PayPal Instant Payment Notification Warning‏

I'm sorry. But I did do everything you said and the problems still happened.:(:(:(

When i browse https://www.xx.com/ipn_main_handler.php, it returns http 500 error. Another site which no problem returns "Nothing to process. Please return to home page."

I need add something to make it more clear. I have two zen-cart in the site, https://www.xxx.com and https://www.xxx.com/123/

https://www.xxx.com/ipn_main_handler.php that's 500 error but https://www.xxx.com/123/ipn_main_handler.php returns "Nothing to process. Please return to home page."

The error log is
2010-02-08 05:04:10

(live transaction) --> https://api-3t.paypal.com/nvp
Request Headers:
Array
(
[0] => Content-Type: text/namevalue
[1] => X-VPS-Timeout: 45
[2] => X-VPS-VIT-Client-Type: PHP/cURL
[3] => X-VPS-VIT-Integration-Product: PHP::Zen Cart - WPP-NVP
[4] => X-VPS-VIT-Integration-Version: 1.3.8a
)

Request Parameters: {SetExpressCheckout}
Array
(
[LOCALECODE] => US
[PAYMENTACTION] => Sale
[AMT] => 424.99
[RETURNURL] => https://www.xxx.com/ipn_main_handler.php?type=ec
[CANCELURL] => https://www.xxx.com/login.html?ec_cancel=1
[PAGESTYLE] => xxx
[METHOD] => SetExpressCheckout
[CURRENCYCODE] => USD
[USER] => xxx.gmail.com.gmail.com
[PWD] => ****************
[VERSION] => 3.2
[SIGNATURE] => ****************************************************BWQ4
)

Response:
Array
(
[TIMESTAMP] => 2010-02-08T10:04:10Z
[CORRELATIONID] => 6746916cb45ad
[ACK] => Failure
[VERSION] => 3.2
[BUILD] => 1179072
[L_ERRORCODE0] => 10002
[L_SHORTMESSAGE0] => Security error
[L_LONGMESSAGE0] => Security header is not valid
[L_SEVERITYCODE0] => Error
[CURL_ERRORS] =>
)

SetExpressCheckout, Elapsed: 447ms -- Failure

TIMESTAMP=2010%2d02%2d08T10%3a04%3a10Z&CORRELATIONID=6746916cb45ad&ACK=Failure&VERSION=3%2e2&BUILD=1179072&L_ERRORCODE0=10002&L_SHORTMESSAGE0=Security%20error&L_LONGMESSAGE0=Security%20header%20is%20not%20valid&L_SEVERITYCODE0=Error&CURL_ERRORS=

huaxu22:

[L_ERRORCODE0] => 10002
[L_SHORTMESSAGE0] => Security error
[L_LONGMESSAGE0] => Security header is not valid
[L_SEVERITYCODE0] => Error
That's an Express Checkout error message, and is completely different than the topic being discussed here about IPN Warning emails.

As discussed elsewhere on the forum and in the FAQ area, the 10002 error results from you providing invalid API details in your Express Checkout module settings. It could be that you've not done any setup properly:
https://www.zen-cart.com/getpaypal
https://www.zen-cart.com/tutorials/index.php?article=319

One of our sites who uses the PayPal module got this error and was using the similar URL.

I looked at my copy of Zen Cart and the PayPal module was saying this in it's config:

NOTE: On https://www.paypal.com,
set your PayPal IPN Return URL to:
http://www.domain.com/catalog/index.php?main_page=checkout_process

Is this correct? Will it fix it if I change this?

The correct setup instructions are here: http://www.zen-cart.com/wiki/index.php/PayPal

I keep getting these warning notifications and yesterday I got the message that IPN was disabled, however the store and payments are still working fine. I am really confused now, do I really need IPN?

I have contacted my host this week, but they think this a software problem and has nothing to do with them, so they can't help me either.

Anyway IPN is disabled at my PP-account and my store is up and running :smile:

What do I do? To be honest, I would like this problem to be fixed, but I am out of options.

