Email about outdated integration

[rashie]

Hi Folks

'i have received the notification about an outdated form which will stop working in the near future.

I have gone through the inf. it seems that the form DOES go to the NEW interface which submitted. and the fields seem correct.

Wondering if someone can tell me what is wrong with the form?

thanks!

<FORM ACTION="https://www.paypal.com/cgi-bin/webscr" id="ppform" METHOD="POST">
  <INPUT TYPE="hidden" NAME="cmd" VALUE="_xclick">
  <INPUT TYPE="hidden" NAME="business" VALUE="">
  <!-- full account email appears here -->
  <INPUT TYPE="hidden" NAME="item_name" VALUE="Donation">
  <INPUT TYPE="hidden" NAME="currency_code" VALUE="USD">
  <INPUT TYPE="hidden" NAME="no_note" VALUE="0">
  <input type="hidden" name="return" value="http://www.website.org/tuition/thanks.asp" />
    <table border="0" cellpadding="2" cellspacing="1" class="ewTable">
      <tr>
        <td width="50%">First Name</td>
        <td>Last
          Name</td>
      </tr>
      <tr>
        <td><input type="text" name="first_name" value="" class="required" title=" " /></td>
        <td><input type="text" name="last_name" value="" class="required" title=" " /></td>
      </tr>
      <tr>
        <td>Address</td>
        <td>City</td>
      </tr>
      <tr>
        <td><input type="text" name="address1" value=""  class="required" title=" " /></td>
        <td><input type="text" name="city" value="" class="required" title=" " /></td>
      </tr>
      <tr>
        <td>ZIP</td>
        <td>State</td>
      </tr>
      <tr>
        <td><input type="text" name="zip" value="" /></td>
        <td><select name="state">
            <option value="">[Non- US/Can]</option>
            <option value="AB">Alberta</option>
            <option value="BC">British Columbia</option>
            <option value="MB">Manitoba</option>
            
            <option value="AP">Armed Forces Pacific</option>
          </select></td>
      </tr>
      <tr>
        <td colspan="2">Country</td>
      </tr>
      <tr>
        <td colspan="2"><select name="lc" class="required" title=" ">
            <option value="AF">Afghanistan </option>
            <option value="AX">Aland Islands </option>
            <option value="AL">Albania </option>
            <option value="DZ">Algeria </option>
            <option value="AS">American Samoa </option>
          
            <option value="ZW">Zimbabwe </option>
          </select></td>
      </tr>
      <tr>
        <td>Email</td>
        <td>Telephone</td>
      </tr>
      <tr>
        <td><input type="text" name="email" value="" class="required email" title=" " /></td>
        <td>(
          <INPUT NAME="night_phone_a" TYPE="text" VALUE="" size="3" maxlength="3" class="required" title=" ">
          )
          <INPUT TYPE="text" NAME="night_phone_b" VALUE=""  size="3" maxlength="3" class="required" title=" ">
          -
          <INPUT TYPE="text" NAME="night_phone_c" VALUE=""  size="4" maxlength="4" class="required" title=" "></td>
      </tr>
      <tr>
        <td colspan="2"><strong>Payment Details</strong></td>
      </tr>
      <tr>
        <td><span> Payment Amount<span class="message">&nbsp;*</span></span></td>
      </tr>
      <tr>
        <td colspan="2">USD
          <input type="text" style="width: 60px;" name="amount" class="required" title=" " /></td>
      </tr>
      <tr>
        <td colspan="2">Comments<br>
          <textarea cols="65" rows="4" id="item_name" name="item_name"></textarea></td>
      </tr>
    </table>
    <input name="submit" type="submit" value="Proceed with Payment" />
</form>

[MTS_Ciaran · Accepted solution]

Hi,

The issue here is being caused by user input, since the button code allows user to enter most values the data entered could be incorrect if there are no checks before sending to PayPal. e.g.

- the user can enter amounts like "$100.00", the "$" symbol would cause an issue

- User can enter their own ZIP and state, which if not correct would cause the issue. 

Essentially you would need to put in checks to ensure that data entered by customers is valid before sending it to PayPal.com

[rashie]

Thanks!