3 ms·
To validate that the mailgun response actually came from mailgun add this at line 17: if($_POST['signature'] !== hash_hmac('sha256', $_POST['timestamp'] . $_PO
by andrewjshults 15y ago
To validate that the mailgun response actually came from mailgun add this at line 17:
if($_POST['signature'] !== hash_hmac('sha256', $_POST['timestamp'] . $_POST['token'], MAILGUN_KEY)) { exit; }