT_AMOUNT'}:$INPUT{'PAYMENT_UNITS'}:$INPUT{'PAYMENT_METAL_ID'}:$INPUT{'PAYMENT_BATCH_NUM'}:$INPUT{'PAYER_ACCOUNT'}:$AltPassphrase:$INPUT{'ACTUAL_PAYMENT_OUNCES'}:$INPUT{'USD_PER_OUNCE'}:$INPUT{'FEEWEIGHT'}:$INPUT{'TIMESTAMPGMT'}!);

chop($INPUT{'V2_HASH'});

if ($handshake ne $INPUT{'V2_HASH'})
{
        &to_the_end();
}
-- 

Get your free email from www.uymail.com 


Powered by Outblaze

---
You are currently subscribed to e-gold-tech as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

Use e-gold's Secure Randomized Keyboard (SRK) when accessing your e-gold account(s) 
via the web and shopping cart interfaces to help thwart keystroke loggers and common 
viruses.

Reply via email to