[897236489]

OK I have a script on my site which uses PayPal for members to sign up. When the user has paid PayPal is suposed to use IPN to send the user information to this file named "paypal.php" and for some reason unknown to me it is not working. Could it be that PayPal has upgraded and the file is no longer compatable anymore, if so can this file be updated to work once again?

The code is as follows:

PHP Code:

<?PHP



// read the post from PayPal system and add 'cmd'

$req = 'cmd=_notify-validate';

foreach ($_POST as $key => $value) {

$value = urlencode(stripslashes($value));

$req .= "&$key=$value";

}

// post back to PayPal system to validate

$header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";

$header .= "Content-Type: application/x-www-form-urlencoded\r\n";

$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";

$fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);

// assign posted variables to local variables

$item_name = $_POST['item_name'];

$item_number = $_POST['item_number'];

$payment_status = $_POST['payment_status'];

$payment_amount = $_POST['mc_gross'];

$payment_currency = $_POST['mc_currency'];

$txn_id = $_POST['txn_id'];

$receiver_email = $_POST['receiver_email'];

$payer_email = $_POST['payer_email'];

$payment_date = date("Y-m-d");

if (!$fp) {

// HTTP ERROR

} else {

fputs ($fp, $header . $req);

while (!feof($fp)) {

$res = fgets ($fp, 1024);



if (strcmp ($res, "VERIFIED") == 0 && ($payment_status=="Completed" || $payment_status=="Pending") && $receiver_email==$mailer && $payment_amount=="10.00" && $payment_currency=="USD") { // process payment

//////CREATE RANDOM PASSWORD///////

function makeRandomPassword() {

  $salt = "abchefghjkmnpqrstuvwxyz0123456789";

  srand((double)microtime()*1000000); 

      $i = 0;

      while ($i <= 7) {

            $num = rand() % 33;

            $tmp = substr($salt, $num, 1);

            $pass = $pass . $tmp;

            $i++;

      }

      return $pass;

}



$random_password = makeRandomPassword();

$db_password = md5($random_password);

////////////INSERT INTO DB//////////

$query = "INSERT INTO members (item_name,item_number,payment_status,payment_amount,txn_id,email,payment_date,password) VALUES ('$item_name','$item_number','$payment_status','$payment_amount','$txn_id','$payer_email','$payment_date','$db_password')";

$result = mysql_query($query);

if ($result){

//////////EMAIL ADMIN ////////

$asubject = "Membership Payment PROCESSED";

$amessage = "Another Membership Payment has been processed.



PAYMENT INFO:

    

Item Name:$item_name

Item Num:$item_number

   Status:$payment_status

   Amount:$payment_amount

 Currency:$payment_currency

   TXN Id:$txn_id

    Buyer:$payer_email

     Date:$payment_date

";

mail($business, $asubject, $amessage, "From: $emailfrom\nX-Mailer: PHP/" . phpversion());

////////END EMAIL ADMIN//////



//////////EMAIL BUYER ////////

$bsubject = "Your Membership Information";

$bmessage = "Thank you for purchasing a Membership!



You now have access to our Members area.



ACCESS INFO:

Members Url: $membersurl

Username: $payer_email

Password: $random_password 



Thanks for your purchase!



";

mail($payer_email, $bsubject, $bmessage, "From: $emailfrom\nX-Mailer: PHP/" . phpversion());

////////END EMAIL BUYER//////



    }else{

$esubject = "Membership Payment ERROR";

$emessage = "Another Membership Payment has been processed, but there was an error inserting the info into the database.



PAYMENT INFO:

    

Item Name:$item_name

 Item Num:$item_number

   Status:$payment_status

   Amount:$payment_amount

 Currency:$payment_currency

   TXN Id:$txn_id

    Buyer:$payer_email

     Date:$payment_date

";

mail($business, $esubject, $emessage, "From: $emailfrom\nX-Mailer: PHP/" . phpversion());

    }

}

else if (strcmp ($res, "INVALID") == 0) {

$subject = "Membership Payment INVALID";

$message = "A payment attempt was made but the status was marked INVALID.



PAYMENT INFO:

    

Item Name:$item_name

 Item Num:$item_number

   Status:$payment_status

   Amount:$payment_amount

 Currency:$payment_currency

   TXN Id:$txn_id

    Buyer:$payer_email

";

mail(business, $subject, $message, "From: $emailfrom\nX-Mailer: PHP/" . phpversion());

// log for manual investigation

}

}

fclose ($fp);

}

?>

Please get back to me as soon as possible.

[moronovich]

my note:
1. you miss the return url (post field name: return).
2. you forgot to concatenate text response from paypal

PHP Code:

$res = fgets ($fp, 1024); 

3. your validation is inappropriate

PHP Code:

if (strcmp ($res, "VERIFIED") == 0 && ($payment_status=="Completed" || $payment_status=="Pending") && $receiver_email==$mailer && $payment_amount=="10.00" && $payment_currency=="USD") { // process payment 

[897236489]

I don't understand what you meen I'm relitivley new to PHP. how would I fix this?

[moronovich]

there's so called pointer. i've pointed out the cause for the script malfunction. maybe you're new to php, but believe me, you only need some hours/days to read the manual and solve this problem (if you want to solve it yourself).

[Tomp]

Ive been trying to use the above code also, I have absolutly no idea about PHP etc, so would be very usefull if you could post up the code that you tihnk is correct

[897236489]

Can somebody hurry and PLEASE help me with this?

[dihan]

This looks like a pretty good IPN script. I can understand most of it but would like if someone correct the problem as I cannot see what the errors are.