PHP - Paypal Api

Hey guys i have created a paypal IPN script and it takes various info from users via paypal. Anyways i store their info into a database along with their email however i dont want them to be able to purchase again with the same email (long story) anways by the time i receive the info from paypal the payments already gone through so its too late for me to do the checking against the database. Is there anyway i can auto refund the payment do paypal allow this? Hope someone can help.

Thanks!

Hi guys, my code below works with sanbox for paypal IPN but since it has gone live it doesnt do anything, so i made emails to send me where the issue is and it keep sending me $req = 'cmd=_notify-validate';

could you please tell me what im doing wrong here? my db connection should be fine as it does update the users on sanbox.

the account im paying with in paypal keep saying payment status unclaimed. it means the reciever has not recieved the money. I checked the paypal account where i recieve the moeny and looked into my ipn history, nothing there.

the same ipn address is used for my account when i tested it on sanbox,

 thanks


<?php
$email="princeofpersia@hotmail.co.uk";

include 'global.php';

// read the post from PayPal system and add 'cmd'

$req = 'cmd=_notify-validate';

foreach ($_POST as $key => $value) {
$value = urlencode(stripslashes($value));
$req .= "&$key=$value";
}

// post back to PayPal system to validate
$header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
$fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30);
//$fp = fsockopen ('ssl://www.paypal.com', 443, $errno, $errstr, 30);//Live
// assign posted variables to local variables

if (!$fp)// failed to connect to url
{
 //write to file
 $fh = fopen("logipn.txt", 'a');//open file and create if does not exist
 fwrite($fh, "\r\n/////////////////////////////////////////\r\n HTTP ERROR \r\n");//Just for spacing in log file
 fwrite($fh, $errstr);//write data
 fclose($fh);//close file
 
 //email
 $mail_From = "From: IPN@tester.com";
 $mail_To = $email;
 $mail_Subject = "HTTP ERROR";
 $mail_Body = $errstr;//error string from fsockopen
 mail($mail_To, $mail_Subject, $mail_Body, $mail_From);
} 
else//successful connect to url
{
 fputs ($fp, $header . $req);//send request
 while (!feof($fp)) //while not end of file
 {
  $res = fgets ($fp, 1024);//get response
  if (strcmp ($res, "VERIFIED") == 0) 
  {
   //write to file
   $fh = fopen("logipn.txt", 'a');//open file and create if does not exist
   fwrite($fh, "\r\n/////////////////////////////////////////\r\n Verified \r\n");//Just for spacing in log file
   fwrite($fh, $req);//write data
   fclose($fh);//close file
 
   //email
   $mail_From = "From: IPN@tester.com";
   $mail_To = $email;
   $mail_Subject = "VERIFIED IPN";
   $mail_Body = $req;
   mail($mail_To, $mail_Subject, $mail_Body, $mail_From);
  }
    else if (strcmp ($res, "INVALID") == 0) 
  {
   //write to file
   $fh = fopen("logipn.txt", 'a');//open file and create if does not exist
   fwrite($fh, "\r\n/////////////////////////////////////////\r\n Invalid \r\n");//Just for spacing in log file
   fwrite($fh, $req);//write data
   fclose($fh);//close file
 
   //email
   $mail_From = "From: IPN@tester.com";
   $mail_To = $email;
   $mail_Subject = "INVALID IPN";
   $mail_Body = $req;
   mail($mail_To, $mail_Subject, $mail_Body, $mail_From);
  }
 }
 fclose ($fp);//close file pointer
}

$item_name = $_POST['item_name'];
$item_number = $_POST['item_number'];
$payment_status = $_POST['payment_status'];
$payment_amount = $_POST['mc_gross'];
$payment_currency = $_POST['mc_currency'];
$txn_id = $_POST['txn_id'];
$receiver_email = $_POST['receiver_email'];
$payer_email = $_POST['payer_email'];
//$username=$_POST['username'];
if (!$fp) {
// HTTP ERROR
} else {
fputs ($fp, $header . $req);
while (!feof($fp)) {
$res = fgets ($fp, 1024);
if (strcmp ($res, "VERIFIED") == 0) {

if (strtolower($payment_status)=="completed")

{

if ($payment_amount==0.01&&$payment_currency=="GBP") 
{

$update = mysql_query("UPDATE users SET credit= credit+5  WHERE email='$payer_email'");

}











}


// check the payment_status is Completed
// check that txn_id has not been previously processed
// check that receiver_email is your Primary PayPal email
// check that payment_amount/payment_currency are correct
// process payment


}
else if (strcmp ($res, "INVALID") == 0) {
// log for manual investigation
}
}
fclose ($fp);
}
?>

Hey Guys,

i have another problem, i am using paypal IPN, and i want the details of the order to be stored in my orders table of the databse as well as sending me an email. Im pretty sure the code is ok, but it is not working. Can some one please take a look?

