IPN Verification Postback to HTTPS - PayPal

[joannem]

You're very welcome!

Darn, I forgot about this bit:

The ipnpb.paypal.com and ipnpb.sandbox.paypal.com endpoints accept only HTTPS connections. If you currently use www.paypal.com, you should move to ipnpb.paypal.com when you update your code to use HTTPS.

I know it would have to be changed in paypal.php in modules/payment, but I'm not sure if it's also in other files. Can you help with this as well?

Joanne

[DrByte]

Darn, I forgot about this bit:

The ipnpb.paypal.com and ipnpb.sandbox.paypal.com endpoints accept only HTTPS connections. If you currently use www.paypal.com, you should move to ipnpb.paypal.com when you update your code to use HTTPS.

I know it would have to be changed in paypal.php in modules/payment, but I'm not sure if it's also in other files. Can you help with this as well?

Joanne

Shouldn't be needed.

[joannem]

Shouldn't be needed.

But they seem to think it's more secure...

[DrByte]

I'm not sure I'd call it "more secure".

However, it is what they're trying to get people to use now.
(But they'll have to support the old for another decade anyway.)

You are welcome to make the switch. The change is simple, as shown here: https://github.com/zencart/zencart/pull/1569/files

[sdelaney]

Hi,

I just got this same message from PayPal, that I needed to set IPN Verification Postback to https.

I am at v1.5.5f, did the complete re-install of the Paypal module when I upgraded in January. I am using Payments Pro (which requires Express Checkout). My IPN is set to https in PayPal, and is showing the same under the Express Checkout module.

When I search all the Zen code, everywhere there is a paypal.com referenced, it is always https:// ...

Is this just a false alarm from Paypal?

I do note that Curl requires port 443 be open for SSL comms ... perhaps that is it?

Steve

[lat9]

@sdelaney, does the condition mentioned in post#4 of this thread apply to your situation?

[sdelaney]

The message from Paypal "recommends" the ipnpb.paypal.com connection rather than the older www.paypal.com, but it says that the older connection will work. I imagine everyone using Zencart would have that same issue if that was the case?

Actually, just looked at my version of that functions file, and it is already at ipnpb.paypal.com

[willweC]

I do have Paypal set to https now, but when I go into my admin payment modules it's showing (attached) Should it still be just showing http and not https? Yes I'm using SSL - full https in admin and https on log in and out in the store.

Attachment 17540

I just updated from 139 to 155f and I do not see the Automatic return URL space like above in this picture. And when I use http://your_site.com/extras/ipncheck.php it says file not found.404
I checked the Extras dir and the ipncheck.php is present. SSl is installed.
HAS ANY ONE HAD THIS PROBLEM?

[willweC]

I just updated from 139 to 155f and I do not see the Automatic return URL space like above in this picture. And when I use http://your_site.com/extras/ipncheck.php it says file not found.404
I checked the Extras dir and the ipncheck.php is present. SSl is installed.
HAS ANY ONE HAD THIS PROBLEM?

I take that back. PayPal Payments Standard is on here (Admin>Mod>PP) which has the"Automatic return URL space" with a Red button. Not installed. When i click on it then hit Install it flips me to PayPal Express Checkout. I'm thinking that is by design as problematic as Standard is. I do need to start paying closer attention when my cart flips me off, haha. I still get the file not found.404 when I use http://your_site.com/extras/ipncheck.php

Any suggestions?

[willweC]

I went to do a test purchase and it failed. This is what it said
The PayPal account authentication settings are not yet set up, or the API security information is incorrect. We are unable to complete your transaction. Please notify the store owner so they can correct this problem. (10002) 10002 Security error - Security header is not valid.
I uninstalled all PayPal and re-installed it.
Does anyone know what is wrong?
thanks in advance