From 300d4fcc3ca40e5058743a58a11122848a876c27 Mon Sep 17 00:00:00 2001
From: aozhiwei <aozhiwei@kingsome.cn>
Date: Fri, 14 Jul 2023 13:54:20 +0800
Subject: [PATCH] 1

---
 webapp/services/callback/common/SignatureService.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/webapp/services/callback/common/SignatureService.php b/webapp/services/callback/common/SignatureService.php
index 6529a162..4aea21e0 100644
--- a/webapp/services/callback/common/SignatureService.php
+++ b/webapp/services/callback/common/SignatureService.php
@@ -20,6 +20,11 @@ class SignatureService {
             myself()-_rspErr(self::ERRCODE);
             die();
         }
+        $sign = self::normalMd5Sign($_REQUEST, $row['secret_key'], array('_sign'));
+        if ($sign != $row['signature']) {
+            myself()-_rspErr(self::ERRCODE);
+            die();
+        }
     }
 
     public static function normalMd5Sign($params, $secretKey, $excludeKeys){