Member Avatar for sandipan.rcciit

hello frnd,
i want to integrate my web page with paypal service for shopping cart. for that purpose i use IPN (paypal notification service).
i create a page name ipn.php to catch the paypal post and another page paypal.inc.php to describe all the variable and action to be done with paypal.

But i want to know how to check that my code process perfectly or not??
and if its not perfect where i have to change in that script....
plz help me.

the 3 pages are attached with it.

proceed_next.php ---the payment form
paypal.inc.php---- paypal setting page
ipn.php----the ipn page .

<?php
session_start();
$sid=$_SESSION['sid'];
// this page only process a POST from paypal website
// so make sure that the one requesting this page comes
// from paypal. we can do this by checking the remote address
// the IP must begin with 66.135.197.
if (strpos($_SERVER['REMOTE_ADDR'], '66.135.197.') === false) {
	exit;
}

require_once 'paypal.inc.php';
include 'mysql-connect.php';
// repost the variables we get to paypal site
// for validation purpose
$result = fsockPost($paypal['url'], $_POST); 

//check the ipn result received back from paypal
if (eregi("VERIFIED", $result)) 
	{ 
	mysql_query("UPDATE order_table SET od_status='Paid' WHERE order_code='$sid'");
        
} 
else 
{ 
	exit;
} 


?>
<?php
/*
 * This file contain paypal settings and some functions.
 * Taken from "PHP Toolkit for PayPal v0.50" with some stuff
 * removed ( because i don't need them ) and slightly modified
 *
 */

$paypal = array();

$paypal['business']      = "sandip_1265983283_biz@gmail.com";
$paypal['site_url']      = "http://www.crispwerx.com/book";
$paypal['image_url']     = "";
$paypal['success_url']   = "success.php";
$paypal['cancel_url']    = "error.php";
$paypal['notify_url']    = "ipn.php";
$paypal['return_method'] = "2"; //1=GET 2=POST               --> Use post since we will need the return values to check if order is valid
$paypal['currency_code'] = "USD"; //['USD,GBP,JPY,CAD,EUR']
$paypal['lc']            = "US";

//$paypal['url'] = "https://www.paypal.com/cgi-bin/webscr";
$paypal['url']           = "https://www.sandbox.paypal.com/cgi-bin/webscr";
$paypal['post_method']   = "fso"; //fso=fsockopen(); curl=curl command line libCurl=php compiled with libCurl support
$paypal['curl_location'] = "/usr/local/bin/curl";

$paypal['bn']  = "toolkit-php";
$paypal['cmd'] = "_xclick";

//Payment Page Settings
$paypal['display_comment']          = "0"; //0=yes 1=no
$paypal['comment_header']           = "Comments";
$paypal['continue_button_text']     = "Continue >>";
$paypal['background_color']         = ""; //""=white 1=black
$paypal['display_shipping_address'] = "1"; //""=yes 1=no     --> We already asked for the shipping address so tell paypal not to ask it again
$paypal['display_comment']          = "1"; //""=yes 1=no

//Product Settings
$paypal['item_name']     = isset($_POST['item_name']) ? $_POST['item_name']: "";
$paypal['item_number']   = isset($_POST['item_number']) ? $_POST['item_number']: "";
$paypal['amount']        = isset($_POST['amount']) ? $_POST['amount']: "";
$paypal['on0']           = isset($_POST['on0']) ? $_POST['on0']: "";
$paypal['os0']           = isset($_POST['os0']) ? $_POST['os0']: "";
$paypal['on1']           = isset($_POST['on1']) ? $_POST['on1']: "";
$paypal['os1']           = isset($_POST['os1']) ? $_POST['os1']: "";
$paypal['quantity']      = isset($_POST['quantity']) ? $_POST['quantity']: "";
$paypal['edit_quantity'] = ""; //1=yes ""=no
$paypal['invoice']       = isset($_POST['invoice']) ? $_POST['invoice']: "";
$paypal['tax']           = isset($_POST['tax']) ? $_POST['tax']: "";

//Shipping and Taxes
$paypal['shipping_amount']          = isset($_POST['shipping_amount']) ? $_POST['shipping_amount']: "";
$paypal['shipping_amount_per_item'] = "";
$paypal['handling_amount']          = "";
$paypal['custom_field']             = "";

