【问题标题】:IPN Paypal "official" sample code doesn't workIPN Paypal“官方”示例代码不起作用
【发布时间】:2017-03-19 22:49:54
【问题描述】:

我有一个问题,我想他们还发现了许多其他问题。我正在尝试将 PayPal 支付系统集成到我的网站中,但 IPN 存在一些问题。我试过这个代码,在 github Paypal 上找到:

    <?php require('PaypalIPN.php');
use PaypalIPN;
$ipn = new PayPalIPN();
// Use the sandbox endpoint during testing.
$ipn->useSandbox();
$verified = $ipn->verifyIPN();
if ($verified) {

}
// Reply with an empty 200 response to indicate to paypal the IPN was received correctly.
header("HTTP/1.1 200 OK");
?>

必修课:

<?php
class PaypalIPN
{
    private $use_sandbox = false;
    private $use_local_certs = true;
    /*
     * PayPal IPN postback endpoints
     */
    const VERIFY_URI = 'https://ipnpb.paypal.com/cgi-bin/webscr';
    const SANDBOX_VERIFY_URI = 'https://ipnpb.sandbox.paypal.com/cgi-bin/webscr';
    /*
     * Possible responses from PayPal after the request is issued.
     */
    const VALID = 'VERIFIED';
    const INVALID = 'INVALID';
    /**
     * Sets the IPN verification to sandbox mode (for use when testing,
     * should not be enabled in production).
     * @return void
     */
    public function useSandbox()
    {
        $this->use_sandbox = true;
    }
    /**
     * Determine endpoint to post the verification data to.
     * @return string
     */
    public function getPaypalUri()
    {
        if ($this->use_sandbox) {
            return self::SANDBOX_VERIFY_URI;
        } else {
            return self::VERIFY_URI;
        }
    }
    /**
     * Verification Function
     * Sends the incoming post data back to paypal using the cURL library.
     *
     * @return bool
     * @throws Exception
     */
    public function verifyIPN()
    {
        if ( ! count($_POST)) {
            throw new Exception("Missing POST Data");
        }
        $raw_post_data = file_get_contents('php://input');
        $raw_post_array = explode('&', $raw_post_data);
        $myPost = [];
        foreach ($raw_post_array as $keyval) {
            $keyval = explode('=', $keyval);
            if (count($keyval) == 2) {
                // Since we do not want the plus in the datetime string to be encoded to a space, we manually encode it.
                if ($keyval[0] === 'payment_date') {
                    if (substr_count($keyval[1], '+') === 1) {
                        $keyval[1] = str_replace('+', '%2B', $keyval[1]);
                    }
                }
                $myPost[$keyval[0]] = urldecode($keyval[1]);
            }
        }
        // Build the body of the verification post request, adding the _notify-validate command.
        $req = 'cmd=_notify-validate';
        $get_magic_quotes_exists = false;
        if (function_exists('get_magic_quotes_gpc')) {
            $get_magic_quotes_exists = true;
        }
        foreach ($myPost as $key => $value) {
            if ($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) {
                $value = urlencode(stripslashes($value));
            } else {
                $value = urlencode($value);
            }
            $req .= "&$key=$value";
        }
        // Post the data back to paypal, using curl. Throw exceptions if errors occur.
        $ch = curl_init($this->getPaypalUri());
        curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
        curl_setopt($ch, CURLOPT_SSLVERSION, 6);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
        // This is often required if the server is missing a global cert bundle, or is using an outdated one.
        if ($this->use_local_certs) {
            curl_setopt($ch, CURLOPT_CAINFO, __DIR__ . "/cert/cacert.pem");
        }
        curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Connection: Close']);
        $res = curl_exec($ch);
        $info = curl_getinfo($ch);
        $http_code = $info['http_code'];
        if ($http_code != 200) {
            throw new Exception("PayPal responded with http code $http_code");
        }
        if ( ! ($res)) {
            $errno = curl_errno($ch);
            $errstr = curl_error($ch);
            curl_close($ch);
            throw new Exception("cURL error: [$errno] $errstr");
        }
        curl_close($ch);
        // Check if paypal verfifes the IPN data, and if so, return true.
        if ($res == self::VALID) {
            return true;
        } else {
            return false;
        }
    }
}

当我使用 IPN 模拟器进行测试时,我收到以下响应:IPN 未发送,握手未验证。请查看您的信息。有人可以帮我吗?

【问题讨论】:

    标签: php paypal paypal-ipn


    【解决方案1】:

    来自您的示例代码:

       <?php require('PaypalIPN.php');
    ^^^  /** This will cause your script to fail.**/
    

    您应该在 paypal IPN 接受页面上的 PHP 周围有 NO 空格。


    如果您还没有安装他们的cacert.pem 文件,那么您需要调整类设置,以便 paypal 类 cURL 不会尝试使用该 pem 文件:

     private $use_local_certs = false; // set to true when you have the 
                                       // file in your server filesystem
    

    在 IPN 模拟器上,您需要选择 Web-accept 作为要执行的模拟类型。


    required 文件是否存在?该文件应该 - 通过您的代码 - 与您的 IPN 侦听器文件位于同一文件夹中。是这样吗?如果找不到该文件,脚本将失败。


    让我们知道这些详细信息是否解决了问题,或者您是否有更多详细信息要添加。

    【讨论】:

    • 私人 $use_local_certs = false;是工作!谢谢!
    • @ParmaLibera 很好!如果您可以在我的答案旁边打勾,那就太好了:)。在其他新闻中,值得您花时间从 Paypal Github 下载 .pem 文件并将其上传到您的服务器并存储它,然后将变量设置为 true,这样可以确保支付连接安全 :-) 。当你这样做时,你还应该检查 PaypalIPN 类的第 106 行中的路径引用。