Update: 2026-06-11 19:26:42

walletintaleq.intaleq.xyz/v2/main/ride/mtn_new/mtn_webhook_handler.php

@@ -13,7 +13,7 @@ header('Content-Type: application/json');
 $expectedToken = trim(file_get_contents('/home/intaleq-wallet/.mtnKey')); // يجب استبداله بتوكن حقيقي
 $receivedToken = $_SERVER['HTTP_X_AUTH_TOKEN'] ?? '';
 
-if ($receivedToken !== $expectedToken) {
+if (!hash_equals($expectedToken, $receivedToken)) {
     http_response_code(401); // Unauthorized
     echo json_encode(["status" => "error", "message" => "Authentication failed."]);
     exit;