Advertisement
sparkweb

Sample Code For Processing and Securing Order Desk Post JSON

Apr 18th, 2014
286
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 0.94 KB | None | 0 0
  1. <?php
  2. //Check For Order
  3. if (!isset($_POST['order'])) {
  4.     header(':', true, 400);
  5.     die('No Data Found');
  6. }
  7.  
  8. //Cbeck Store ID
  9. //Be sure to set your store ID. Ask Order Desk support if you aren't sure what it is.
  10. if (!isset($_SERVER['HTTP_X_ORDER_DESK_STORE_ID']) || $_SERVER['HTTP_X_ORDER_DESK_STORE_ID'] != "YOUR-STORE-ID") {
  11.     header(':', true, 403);
  12.     die('Unauthorized Request');
  13. }
  14.  
  15. //Check the Hash (optional)
  16. //The API Key can be found in the Advanced Settings section. Order Desk Pro only
  17. if (!isset($_SERVER['HTTP_X_ORDER_DESK_HASH']) || hash_hmac('sha256', rawurldecode($_POST['order']), 'YOUR_API_KEY') != $_SERVER['HTTP_X_ORDER_DESK_HASH']) {
  18.     header(':', true, 403);
  19.     die('Unauthorized Request');
  20. }
  21.  
  22. //Check Order Data
  23. $order = json_decode($_POST['order'], 1);
  24. if (!is_array($order)) {
  25.     header(':', true, 400);
  26.     die('Invalid Order Data');
  27. }
  28.  
  29. //Everything Checks Out -- do your thing
  30. echo "<pre>" . print_r($order, 1) . "</pre>";
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement