Shopify/active_merchant — pull request #257 by larspind (2012-01-29 02:12:39+00:00)
Title: The md5 check actually needs to be done against all the params in the no...

...tification, except the md5check field itself, in the order in which they were received. That is the bullet-proof (and future-proof) way of doing it.