Paypal IPN Failing suddenly

[chriscana]

I had zencart 1.3.8 running and I started getting daily paypal IPN warnings and paypal just listing all paypal IPN requests as retrying and then eventually failing. I have express and pro payment modules updated, all settings correct, ipn url correct on paypals side.

https://www.idosersoftware.com/extras/ipncheck.php

Comes back OK. Lunarpages added all paypal IPs to firewall, etc. Still failing.

MySQL 5.1.63-cll
Apache/2.0.64 (Unix) mod_ssl/2.0.64 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
PHP Version: 5.2.17 (Zend: 2.2.0)
Server OS: Linux 2.6.18-194.26.1.el5

[RodG]

I had zencart 1.3.8 running and I started getting daily paypal IPN warnings and paypal just listing all paypal IPN requests as retrying and then eventually failing.

Exactly what were the warnings?

I have express and pro payment modules updated, all settings correct, ipn url correct on paypals side.

Why are you even using PayPal IPN when you have express and pro installed?

Oh, and you really MUST upgrade your zencart installation. If you are running V1.3.8 as you state you *will* be hacked (assuming that this isn't your problem already).

Cheers
Rod

[chriscana]

Sorry - meant to add that I HAD 1.3x running and I have since upgraded to 1.5, new install and database. The warning email I get is from paypal and is basically just a generic warning email that says IPNs are failing. If I look in my paypal profile all IPNs are listed as RETRYING status. The problem started with 1.3.8 and thats a reason i went to 1.5 to see if that was the issue.

I have the express module running (for paypal payment option) and Payments Pro (USA) also for taking CC payments directly on site. I do not have Stardard - IPN running. The express paypal option requires the addition of an IPN address, which I have entered correctly on paypals side.

My hosting provider has done everything from adding paypals IPs to the firewall to running tests with the firewall open. Any support email to paypal just comes back with some generic email about what IPs to add to a firewall and generic troubleshooting tips.

I have read through the IPN help article here. All seems like it should be a go but still daily warning emails from paypal. Eventually after a few days IPns get disabled on paypals side, but it does let me re-enable them.

[DrByte]

RodG has forgotten that PayPal sends IPN notifications even on Express Checkout (and other) transactions. Zen Cart is smart enough to know which ones to ignore, and doesn't use them for adding new transactions to the store, unlike the old "paypal ipn payment module", to which RodG was referring.

Some things to check:
- did you update the /ipn_main_handler.php file when you did your site upgrade?
- did you do a *thorough* site cleanup before upgrading from 1.3.8, to be absolutely 100% certain you hadn't been hacked? http://www.zen-cart.com/wiki/index.p...ing_From_Hacks If you didn't, then you should. Never hurts to do it regularly.
- have you missed any of these troubleshooting steps? http://www.zen-cart.com/wiki/index.php/PayPal
- are you using http or https in the URL you set in your PayPal IPN settings? Have you tried changing it to the other?
- what are your PayPal ipn_*.log debug logs showing? Enable the debug-log-to-file option in your EC module. http://www.zen-cart.com/showthread.p...Logging-PayPal
- What addons do you have on your site?

[chriscana]

I did not upgrade 1.3x - I did a full new install of 1.5 with a new data base, so ipn_main_handler is at 1.5 version
IPN is using HTTPS (as my site is https) but I can try changing to http.
I did run through all troubleshooting.
I did logs for a day but I don't know what im looking at.
Rar'd log dir is here is someone would kindly take a quick look:
*link removed*

[DrByte]

Upon cursory investigation, it looks like your SSL cert is registered to your domain name without a www. prefix, yet your store and your paypal configuration are both using the www. prefix.
And you're getting SSL certificate errors on all your secure pages because of insecure assets being displayed.

[chriscana]

Hm. Ok. Im no SSL expert, but what should my settings be and where to correct this?

[DrByte]

It would be best if your store used the same URL as your SSL certificate is registered for. Best if PayPal URL uses the same, or try using http instead.
As for the insecure assets issue: http://www.zen-cart.com/content.php?...lly-encrypted)

Neither of these is a magic fix. Just something noticed while looking at your site.

[chriscana]

A few followups:

Where do I change my store url to match my ssl url and how do I know what my ssl url is?
With the unsecure assets - would easypage links to external http addresses cause this, or only things like http banners?
I will try changing my paypal ipn to http instead of https and see if there is any resolution.

[maac2]

DrByte said the certificate is registered to http://yourdomain.com not http://www.yourdomain.com
You would have entered the URL when registering your certificate, and your hosting company should be able to confirm this.

Your domain is referenced in a few places: both configure files and Paypal's site (the return URL) are the most obvious in relation to your problem.

As far as I know external links (just a simple text a href link) would not trigger an SSL error, it's embedded content (images, javascript, iframes etc)