Checksum Security check not passed

There is some problem with current code of checksum of the module. I am giving you idea how to fix it.

Some background from the API of BBB

http://code.google.com/p/bigbluebutton/wiki/API#Create_meeting_example:

Any query which has to be passed to bbb server is sent in encrypted format using sh1 algorithm using key which is known as salt key of server

You can know the salt key by typing bbb-conf -salt in your server.

So if the sh1 code of query doesn't match from what you passed to what server calculated , it will say checksum error.

Read more about it at link above.

-----------

How to fix it

for example see the create call in api.bbb.inc

request for create should be modified as

$request = BIGBLUEBUTTON_BASE_URL . BIGBLUEBUTTON_CREATE_URL . '?' . $query_string.'&checksum=' .
sha1('create'.$query_string . BIGBLUEBUTTON_SECURITY_SALT);

Currently checksum for sh1 is calculated wrongly.

Hope it helps.

benevolent001 got me on the right track. Trouble is the function that generates the value assigned to $query_string already appends an incorrect checksum to it.

Two choices, modify the bbb_api_generate_querystring to not add the checksum value to the string then manually add the checksum to each function using that function or modify the bbb_api_generate_querystring function to take an additional argument and modify the functions to take advantage of this.

I've attached my modified api.bbb.inc file where I've implemented the latter. Works fine with BBB Version .80 and module Version 6.x-1.0-beta1.

Here's the same fix as a patch.

I might be wrong, but this thread seems to be based on the beta version which never worked.
(for example, BIGBLUEBUTTON_BASE_URL id now called BBB_API_BASE_URL)

The only capable version is the latest dev, which seems to address this more correctly (though I have problems currently) .