Merge pull request #13 from superbrave/check-transaction-reference

Check if we're updating the correct transaction

Author: krijn-sb

src/Message/TransactionStatusRequest.php

@@ -77,6 +77,12 @@ private function getTransactionStatusFromPostBack(): ?TransactionStatusResponse
 
         $this->setContractProfileId($contentAsStdObj->ContractProfileId);
 
+        // Make sure we're updating the correct payment by reference, and not all of them.
+        // Note: $contentAsArray['Reference'] is not the same as TransactionReference.
+        if ($this->getTransactionReference() !== trim($contentAsArray['TransactionId'])) {
+            return null;
+        }
+
         if ($this->validateSecurityHashMatch($this->httpRequest, $contentAsStdObj) === false) {
             return null;
         }