Correctly handle plugin checksums with multiple md5 checksums for sin…

…gle file. Fixes #40.
chesio · Feb 23, 2018 · 35c80a9 · 35c80a9
1 parent 5d6b1b0
commit 35c80a9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/classes/BlueChip/Security/Modules/Checksums/Verifier.php b/classes/BlueChip/Security/Modules/Checksums/Verifier.php
@@ -42,7 +42,9 @@ protected static function checkDirectoryForModifiedFiles(string $path, $checksum
             }
 
             // Compare MD5 hashes.
-            if (md5_file($pathname) !== $checksum) {
+            // Note that there can be multiple checksums provided for a single file (at least in plugin checksums).
+            $md5 = md5_file($pathname);
+            if (is_array($checksum) ? !in_array($md5, $checksum, true) : ($md5 !== $checksum)) {
                 $modified_files[] = $filename;
             }
         }