$value) { // $data_check_arr[] = $key . '=' . $value; $data_check_arr[] = $key . '=' . str_replace('https:/t', 'https://t', $value); } sort($data_check_arr); $data_check_string = implode("\n", $data_check_arr); $secret_key = hash('sha256', TG_BOT_API_TOKEN, true); $hash = hash_hmac('sha256', $data_check_string, $secret_key); if (strcmp($hash, $check_hash) !== 0) { throw new Exception('Data is NOT from Telegram'); } if ((time() - $auth_data['auth_date']) > 86400) { throw new Exception('Data is outdated'); } return $auth_data; } /** * Save telegram userdata * * Save the telegram user data in a cookie * @return void */ function saveTelegramUserData($auth_data) { $auth_data_json = json_encode($auth_data); setcookie('tg_user', $auth_data_json); }