View difference between Paste ID: zvdgGi0Z and m92U2FD4

 <?php
 $your_app_key = "MY_OFFERTORO_SECRET_APP_KEY";
 define("MYSQL_HOST", "MY_DB_HOST");
 define("MYSQL_PORT", "3306");
 define("MYSQL_DB", "MY_DB_NAME");
 define("MYSQL_TABLE", "MY_DB_TABLE");
 define("MYSQL_USER", "MY_DB_USER");
 define("MYSQL_PASS", "MY_DB_PASSWORD");
 $mysqli = new mysqli(MYSQL_HOST, MYSQL_USER, MYSQL_PASS, MYSQL_DB);
 if ($mysqli->connect_errno)
 {
   echo "Failed to connect to MySQL: (" . $mysqli->connect_errno . ") " . $mysqli->connect_error;
 }
 
 $oid = isset($_GET['oid']) ? $_GET['oid'] : null;
 $o_name = isset($_GET['o_name']) ? $_GET['o_name'] : null;
 $amount = isset($_GET['amount']) ? $_GET['amount'] : null;
 $currency_name = isset($_GET['currency_name']) ? $_GET['currency_name'] : null;
 $user_id = isset($_GET['user_id']) ? $_GET['user_id'] : null;
 $sig = isset($_GET['sig']) ? $_GET['sig'] : null;
 $payout = isset($_GET['payout']) ? $_GET['payout'] : null;
 $ip_address = isset($_GET['ip_address']) ? $_GET['ip_address'] : "0.0.0.0";
 
-$my_signature = md5($oid.$user_id.$your_app_key);
+$my_signature = md5($oid.'-'.$user_id.'-'.$your_app_key);
 
 if($my_signature != trim($sig)){
   echo "0";
   exit(0);
 }
 
 $sql = "UPDATE ".MYSQL_TABLE." SET solde=solde+".$mysqli->real_escape_string($amount)." WHERE id = ".$mysqli->real_escape_string($user_id);
 $result = $mysqli->query($sql);
 
 if($result){
   echo "1";
 }else{
   echo "0";
 }
 
 exit(0);
 
 ?>