Hi,
I want to ask if using paypal IPN requires a SSL Certificate, because our current web host is just HTTP.
The IPN (ipn.php) is working fine before the 2016 Merchant security upgrade. I am testing it with the Paypal Sandbox before live and it's causing a lot of issues.
I don't think we need SSL certificate (HTTPS) because it will redirect people to the paypal payment page and it already is HTTPS. Then I want to send them an email after payment is successful, so that's why I am using IPN.
I am using the code below: (not working)
<?php
header('HTTP/1.1 200 OK');
$firstName = $_POST['first_name'];
$lastName = $_POST['last_name'];
$payerEmail = $_POST['payer_email'];
$addressStreet = $_POST['address_street'];
$addressZip = $_POST['address_zip'];
$addressCity = $_POST['address_city'];
$txnID = $_POST['txn_id'];
$donateAmount = $_POST['mc_gross'];
$recipient_fullname = $_POST['custom'];
$recipient_email = $_POST['option_name2'];
$req = 'cmd=_notify-validate';
foreach ($_POST as $key => $value) {
$value = urlencode(stripslashes($value));
$req .= "&$key=$value";
}
// Set up the acknowledgement request headers
$header = "POST /cgi-bin/webscr HTTP/1.1\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Host: www.sandbox.paypal.com\r\n";
$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
// Open a socket for the acknowledgement request
//$fp = fsockopen('ssl://www.sandbox.paypal.com', 443, $errno, $errstr, 30);
$fp = fsockopen('www.sandbox.paypal.com', 443, $errno, $errstr, 30);
if(!$fp){
//Can not connect to PayPal to validate IPN message
}
else{
fputs($fp, $header . $req);
while(!feof($fp)) {
$res = fgets($fp, 1024);
file_put_contents('result.txt', var_export($_POST, true));
if (strcmp($res, "VERIFIED") == 0) {
$headers = "MIME-Version: 1.0" . "\r\n";
$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$headers .= "From: <myemail>" . "\r\n";
$subject = 'Subject line -VERIFIED';
$message="VERIFIED";
mail("myemail",$subject,$message,$headers);
}else if(strcmp($res, "INVALID") == 0) {
$headers = "MIME-Version: 1.0" . "\r\n";
$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$headers .= "From: <myemail>" . "\r\n";
$subject = 'Subject line -INVALID';
$message="INVALID";
mail("myemail",$subject,$message,$headers);
}
}
fclose ($fp);
}
?>