<?php

 include('db_fns.php');
 
 
 // change these to your paypal settings
 $paypal_email = "benmunns@gmail.com";
 $paypal_currency = 'USD';
 $shipping = 10.00;
 
 
 /**
  * checks if paypal trans id is already in database
  * @param int $trans_id
  * @return bool
  */
 function no_paypal_trans_id($trans_id)
 {
    $connection = db_connect();
    $query = sprintf("SELECT id from orders WHERE paypal_trans_id = '%s'",
                      mysql_real_escape_string($trans_id));
    $result = mysql_query($query);
   
    $num_results = mysql_num_rows($result);
   
    if($num_results == 0)
    {
       return true;
    }
   
    return false;
   
 }
 
 /**
  * checks to make sure that paypal payment amount is correct
  * @param int $shipping
   * @param array $params
  * @return bool
  */
 function payment_amount_correct($shipping, $params)
 {
     $amount = 0.00;
      
      for ($i=1;  $i <= $params['num_cart_items']; $i++)
      {
        $query = sprintf("SELECT price from products where id='%s'",
         mysql_real_escape_string($params["item_number{$i}"]));
         $result = mysql_query($query);
         if($result)
         {
              $item_price = mysql_result($result, 0, 'price');
           $amount += $item_price * $params["quantity{$i}"];
         }
      }
      
      if(($amount+$shipping) == $params['mc_gross'])
      {
        return true;   
      }
      else
      {
        return false;   
      }
   
 }
 
 
    
/**
 * creates order and adds items
 * @param array $params
 * @return bool
 */
   function create_order($params)
   {
      db_connect();
      
       $query =  sprintf("INSERT INTO orders set
                             orders.firstname = '%s',
                                      orders.lastname = '%s',
                                      orders.email = '%s',
                                      orders.country = '%s',
                          orders.address = '%s',
                          orders.city = '%s',
                                     orders.zip_code = '%s',
                                     orders.state = '%s',
                                     orders.status = '%s',
                                     orders.amount = '%s',
                                     orders.paypal_trans_id = '%s',
                                      created_at = NOW()
                           ",
                              mysql_real_escape_string($params['first_name']),
                               mysql_real_escape_string($params['last_name']),
                               mysql_real_escape_string($params['payer_email']),
                              mysql_real_escape_string($params['address_country']),
                               mysql_real_escape_string($params['address_street']),
                               mysql_real_escape_string($params['address_city']),
                               mysql_real_escape_string($params['address_zip']),
                               mysql_real_escape_string($params['address_state']),
                               mysql_real_escape_string($params['payment_status']),
                               mysql_real_escape_string($params['mc_gross']),
                               mysql_real_escape_string($params['txn_id'])
               
                           );

      $result = mysql_query($query);
      if(!$result)
      {
          return false;
      }
      
      $order_id = mysql_insert_id();
      
      for ($i=1;  $i <= $params['num_cart_items'] ; $i++)
      {
           $product = find_product($params["item_number{$i}"]);
            
           $query = sprintf("INSERT
                                    INTO items
                                         set
                                                      order_id = '%s',
                                                      product_id = '%s',
                                                      title = '%s',
                                                      price = '%s',
                                                      qty = '%s'
                                                      ",
                                                       mysql_real_escape_string($order_id),
                                                       mysql_real_escape_string($product['id']),
                                                       mysql_real_escape_string($product['title']),
                                                      mysql_real_escape_string($product['price']),
                                                       mysql_real_escape_string($params["quantity{$i}"])   
                                                   
                                                       );
            
             $result = mysql_query($query);
            
             if(!$result)
             {
                return false;
             }
            
          }
 

       return true;
   }   




// read the post from PayPal system and add 'cmd'
$req = 'cmd=_notify-validate';

foreach ($_POST as $key => $value) {
$value = urlencode(stripslashes($value));
$req .= "&$key=$value";
}

