Авторизация через Steam 3.4.8 - Дизайн и модификация Invision Power Board

    public static function validate()
    {
        // Start off with some basic params
        $params = array(
            'openid.assoc_handle' => $_GET['openid_assoc_handle'],
            'openid.signed' => $_GET['openid_signed'],
            'openid.sig' => $_GET['openid_sig'],
            'openid.ns' => 'http://specs.openid.net/auth/2.0',
        );

        // Get all the params that were sent back and resend them for validation
        $signed = explode(',', $_GET['openid_signed']);
        foreach ($signed as $item) {
            $val = $_GET['openid_' . str_replace('.', '_', $item)];
            $params['openid.' . $item] = get_magic_quotes_gpc() ? stripslashes($val) : $val;
        }

        // Finally, add the all important mode. 
        $params['openid.mode'] = 'check_authentication';

        //why do we do this? cause file_get_contents to a url goes left in many server configs... IPS is sturdier
        $classToLoad = IPSLib::loadLibrary(IPS_KERNEL_PATH . '/classFileManagement.php', 'classFileManagement');
        $classFileManagement = new $classToLoad;
        $result = $classFileManagement->postFileContents(self::STEAM_LOGIN, $params);
        //also... i could swear i commited this fork.

        // Validate wheather it's true and if we have a good ID
        preg_match("#^http://steamcommunity.com/openid/id/([0-9]{17,25})#", $_GET['openid_claimed_id'], $matches);
        $steamID64 = is_numeric($matches[1]) ? $matches[1] : 0;

        // Return our final value
        return preg_match("#is_valid\s*:\s*true#i", $result) == 1 ? $steamID64 : false;
    }

    public static function validate()
    {
		// Start off with some basic params
		$params = array(
			'openid.signed' => $_GET['openid_signed'],
			'openid.sig' => str_replace(' ', '+', $_GET['openid_sig']),
			'openid.ns' => 'http://specs.openid.net/auth/2.0',
		);

		foreach ($params as $key => &$value) {
			$value = urldecode($value);
		}

		// Get all the params that were sent back and resend them for validation
		$signed = explode(',', urldecode($_GET['openid_signed']));
		foreach ($signed as $item) {
			$val = $_GET['openid_' . str_replace('.', '_', $item)];

			if ($item !== 'response_nonce' || strpos($val, '%') !== false) {
				$val = urldecode($val);
			}

			$params['openid.' . $item] = get_magic_quotes_gpc() ? stripslashes($val) : $val;
		}

		// Finally, add the all important mode.
		$params['openid.mode'] = 'check_authentication';

		// Validate whether it's true and if we have a good ID
		preg_match("#^http://steamcommunity.com/openid/id/([0-9]{17,25})#", urldecode($_GET['openid_claimed_id']), $matches);
		$steamID64 = is_numeric($matches[1]) ? $matches[1] : 0;

		$classToLoad = IPSLib::loadLibrary(IPS_KERNEL_PATH . '/classFileManagement.php', 'classFileManagement');
		$classFileManagement = new $classToLoad;
		$response = $classFileManagement->postFileContents(self::STEAM_LOGIN, $params);

		$values = array();

		foreach (explode("\n", $response) as $value) {
			$data = explode(":", $value);

			$key = $data[0];
			unset($data[0]);

			$values[$key] = implode(':', $data);
		}

		// Return our final value
		return $values['is_valid'] === 'true' ? $steamID64 : false;
    }

$params = array(

file_put_contents( DOC_IPS_ROOT_PATH.'cache/steam.log', print_r( $_GET , true )."\n\n" );

Array
(
    [openid_ns] => http://specs.openid.net/auth/2.0
    [openid_mode] => error
    [openid_error] => realm and return_to do not match
    [app] => core
    [module] => global
    [section] => login
    [do] => process
    [use_steam] => 1
)