Same problem since March - error on pay now button

[Roscops]

I've read through the posts here and tried lots of them but with no success. We have a site that we sell webites from and it can differe in currency and amount so we pass variables. I've checked and none of them post the Currency symbol or have commas in the amounts. Only 2 decimal places

We get an access denied message -

You don't have permission to access "http://www.paypal.com/cgi-bin/webscr/index.php?" on this server.

Reference #18.acb0f748.1495365264.2ba33865

This is the code

<!-- paypal -->
<form action="https://www.paypal.com/cgi-bin/webscr/index.php?confirm=true" method="post" class="paypal" User-Agent="Xippy-pp">
<input type="hidden" name="cmd" value="_xclick" />
<input type="hidden" name="business" value="<?=$config['paypal_email'];?>" />
<input type="hidden" name="item_name" value="XippY Clan Websites - <?=$Package;?> - Ref:<?=$OrderID;?>" />
<!-- <input type="hidden" name="item_number" value="" /> -->
<input type="hidden" name="amount" value="<?=$Cost;?>" />
<!-- <input type="hidden" name="quantity" value="1" /> -->
<input type="hidden" name="return" value="<?=$config['paypal_return_url'];?>" />
<input type="hidden" name="cancel_return" value="http://<?=$_SERVER['SERVER_NAME'];?>" />
<input type="hidden" id="custom" name="custom" value="1|<?=$OrderID;?>" />
<input type="hidden" name="no_shipping" value="1" />
<input type="hidden" name="currency_code" value="<?=$TransactionData['PriceCode'];?>" />
<input type="hidden" name="country" value="GB" />
<!-- <input type="hidden" name="notify_url" value="" /> -->
<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but6.gif" border="0" name="submit" alt="Pay securely via Paypal" />
</form>

This is what we post had to remove real  email address to post

<!-- paypal -->  

<form action="https://www.paypal.com/cgi-bin/webscr/index.php?confirm=true" method="post" class="paypal" User-Agent="Xippy-pp">  

<input type="hidden" name="cmd" value="_xclick" />  

<input type="hidden" name="business" value="email address" />  

<input type="hidden" name="item_name" value="XippY Clan Websites - Silver Package 1 Month - Ref:11728" />  

<!-- <input type="hidden" name="item_number" value="" /> -->  

<input type="hidden" name="amount" value="6.99" />  

<!-- <input type="hidden" name="quantity" value="1" /> -->  

<input type="hidden" name="return" value="http://www.xippy.org/index.php?page=pp-new" />  

<input type="hidden" name="cancel_return" value="http://xippy.org" />  

<input type="hidden" id="custom" name="custom" value="1|11728" />

  <input type="hidden" name="no_shipping" value="1" />  

<input type="hidden" name="currency_code" value="USD" />  

<input type="hidden" name="country" value="GB" />  

<!-- <input type="hidden" name="notify_url" value="" /> -->  

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but6.gif" border="0" name="submit" alt="Pay securely via Paypal" />   </form>  

</div>

I've tried lots of things bit can't see what else I need to do. If someone from Paypal can help that would be good.

Thanks in advance

Paul Ross

[MTS_Ciaran]

Hi,

The error you mentioned is actually an IP level block. It happens when our automated system detects certain types of traffic. From my side I've tested the button and it works fine. The issue is that with your computer, the IP address is flagged. Can you try using a different IP address, contact your ISP and ask them to provide a new one and test the button again. 

[Roscops]

Hi there,

we've checked our end and we're not blocking the IP. Can you tell us why the IP is blocked at your end? We have changed the IP address from  46.166.182.1  to 91.230.97.57 but still get the same error.

You don't have permission to access "http://www.paypal.com/cgi-bin/webscr/index.php?" on this server.

Reference #18.d4921602.1495542318.274d1582

Can you let me know what is blocking this?

Kindest regards

Paul Ross

[Roscops]

Please can you advise why you are blocking this IP? traffic type? some other reason? This is a New IP address...

Kindest regards

Paul

[MTS_Ciaran · Accepted solution]

OK I think I might know what the issue is here, the URL you're using is not right:

https://www.paypal.com/cgi-bin/webscr/index.php?confirm=true

Can you remove "index.php?confirm=true", so use this instead:

https://www.paypal.com/cgi-bin/webscr

PayPal dont like URL parameters being passed in that are unrecognized, also the index.php doesnt point to anything on our side. 

[Roscops]

Perfect,that fixed it!