// post back to PayPal system to validate
$header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
$fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);

// assign posted variables to local variables
$item_name = $_POST['item_name'];
$item_number = $_POST['item_number'];
$payment_status = $_POST['payment_status'];
$payment_amount = $_POST['mc_gross'];
$payment_currency = $_POST['mc_currency'];
$txn_id = $_POST['txn_id'];
$receiver_email = $_POST['receiver_email'];
$payer_email = $_POST['payer_email'];

if (!$fp) {
// HTTP ERROR
} else {
fputs ($fp, $header . $req);
while (!feof($fp)) {
$res = fgets ($fp, 1024);
if (strcmp ($res, "VERIFIED") == 0) {
 
   if ($_POST['payment_status'] == 'Completed'
        && no_paypal_trans_id($_POST['txn_id'])
         && $paypal_email == $_POST['receiver_email']
         && $paypal_currency == $_POST['mc_currency']
         && payment_amount_correct($shipping, $_POST)
         )
   {
     // process payment
       create_order($_POST);
    
   }

}
else if (strcmp ($res, "INVALID") == 0) {
// log for manual investigation
}
}
fclose ($fp);
}
?>

Hi,

I have setup my paypal payment method for a shopping cart on my site, all is well but in order for my server to flag an invoice as paid, the user must return to my website after paying and the query string in the url give the script the go ahead to mark it as paid which in turn alerts the appropriate department that its ok to source the order.

~The problem is, if the user for whatever reason skip the redirect back to my site, the invoice is remain 'unpaid' and has to be changed manually when the payment has been checked in the account. As you might imagine this is a bit of a problem because not only can it cause quite a delay, it also requires manually changing values which can lead to other problems.

So if there is a better way i would appreciate the info, thanks a lot.

Hi Everybody

I am doing online education portal. Teachers and students will be registered on this site. Student will search teachers and create schedule to learn subjects. For that student can pay to the teacher some amount. So that student can increase his/her balance. That means he can transfer some money to website company account through credit card or paypal or google checkout.

I did credit card part. But i am not getting any idea to do in paypal. That means student can enter amount and click paypal button, it should show paypal page. So that he can login into his paypal account and pay that amount. After pay that amount we can get IPN (Instant Payment Notification). So that we can store that amount into my database under that student ID.

Please tell me how can i do this?

Hi,

I am about to incorporate some PayPal functions to my site and am just asking for some advice before I start.

Basically a user is going to enter some data into a form and then be passed to PayPal to pay an X amount, once the payment has been verified I want the information entered in the form (before going to PayPal),  to be added to a database.

But it seems that PayPal does not allow you to pass multiple (about 13) variables through their system. Is this correct?

So what I was going to do is just before the customer goes to the PayPal site, I was going to insert all the data into the database and set a payment status, then once the payment is confirmed re-setting the payment status to paid or non-paid. Is that a good way to do what I want? If not is there a better way?

Any help would be great.

Lee

I am trying to write a Paypal IPN Listener that will create a confirmation key in the order database I have on the server. Upon completing the order it will then send a email to the buyer with a link to a file upload page with the confirmation code embedding so that when the buyer goes to the upload page it can authenicate based on that code prior to allowing the person to upload a file. I has been a pain and is still not working. Similar to an email confirmation when some one signs up as a user on a site, but using the Paypal order information and the listener to generate the confirmation and authentication. IS THIS POSSIBLE?

hi,
I'm trying to integrate paypal integration. it is integrated successfully and I've checked on my test account too. i want that as user purchase package he should able to download the file. to do that i want to set return variable. as user complete the payment process on paypal , it should auto come back to my website. as he'll be back I'll set his flag to paid and allow him to download file. the problem I'm facing is on my test account. when i paid money. i didn't return to my website. so i don't know to set his flag to true.
any one know its best solution??? i want immediate response to client to pay online.