//Customer Settings
$paypal['firstname'] = isset($_POST['firstname']) ? $_POST['firstname']: "";
$paypal['lastname']  = isset($_POST['lastname']) ? $_POST['lastname']: "";
$paypal['address1']  = isset($_POST['address1']) ? $_POST['address1']: "";
$paypal['address2']  = isset($_POST['address2']) ? $_POST['address2']: "";
$paypal['city']      = isset($_POST['city']) ? $_POST['city']: "";
$paypal['state']     = isset($_POST['state']) ? $_POST['state']: "";
$paypal['zip']       = isset($_POST['zip']) ? $_POST['zip']: "";
$paypal['email']     = isset($_POST['email']) ? $_POST['email']: "";
$paypal['phone_1']   = isset($_POST['phone1']) ? $_POST['phone1']: "";
$paypal['phone_2']   = isset($_POST['phone2']) ? $_POST['phone2']: "";
$paypal['phone_3']   = isset($_POST['phone3']) ? $_POST['phone3']: "";



/********************************************************************************
*
*                           PAYPAL FUNCTIONS 
*
********************************************************************************/

//create variable names to perform additional order processing

function create_local_variables() 
{ 
	$array_name = array();
	$array_name['business'] = $_POST['business'];
	$array_name['receiver_email'] = $_POST['receiver_email'];
	$array_name['receiver_id'] = $_POST['receiver_id'];
	$array_name['item_name'] = $_POST['item_name'];
	$array_name['item_number'] = $_POST['item_number'];
	$array_name['quantity'] = $_POST['quantity'];
	$array_name['invoice'] = $_POST['invoice'];
	$array_name['custom'] = $_POST['custom'];
	$array_name['memo'] = $_POST['memo'];
	$array_name['tax'] = $_POST['tax'];
	$array_name['option_name1'] = $_POST['option_name1'];
	$array_name['option_selection1'] = $_POST['option_selection1'];
	$array_name['option_name2'] = $_POST['option_name2'];
	$array_name['option_selection2'] = $_POST['option_selection2'];
	$array_name['num_cart_items'] = $_POST['num_cart_items'];
	$array_name['mc_gross'] = $_POST['mc_gross'];
	$array_name['mc_fee'] = $_POST['mc_fee'];
	$array_name['mc_currency'] = $_POST['mc_currency'];
	$array_name['settle_amount'] = $_POST['settle_amount'];
	$array_name['settle_currency'] = $_POST['settle_currency'];
	$array_name['exchange_rate'] = $_POST['exchange_rate'];
	$array_name['payment_gross'] = $_POST['payment_gross'];
	$array_name['payment_fee'] = $_POST['payment_fee'];
	$array_name['payment_status'] = $_POST['payment_status'];
	$array_name['pending_reason'] = $_POST['pending_reason'];
	$array_name['reason_code'] = $_POST['reason_code'];
	$array_name['payment_date'] = $_POST['payment_date'];
	$array_name['txn_id'] = $_POST['txn_id'];
	$array_name['txn_type'] = $_POST['txn_type'];
	$array_name['payment_type'] = $_POST['payment_type'];
	$array_name['for_auction'] = $_POST['for_auction'];
	$array_name['auction_buyer_id'] = $_POST['auction_buyer_id'];
	$array_name['auction_closing_date'] = $_POST['auction_closing_date'];
	$array_name['auction_multi_item'] = $_POST['auction_multi_item'];
	$array_name['first_name'] = $_POST['first_name'];
	$array_name['last_name'] = $_POST['last_name'];
	$array_name['payer_business_name'] = $_POST['payer_business_name'];
	$array_name['address_name'] = $_POST['address_name'];
	$array_name['address_street'] = $_POST['address_street'];
	$array_name['address_city'] = $_POST['address_city'];
	$array_name['address_state'] = $_POST['address_state'];
	$array_name['address_zip'] = $_POST['address_zip'];
	$array_name['address_country'] = $_POST['address_country'];
	$array_name['address_status'] = $_POST['address_status'];
	$array_name['payer_email'] = $_POST['payer_email'];
	$array_name['payer_id'] = $_POST['payer_id'];
	$array_name['payer_status'] = $_POST['payer_status'];
	$array_name['notify_version'] = $_POST['notify_version'];
	$array_name['verify_sign'] = $_POST['verify_sign'];
	 
	return $array_name; 
}


//this function creates a comma separated value file from an array. 

