Help translating a few line of PHP to CF

Sean Corfield's scripts at riaforge

CORRECTION -- in my last code, the url was NOT https, like it should have been.

so would this code need to be changed to https?


<cfhttp url="#url#">
<cfset response = cfhttp.filecontent>

btw... after you post, please email me with your paypal address to
$atsign="@"
"tim" + "h" +$atsign + "vy " + "ew.com"

Ian... thanks for the response.

>Why would one send a plain text string and that
same string md5 hashed

The idea is that its being sent over HTTPS anyways, so it is encrypted. The purpose of the plaintext + hash, is just to authenticate that call.

On the backend, we just take the hash, and see if it matches the plaintext + secret that we store in the db.

Hey I got another question.
I have updated the PHP code into a function that i need translated.
Its a little different now.
Can you port that for me, and i'll send you $10 over paypal?

thanks!

P.S.

Just out of curiosity. Why would one send a plain text string and that
same string md5 hashed to some API?

CORRECTIONS:
* Corrected 'mdf' typo to 'md5'
* Concatenated the 'secret' string to the 'query' string in the md5
hash function.

<cfscript>
apikey = "MY_API_KEY";
secret = "MY_SECRET";
apiurl = " http://domain.com/api";
epoch_time = now();

query = "cmd=MY_COMMAND&key=#apikey#&time=#epoch_time";
md5 = hash(query & secret,"MD5");
url = "#apiurl#?#query#&md5=#md5#;
</cfscript>

<cfhttp url="#url#">
<cfset response = cfhttp.filecontent>

Untested and only typed once into this reply.

<cfscript>
apikey = "MY_API_KEY";
secret = "MY_SECRET";
apiurl = " http://domain.com/api";
epoch_time = now();

query = "cmd=MY_COMMAND&key=#apikey#&time=#epoch_time";
mdf = hash(query,"MD5");
url = "#apiurl#?#query#&md5=#md5#;
</cfscript>

<cfhttp url="#url#">
<cfset response = cfhttp.filecontent>