PayPal Express error 10471 and 10472

I can't seem to find this anywhere. Website Payments Pro works just fine but Express Checkout dies with 10471 and 10472 (ReturnURL invalid). Are the values for RETURNURL and CANCELURL supposed to have the zenid in the string. I've pretty much combed through PayPal and everything seems good.

2010-01-29 09:12:14
-------------------
(live transaction) --> https://api-3t.paypal.com/nvp
Request Headers: 
Array
(
    [0] => Content-Type: text/namevalue
    [1] => X-VPS-Timeout: 45
    [2] => X-VPS-VIT-Client-Type: PHP/cURL
    [3] => X-VPS-VIT-Integration-Product: PHP::Zen Cart - WPP-NVP
    [4] => X-VPS-VIT-Integration-Version: 1.3.8a
)


Request Parameters: {SetExpressCheckout} 
Array
(
    [LOCALECODE] => US
    [PAYMENTACTION] => Sale
    [ADDROVERRIDE] => 1
    [SHIPTONAME] => Joe Customer
    [SHIPTOSTREET] => po box 1201
    [SHIPTOCITY] => Somewhere
    [SHIPTOZIP] => 12345
    [SHIPTOSTATE] => HI
    [SHIPTOCOUNTRYCODE] => US
    [EMAIL] => [email protected]
    [PHONENUM] => XXXXXXXXXX
    [AMT] => 16.75
    [RETURNURL] =>  https://secure40.securewebsession.com/sweetparadisechocolate.com/ipn_main_handler.php?type=ec&zenid=[string removed]
    [CANCELURL] =>  https://secure40.securewebsession.com/sweetparadisechocolate.com/index.php?main_page=checkout_shipping&ec_cancel=1&zenid=[string removed]
    [PAGESTYLE] => Primary
    [METHOD] => SetExpressCheckout
    [CURRENCYCODE] => USD
    [USER] => XXXXXXXXX
    [PWD] => ****************
    [VERSION] => 3.2
    [SIGNATURE] => ****************************************************0Hd2
)


Response: 
Array
(
    [TIMESTAMP] => 2010-01-30T02:12:17Z
    [CORRELATIONID] => 3c2fc07fb3150
    [ACK] => Failure
    [VERSION] => 3.2
    [BUILD] => 1157804
    [L_ERRORCODE0] => 10471
    [L_ERRORCODE1] => 10472
    [L_SHORTMESSAGE0] => Transaction refused because of an invalid argument. See additional error messages for details.
    [L_SHORTMESSAGE1] => Transaction refused because of an invalid argument. See additional error messages for details.
    [L_LONGMESSAGE0] => ReturnURL is invalid.
    [L_LONGMESSAGE1] => CancelURL is invalid.
    [L_SEVERITYCODE0] => Error
    [L_SEVERITYCODE1] => Error
    [CURL_ERRORS] => 
)


SetExpressCheckout, Elapsed: 553ms -- Failure

TIMESTAMP=2010%2d01%2d30T02%3a12%3a17Z&CORRELATIONID=7c2fc87fbf250&ACK=Failure&VERSION=3%2e2&BUILD=1157804&L_ERRORCODE0=10471&L_ERRORCODE1=10472&L_SHORTMESSAGE0=Transaction%20refused%20because%20of%20an%20invalid%20argument%2e%20See%20additional%20error%20messages%20for%20details%2e&L_SHORTMESSAGE1=Transaction%20refused%20because%20of%20an%20invalid%20argument%2e%20See%20additional%20error%20messages%20for%20details%2e&L_LONGMESSAGE0=ReturnURL%20is%20invalid%2e&L_LONGMESSAGE1=CancelURL%20is%20invalid%2e&L_SEVERITYCODE0=Error&L_SEVERITYCODE1=Error&CURL_ERRORS=

I had this problem no fix that i could find. I don't use express. I switched to pro and all works fine! My customers love it better.

I am using Pro. Will only work if Express Checkout is active. This just started in the last month or so.

volcanocruiser:

This just started in the last month or so.What might have changed in your store config or your hosting company's server config around the time the problem started?

And, is the problem consistent? ie: does it get rejected every time? or just some times?

You posted a SetExpressCheckout log. Can you post a log from a DoDirectPayment transaction? (mask any customer address/payment details)

Thanks Dr Byte. It is hosted by APLUS and this started after they migrated to their new data center at the end of the year. Of course nothing has changed per support. I'll dig up the requested log info and post (hopefully later on this evening).

Here is a requested log from this morning.