Please advise...
Thanks

Hi,

How to get paypal transection id on return after someone pay

if i've paypal payment form as following

Code: [Select]
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="<?=$line[paypalid]?>">
<input type="hidden" name="item_name" value="Payment Your Hits">
<input type="hidden" name="item_number" value="1">
<input type="hidden" name="amount" value="<?=$usd?>">
<input type="hidden" name="no_shipping" value="0">
<input type="hidden" name="no_note" value="payment from website submittion">
<input type="hidden" name="currency_code" value="USD">
<input type="hidden" name="lc" value="AU">
<input type="hidden" name="bn" value="PP-BuyNowBF">
<input type="hidden" name="return" value="<?=$site_root?>/return.php?id=<?=$line[id]?>">
<button type="submit" class="clean-green">Pay Now</button>
</form>
on return i will get it by id which is <?$line[id]?>
but i want to get the transection id of payment too

how it comes ?

I am writing a listener to handle IPN notifications from paypal, and one thing I cant seemt o find anywhere -

How does IPN handle pending payments, that are then completed/denied? For example, if paypal invokes my IPN once the payment is made, but pending, with a particular transaction ID, when the payment completes, does it then invoke my IPN again, with the payment status as 'completed'? If so, will this second IPN have the same transaction ID?

It would seem logical that the same transaction ID is sent again, as it is actually the same customer transaction, however reading this on thepaypal website suggests otherwise:

"Avoid duplicate IPN messages. Check that you have not already processed the transaction identified by the transaction ID returned in the IPN message. You may need to store transaction IDs returned by IPN messages in a file or database so that you can check for duplicates. If the transaction ID sent by PayPal is a duplicate, you should not process it again. "

Help would be appreciated!!

Hi,
I've integrated paypal payment pro over my website. I don't know how can i test it. can any one help me out?
my site address is : http://pacific-labs.com/paymybill.php
Please help

Hi, i am building a website where users have a choice to buy a subscription to the next level gold, silver, bronze.

Now i have used paypal before for one off payments but i'm finding it to be a problem when i have three seperate buy now buttons

Code: [Select]
<?php
if ($payment_status == "Completed"){

if ($item_name == "Bronze Membership" && $payment_amount == 4.99&&$payment_currency == "USD"){
$update = mysql_query("UPDATE users SET membership = '1' WHERE email = '$payer_email'");
}
if ($item_name == "Silver Membership" && $payment_amount == 9.99&&$payment_currency == "USD"){
$update = mysql_query("UPDATE users SET membership = '2' WHERE email = '$payer_email'");
}
if ($item_name == "Gold Membership" && $payment_amount == 19.99&&$payment_currency == "USD"){
$update = mysql_query("UPDATE users SET membership = '3' WHERE email = '$payer_email'");
}
}
?>

As you can see i am checking that the item name is the correct name aswell as price but in the sandbox it wont work.

Additional info

Code: [Select]

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="myemail">
<input type="hidden" name="item_name" value="Bronze Membership">
<input type="hidden" name="currency_code" value="USD">
<input type="hidden" name="amount" value="4.99">
<input type="image"
src = "http://www.paypal.com/en_US/i/btn/x-click-but01.gif"
  name="submit" height="30" width="65" alt="Make payments with paypal - it's fast, free and secure!">
  </form>

Hi All,

I am using paypal code which as follows below
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type="hidden" name="cmd" value="_xclick">
      <input type="hidden" name="business" value="email">
      <input type="hidden" name="item_name" value="productname">
      <input type="hidden" name="currency_code" value="USD">
      <input type="hidden" name="amount" value="<?php echo $totalamount; ?>">
      <input type="image" src="http://www.paypal.com/en_US/i/btn/x-click-but01.gif" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

The following are the problems i am facing

1. the page will be redirect to paypal page such that customer having paypal account can pay so how to pay for customers who dont have paypal account.
2. how to get return value after success/failure of payment.
3. it is throwing an error  as shown below

We notice that you are attempting to pay an Indian resident user. The payment you initiated has been blocked. PayPal only facilitates international payments and cannot be used for domestic payments within India. We suggest you find alternative methods to complete the payment. If you believe that the person you attempted to pay is not based in India, please contact PayPal customer support.

Please share your knowledge on above
Regard's
Girish

Hi guys I am now current trying to implement Paypal sandbox in my website for testing. I used the form generated by Paypal and it worked. However, I wish to make it more secure by verifying the POST details against my database first before posting to Paypal. I have read on the internet for a few days and download a few sample codes to try out, however I still dun understand how it works. The thing I read on is IPN (Instant Payment Notification) for Paypal. Am I reading the right thing? If I am can anyone help me out cause I do not really understand part of it.