Hidden field / header in redirect?

En-tre-port
Contributor
Contributor

The redirect after successful purchase is working great. I am getting the key information from PayPal but it's all on the query string (GET). This will allow a user to save the URL and trick my site into producing more product for the user. I would like to set a specific header or set a "POST" variable to validate that the customer indeed came from PayPal. I am using PHP on the other end and I'm able to print out the various arrays and I don't see anything useful. Referrer returns empty. I have set custom fields but none are passed along. 

 

Any ideas are welcome. Thanks in advance.

 

Technical blah, blah, blah. Some stuff was modified by the posting mechanism due to it being html code.

Get:

Array

(

    [amt] => 12

    [item_name] => DayPass

)

Post:

Array

(

)

Referrer:

Array

(

    [HTTP_HOST] => entreport.ddns.net:xxxxxx

    [HTTP_CONNECTION] => keep-alive

    [HTTP_CACHE_CONTROL] => max-age=0

    [HTTP_DNT] => 1

    [HTTP_UPGRADE_INSECURE_REQUESTS] => 1

    [HTTP_USER_AGENT] => Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom[Removed. Phone #s not permitted]Safari/537.36

    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9

    [HTTP_ACCEPT_ENCODING] => gzip, deflate

    [HTTP_ACCEPT_LANGUAGE] => en-US,en;q=0.9

    [PATH] => /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

    [SERVER_SIGNATURE] => <address>Apache/2.4.38 (Raspbian) Server at entreport.ddns.net Port xxxxxx</address>

 

    [SERVER_SOFTWARE] => Apache/2.4.38 (Raspbian)

    [SERVER_NAME] => entreport.ddns.net

    [SERVER_ADDR] => 192.168.1.5

    [SERVER_PORT] => xxxxx

    [REMOTE_ADDR] => 192.168.1.1

    [DOCUMENT_ROOT] => /var/www/html

    [REQUEST_SCHEME] => http

    [CONTEXT_PREFIX] =>

    [CONTEXT_DOCUMENT_ROOT] => /var/www/html

    [SERVER_ADMIN] => <removed>

    [SCRIPT_FILENAME] => /var/www/html/unify/index.php

    [REMOTE_PORT] => 56330

    [GATEWAY_INTERFACE] => CGI/1.1

    [SERVER_PROTOCOL] => HTTP/1.1

    [REQUEST_METHOD] => GET

    [QUERY_STRING] => amt=12&item_name=DayPass

    [REQUEST_URI] => /unify/?amt=12&item_name=DayPass

    [SCRIPT_NAME] => /unify/index.php

    [PHP_SELF] => /unify/index.php

    [REQUEST_TIME_FLOAT] => 1603563213.346

    [REQUEST_TIME] => 1603563213

)

Headers:

Array

(

    [Host] => entreport.ddns.net:xxxxxx

    [Connection] => keep-alive

    [Cache-Control] => max-age=0

    [DNT] => 1

    [Upgrade-Insecure-Requests] => 1

    [User-Agent] => Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom[Removed. Phone #s not permitted]Safari/537.36

    [Accept] => text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9

    [Accept-Encoding] => gzip, deflate

    [Accept-Language] => en-US,en;q=0.9

)

Login to Me Too
1 REPLY 1

En-tre-port
Contributor
Contributor

Hello  .

 

___ crickets chirping loudly in the cold frozen cyber tundra ___

 

Hello? (Hello? Hello? Hello?)
Is there anybody in there?
Just nod if you can hear me
Is there anyone home?
Login to Me Too

Haven't Found your Answer?

It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.