2010-02-03 08:48:15
-------------------
(live transaction) --> https://api-3t.paypal.com/nvp
Request Headers: 
Array
(
    [0] => Content-Type: text/namevalue
    [1] => X-VPS-Timeout: 45
    [2] => X-VPS-VIT-Client-Type: PHP/cURL
    [3] => X-VPS-VIT-Integration-Product: PHP::Zen Cart - WPP-NVP
    [4] => X-VPS-VIT-Integration-Version: 1.3.8a
)


Request Parameters: {DoDirectPayment} 
Array
(
    [ACCT] => ****************
    [AMT] => 42.00
    [BUTTONSOURCE] => ZenCart-DP_us
    [CARDISSUE] => 
    [CITY] => Marietta
    [COUNTRYCODE] => US
    [CREDITCARDTYPE] => MasterCard
    [CVV2] => ****
    [EMAIL] => masked
    [EXPDATE] => masked
    [FIRSTNAME] => masked
    [IPADDRESS] => 130.207.58.48
    [ITEMAMT] => 34.00
    [LASTNAME] => masked
    [L_AMT0] => 34.00
    [L_NAME0] => Tropical Assorted Box Number of pieces in Box: 12 in our Brown Box
    [L_NUMBER0] => 
    [L_QTY0] => 1
    [L_TAXAMT0] => 0.00
    [NOTIFYURL] =>  https://secure40.securewebsession.com/sweetparadisechocolate.com/ipn_main_handler.php
    [PAYMENTACTION] => Sale
    [PHONENUM] => 555-1212
    [SHIPPINGAMT] => 8.00
    [SHIPTOCITY] => Honolulu
    [SHIPTOCOUNTRYCODE] => US
    [SHIPTONAME] => masked
    [SHIPTOSTATE] => HI
    [SHIPTOSTREET] => masked
    [SHIPTOZIP] => 96662-1302
    [STATE] => GA
    [STREET] =>masked
    [ZIP] => 30062
    [METHOD] => DoDirectPayment
    [CURRENCYCODE] => USD
    [USER] => masked
    [PWD] => ****************
    [VERSION] => 2.3
    [SIGNATURE] => ********************************************************
)


Response: 
Array
(
    [TIMESTAMP] => 2010-02-03T13:48:16Z
    [CORRELATIONID] => eebdf17305593
    [ACK] => SuccessWithWarning
    [VERSION] => 2.3
    [BUILD] => 1179072
    [L_ERRORCODE0] => 10571
    [L_SHORTMESSAGE0] => Transaction approved but with invalid CSC format.
    [L_LONGMESSAGE0] => This transaction was approved. However, the Card Security Code provided had too few, too many, or invalid character types but, as per your account option settings, was not required in the approval process.
    [L_SEVERITYCODE0] => Warning
    [L_ERRORPARAMID0] => ProcessorResponse
    [L_ERRORPARAMVALUE0] => 0000
    [AMT] => 42.00
    [CURRENCYCODE] => USD
    [AVSCODE] => Y
    [CVV2MATCH] => I
    [TRANSACTIONID] => 123456789
    [CURL_ERRORS] => 
)


DoDirectPayment, Elapsed: 3333ms -- SuccessWithWarning

ariasparkle:

I had this problem no fix that i could find. I don't use express. I switched to pro and all works fine! My customers love it better.

To clarify, one CANNOT use Pro without also using Express. Doing so is against PayPal's Terms of Service which you agreed to when you contracted for permission to use Pro.

volcanocruiser:

Here is a requested log from this morning.

Request Parameters: {DoDirectPayment}

[ACK] => SuccessWithWarning

Okay, good. 
So the problem is isolated to Express.

Although, I'm puzzled why it would reject it merely based on presence of zenid in the URL ... In all the testing I've done I don't recall seeing it do that before.

I haven't been able to find any information on PayPal as to whether or not they are limiting the lengths or flagging certain characters. This was working quite well until the early part of the year. I wasn't alerted to it quickly however since most customers are paying with CCs. Solely on the express checkout is the problem exhibited.

Is there any way to limit or control the id length? I'm thinking a few tests could at least rule out if I'm hitting a character limitation. If it is an API issue I'd have some evidence to post over on the PayPal dev forums.

Aloha!

PayPal's own documentation states that RETURNURL and CANCELURL are restricted as follows:> Character length and limitations: 2048 characters
And, your logs show that the submitted values are properly url-encoded, so that can't be the problem.

I suggest posting the log from your first post above as a new support ticket to PayPal: https://www.paypal.com/mts