function create_csv_file($file,$data) 
{
	// the return value
	$success = false;
	
	//check for array
	if (is_array($data)) { 
		$post_values = array_values($data); 
		
		//build csv data
		foreach ($post_values as $i) { 
			$csv.="\"$i\","; 
		}
		
		//remove the last comma from string
		$csv = substr($csv,0,-1); 
		
		//check for existence of file
		if(file_exists($file) && is_writeable($file)) { 
			$mode="a"; 
		} else { 
			$mode="w"; 
		}
		
		//create file pointer
		$fp=@fopen($file,$mode);
		 
		//write to file
		fwrite($fp,$csv . "\n"); 
		
		//close file pointer
		fclose($fp); 
		
		$success = true; 
	} 
	
	return $success;	 
}

//posts transaction data using fsockopen. 
function fsockPost($url,$data) 
{ 
	$postData = '';
	
	// return value
	$info = '';
	
	//Parse url 
	$web=parse_url($url); 
	
	//build post string 
	foreach ($data as $i=>$v) { 
		$postData.= $i . "=" . urlencode($v) . "&"; 
	}
	
	// we must append cmd=_notify-validate to the POST string
	// so paypal know that this is a confirmation post
	$postData .= "cmd=_notify-validate";
	
	//Set the port number
	if ($web['scheme'] == "https") { 
		$web['port'] = "443";  
		$ssl       = "ssl://"; 
	} else { 
		$web['port'] = "80"; 
		$ssl       = "";
	}  
	
	//Create paypal connection
	$fp = @fsockopen($ssl . $web[host], $web[port], $errnum, $errstr,30); 
	
	//Error checking
	if(!$fp) { 
		echo "$errnum: $errstr"; 
	} else { 
		//Post Data
		fputs($fp, "POST $web[path] HTTP/1.1\r\n"); 
		fputs($fp, "Host: $web[host]\r\n"); 
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n"); 
		fputs($fp, "Content-length: ".strlen($postData)."\r\n"); 
		fputs($fp, "Connection: close\r\n\r\n"); 
		fputs($fp, $postData . "\r\n\r\n"); 
	
		// loop through the response from the server 
		$info = array();
		while (!feof($fp)) { 
			$info[] = @fgets($fp, 1024); 
		} 
		
		//close fp - we are done with it 
		fclose($fp); 
		
		// join the results into a string separated by comma
		$info = implode(",", $info); 
		
	}
	
	return $info; 

} 

//Display Paypal Hidden Variables

function showVariables() {
	global $paypal; 
?> 

<!-- PayPal Configuration --> 
<input type="hidden" name="business" value="<?php echo $paypal['business']?>"> 
<input type="hidden" name="cmd" value="<?php echo $paypal['cmd']?>"> 
<input type="hidden" name="image_url" value="<?php echo  "{$paypal['site_url']}{$paypal['image_url']}"; ?>">
<input type="hidden" name="return" value="<?php echo  "{$paypal['site_url']}{$paypal['success_url']}"; ?>">
<input type="hidden" name="cancel_return" value="<?php echo  "{$paypal['site_url']}{$paypal['cancel_url']}"; ?>">
<input type="hidden" name="notify_url" value="<?php echo  "{$paypal['site_url']}{$paypal['notify_url']}"; ?>">
<input type="hidden" name="rm" value="<?php echo $paypal['return_method']?>">
<input type="hidden" name="currency_code" value="<?php echo $paypal['currency_code']?>">
<input type="hidden" name="lc" value="<?php echo $paypal['lc']?>">
<input type="hidden" name="bn" value="<?php echo $paypal['bn']?>">
<input type="hidden" name="cbt" value="<?php echo $paypal['continue_button_text']?>">

<!-- Payment Page Information --> 
<input type="hidden" name="no_shipping" value="<?php echo $paypal['display_shipping_address']?>">
<input type="hidden" name="no_note" value="<?php echo $paypal['display_comment']?>">
<input type="hidden" name="cn" value="<?php echo $paypal['comment_header']?>"> 
<input type="hidden" name="cs" value="<?php echo $payp
<?php
session_start();
$sid=$_SESSION['sid'];
$am=$_GET['var'];
$apm=round($am/46.1,2);


require_once 'paypal.inc.php';

$paypal['item_name'] = "Book Cart Item Purchase";
$paypal['invoice']   = $sid;
$paypal['amount']    = $apm;
if(isset($sid))
{
?>


<center>
    <p>&nbsp;</p>
    <p><font face="Verdana, Arial, Helvetica, sans-serif" size="2" color="333333">Processing 
        Transaction . . . </font></p>
</center>
<form action="<?php echo $paypal['url']; ?>" method="post" name="frmPaypal" id="frmPaypal">
<input type="hidden" name="amount" value="<?php echo $paypal['amount']; ?>">
<input type="hidden" name="invoice" value="<?php echo $paypal['invoice']; ?>">
<input type="hidden" name="item_name" value="<?php echo $paypal['item_name']; ?>">
<input type="hidden" name="business" value="<?php echo $paypal['business']; ?>"> 
<input type="hidden" name="cmd" value="<?php echo $paypal['cmd']; ?>"> 
<input type="hidden" name="return" value="<?php echo  $paypal['site_url'] . $paypal['success_url']; ?>">
<input type="hidden" name="cancel_return" value="<?php echo $paypal['site_url'] . $paypal['cancel_url']; ?>">
<input type="hidden" name="notify_url" value="<?php echo  $paypal['site_url'] . $paypal['notify_url']; ?>">

<input type="hidden" name="rm" value="<?php echo $paypal['return_method']; ?>">
<input type="hidden" name="currency_code" value="<?php echo $paypal['currency_code']; ?>">
<input type="hidden" name="lc" value="<?php echo $paypal['lc']; ?>">
<input type="hidden" name="bn" value="<?php echo $paypal['bn']; ?>">
<input type="hidden" name="no_shipping" value="<?php echo $paypal['display_shipping_address']; ?>">


</form>
<script language="JavaScript" type="text/javascript">
window.onload=function() {
	window.document.frmPaypal.submit();
}
</script>

<?php
}
else
exit;
  • 2 Contributors
  • 2 Replies
  • 306 Views
  • 7 Hours Discussion Span
  • Latest Post Latest Post by sandipan.rcciit

Dani AI

Generated

created an IPN listener and wants to know how to confirm it works; ’s client-side redirect check (success/error pages) is useful for immediate UX but does not validate the IPN flow. IPN is an asynchronous, server-to-server notification: the listener must accept PayPal’s POST, re-post the exact data back to PayPal for validation, then process the order only after PayPal returns a VERIFIED response.

Basic checklist to prove the listener is correct:

  • Make the listener publicly reachable (Sandbox and Live are separate). Log every incoming raw POST to a file (use file_get_contents('php://input')) so the exact bytes can be inspected.
  • Re-post the original POST data back to PayPal with cmd=_notify-validate and confirm the response equals VERIFIED. Treat anything else as INVALID.
  • Only on VERIFIED do these checks before touching the DB: payment_status is Completed, receiver_email (or merchant ID) matches the account, mc_gross and mc_currency match the order, and txn_id has not been processed before (to avoid duplicates). Log INVALID replies for manual review.
  • Return 200 OK quickly and output nothing; PayPal retries IPN if your endpoint fails. Use Sandbox + the IPN simulator for tests and inspect PayPal’s IPN History for delivery status. If developing locally, expose the listener with a tunnel (public URL) so PayPal can reach it.

Minimal PHP pattern for the verify step (illustrative):

$raw = file_get_contents('php://input');
$req  = 'cmd=_notify-validate&' . $raw;

$ch = curl_init('https://ipnpb.sandbox.paypal.com/cgi-bin/webscr');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true);
$res = curl_exec($ch);
curl_close($ch);

if (trim($res) === 'VERIFIED') {
    // validate fields (payment_status, receiver_email, mc_gross, txn_id) then update DB
} else {
    // log INVALID for debugging
}

Extra troubleshooting notes: enable verbose logging (incoming POST, re-post request, PayPal response, HTTP status), check server error logs and firewall, and ensure sandbox vs live endpoints match the environment.

Recommended Answers

All 2 Replies

Member Avatar for rajabhaskar525

hello frnd,
i want to integrate my web page with paypal service for shopping cart. for that purpose i use IPN (paypal notification service).
i create a page name ipn.php to catch the paypal post and another page paypal.inc.php to describe all the variable and action to be done with paypal.

But i want to know how to check that my code process perfectly or not??
and if its not perfect where i have to change in that script....
plz help me.

the 3 pages are attached with it.

proceed_next.php ---the payment form
paypal.inc.php---- paypal setting page
ipn.php----the ipn page .

hi
i am using paypal validation inmy project. i did some code to valide client details in paypal. if he enter valide datails he will go to success.php . otherwise he will redirect to error.php my code is the attached file. i stored the details in session to order details in success.php.

<?php
ob_start();
session_start();
extract($_REQUEST);
include("includes/connection.php");
//echo $_REQUEST['baddress'];exit;

if($_REQUEST['amt']!='')
{
    $_SESSION['shipping'] = $_REQUEST['shipping'];
	$_SESSION['sname'] = $_REQUEST['sname'];
	$_SESSION['semail'] = $_REQUEST['semail'];
	$_SESSION['slastname1'] = $_REQUEST['slastname'];
	$_SESSION['saddress1'] = $_REQUEST['saddress'];
	$_SESSION['sphone'] = $_REQUEST['sphone'];
	$_SESSION['szip'] = $_REQUEST['szip'];
	$_SESSION['sstate'] = $_REQUEST['sstate'];
	$_SESSION['scountry'] = $_REQUEST['scountry'];
	$_SESSION['bname'] = $_REQUEST['bname'];
	$_SESSION['bemail'] = $_REQUEST['bemail'];
	$_SESSION['blastname1'] = $_REQUEST['blastname'];
	$_SESSION['baddress1'] = $_REQUEST['baddress'];
    $_SESSION['bstate'] = $_REQUEST['bstate'];
	$_SESSION['bcountry'] = $_REQUEST['bcountry'];
	$_SESSION['bphone'] = $_REQUEST['bphone'];
	$_SESSION['bzip'] = $_REQUEST['bzip'];
	$_SESSION['amt'] = $_REQUEST['amt'];
	$_SESSION['qty'] = $_REQUEST['qty'];
	$_SESSION['ship_type'] = $_REQUEST['ship_type'];

?>
<!--https://www.paypal.com/cgi-bin/webscr-->
<form name="frmpay" method="post" action="https://www.paypal.com/cgi-bin/webscr">
  	<input type="hidden" name="business" value="info@yoursitename.com" />
	<input type="hidden" name="cmd" value="_xclick" />
	<input type="hidden" name="image_url" value="https://www.paypal.com/en_US/i/btn/x-click-but22.gif" />
  	<input type="hidden" name="return" value="http://www.yoursitename.com/pearls/success.php" />
	<input type="hidden" name="cancel_return" value="http://www.athensys.com/pearls/error.php" />
	<input type="hidden" name="currency_code" value="USD" />
	<input type="hidden" name="lc" value="US" />
	<input type="hidden" name="no_shipping" value="1">
	<input type="hidden" name="item_name" value="pearls" />
	<input type="hidden" name="amount" value="<?=$_SESSION['amt']?>" />
	<?php /*?><input type="hidden" name="shipping" value="<?=$_POST["shipping"]?>" /><?php */?>
	<input type="hidden" name="quantity" value="<?=$_SESSION['qty']?>" />
</form>

<? }?>
<body>
<script language="javascript">
	document.frmpay.submit();
</script>
</body>
Member Avatar for sandipan.rcciit

hi
i am using paypal validation inmy project. i did some code to valide client details in paypal. if he enter valide datails he will go to success.php . otherwise he will redirect to error.php my code is the attached file. i stored the details in session to order details in success.php.

Sorry frnd but i already do that stuff in my page name proceed_next.php page.

i want payment notification which is called (IPN) service where paypal post the value of transaction and then this page return back the same values and same order.

after that paypal match the values with the paypal existing values
and return VERIFIED for match and INVALID for non match.

i do all the staff in ipn.php and paypal.inc.php file

i want to do if data is verified then i do some internal database staff in my web page.
but i think the systm is not working properly plz can u help me???

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.