Update getProfiles.php

getProfiles.php

@@ -20,8 +20,11 @@
         curl_setopt($ch, CURLOPT_POSTFIELDS, $xml->asXML());
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
         curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 300);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+	// The following two curl SSL options are to "false" for ease of development/debug purposes only.
+	// Any code used in production should either remove these lines or set them to the appropriate
+	// values to properly use secure connections for PCI-DSS compliance.
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);	//for production, set value to true or 1
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);	//for production, set value to 2
         curl_setopt($ch, CURLOPT_DNS_USE_GLOBAL_CACHE, false );
         $content = curl_exec($ch);
         $profileResponse = new SimpleXMLElement($content);