Merge pull request #1 from jakubboucek/curl-security-fix

Secutiry fix - verify API server SSL certificate
redbitcz · Jul 30, 2017 · e9d13a7 · e9d13a7
2 parents 1ed08b5 + e81d312
commit e9d13a7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libs/VyfakturujAPI.class.php b/libs/VyfakturujAPI.class.php
@@ -290,7 +290,7 @@ private function _connect($path,$method,$data = array()){
         curl_setopt($curl,CURLOPT_FAILONERROR,FALSE);
         curl_setopt($curl,CURLOPT_HTTPAUTH,CURLAUTH_BASIC);
         curl_setopt($curl,CURLOPT_USERPWD,$this->login.':'.$this->apiHash);
-        curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,false);
+        curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,TRUE);
         curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,2);
         curl_setopt($curl,CURLOPT_HTTPHEADER,array('Content-Type: application/json'));