|
|
@@ -75,7 +75,8 @@ class MemberService extends BaseService
|
|
|
}
|
|
|
|
|
|
// 敏感数据
|
|
|
- $signData = isset($params['userInfo'])?$params['userInfo']:'';
|
|
|
+ $signData = isset($params['userInfo'])?$params['userInfo']:[];
|
|
|
+ var_dump($signData);
|
|
|
$encryptedData = isset($signData['encryptedData'])?$signData['encryptedData']:'';
|
|
|
$iv = isset($signData['iv'])?$signData['iv']:'';
|
|
|
$signature = isset($signData['signature'])?$signData['signature']:'';
|
|
|
@@ -86,6 +87,7 @@ class MemberService extends BaseService
|
|
|
$openid = isset($result['openid']) ? $result['openid'] : '';
|
|
|
$sessionKey = isset($result['session_key']) ? $result['session_key'] : '';
|
|
|
$signature2 = sha1(htmlspecialchars_decode($rawData).$sessionKey);
|
|
|
+ var_dump($signature,$signature2);
|
|
|
// 验证签名
|
|
|
if ($signature2 !== $signature){
|
|
|
$this->error = '签名验证失败';
|