From a31eca4ae5740061f9140d3c25ca360e108204b4 Mon Sep 17 00:00:00 2001 From: James Mallison Date: Tue, 9 Jul 2013 10:27:27 +0100 Subject: [PATCH] Removed disable SSL peer verification [Issue #14](https://github.com/J7mbo/twitter-api-php/issues/14) suggests man in the middle attack possible, removed disabling SSL peer verification in cURL options (it wasn't needed anyway). --- TwitterAPIExchange.php | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/TwitterAPIExchange.php b/TwitterAPIExchange.php index abdb1da..bf15e11 100755 --- a/TwitterAPIExchange.php +++ b/TwitterAPIExchange.php @@ -11,7 +11,7 @@ * @license http://opensource.org/licenses/gpl-license.php GNU Public License * @link http://github.com/j7mbo/twitter-api-php */ -class TwitterAPIExchange +class TwitterAPIExchange { private $oauth_access_token; private $oauth_access_token_secret; @@ -193,8 +193,7 @@ public function performRequest($return = true) CURLOPT_HTTPHEADER => $header, CURLOPT_HEADER => false, CURLOPT_URL => $this->url, - CURLOPT_RETURNTRANSFER => true, - CURLOPT_SSL_VERIFYPEER => false + CURLOPT_RETURNTRANSFER => true ); if (!is_null($postfields))