💩 Imporve AES_KEY validation.

w7corp · Oct 12, 2016 · dad1c0f · dad1c0f
1 parent 0fc1d3d
commit dad1c0f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/Encryption/Encryptor.php b/src/Encryption/Encryptor.php
@@ -210,10 +210,14 @@ public function decode($decrypted)
      */
     protected function getAESKey()
     {
-        if (empty($this->AESKey) || strlen($this->AESKey) !== 43) {
+        if (empty($this->AESKey)) {
             throw new InvalidConfigException("Configuration mission, 'aes_key' is required.");
         }
 
+        if (strlen($this->AESKey) !== 43) {
+            throw new InvalidConfigException("The length of 'aes_key' must be 43.");
+        }
+
         return base64_decode($this->AESKey.'=', true);
     }