My client has been getting this error for a few weeks. We contacted paypal and here is the error (a 302 error):

Message ID1EM969189A884674W
Date/time created3/9/2010 17:34 PST
Original/ResentOriginal
Latest delivery attempt date/time3/13/2010 15:06 PST Notification URLhttp://handsfreebaby.com/store/index.php?main_page=checkout_process
HTTP response code
What's this?302
Delivery statusFailed
No. of retries16
Transaction ID5XK84813J9639310B
IPN typeTransaction made
IPN
Messagemc_gross=76.10&protection_eligibility=Eligible&address_status=confirm
ed&payer_id=MP8DA73T8D66C&address_street=1808 Bonner
St&payment_date=17:34:58 Mar 09, 2010
PST&payment_status=Completed&charset=windows-1252&address_zip=75069&first_na
me=Edward&mc_fee=2.51&address_country_code=US&address_name=Gretchen
Carel&notify_version=2.9&payer_status=verified&business=karen@handsfreebaby.
com&address_country=United
States&address_city=McKinney&verify_sign=A-RGKUGRzjasNm7Hothd-rb8TVxsAIhItLu
OL9zt2b6tKTkI4oSbjf8p&payer_email=integrityremodeling##########################&txn_id=5XK
84813J9639310B&payment_type=instant&last_name=Carel&address_state=TX&receive
r_email=[email protected]&payment_fee=2.51&receiver_id=ZTD2MA9XNFNQN&t
xn_type=send_money&mc_currency=USD&residence_country=US&transaction_subject=
PayPal money request from Hands Free Baby&payment_gross=76.10

Spoke to host (lunarpages.com) and they said:

An HTTP code 302 means that the request that was entered into the address bar was redirected to another location. Please note that only 4xx and 5xx response codes indicate an error in the request or on the server. 2xx and 3xx status codes indicate that the request was received without issue and was responded to without issue.

Lunarpages goes on to say to contact Zen-cart for resolution as it is not a hosting issue. Our settings haven't changed. Can you please help?

Thanks,
Jill

main_page=checkout_process is the WRONG url for the IPN notification address. Please re-read the configuration instructions as I posted 2 posts above yours.
There are 2 settings: one for auto-return and one for IPN notification. They are different. Following the instructions will make things work better ;)

That particular IPN notice wasn't generated by a transaction in your store. It was a result of you using PayPal's "Send Money" screen to send money to someone. They send IPNs for all transactions, not just those from your store. And, since you've set the wrong IPN URL in your configuration settings, it's reporting failures because it can't complete the notifications for those transactions not originating by your storefront.

Huh, I never changed that to go to the checkout page...It always went to http://handsfreebaby.com/store/ipn_main_handler.php before and I haven't made any changes. I will check the paypal account to see if the settings are different.

I just took it from your post above:> cyfarian:

Notification URLhttp://handsfreebaby.com/store/index.php?main_page=checkout_process

Hi, just searched for this and found this thread.
I've received this same email 3 times, 1 every morning at about 6.30am.
After the first one I logged into paypal/mts and logged a ticket and 3 days later I haven't heard anything back from them, except more warnings.

I'm using 1.3.9b and their error message shows my site as
https%3A%2F%2Fwww.mywebsiteaddress.com%2Fshop%2Fipn_main_handler.php
rather than https://www.mywebsiteaddre ss.com/shop/ipn_main_handler.php

Not sure if that has any relevance.
I haven't changed anything in my paypal module and everything was fine until I got the first error message on
monday.
When I go into paypal.co.uk and look at my ipn history I see that 2 have been retrying for 10 and 13 retries and both have my url show in the strange format above but my successful transactions show my url correctly.
What to do?

Nedward

Which paypal module are you actually using?
Were those "failed" IPN notices related to actual transactions? If so, what are the details inside those notices?

Hi Dr Byte, I'm using
PayPal Website Payments Pro (UK) and
PayPal Express Checkout (Pro 2.0 Payflow Edition) (UK)

The retrying ones are both actual transactions that are completed orders that I've been paid for so from my point of view I'm happy.

one of the retrying ones has this as the ipn message

mc_gross=12.94&invoice=4256-1273669430-[Pic&protection_eligibility=Eligible&address_status=confirmed&payer_id=NMKJ3PR4ZWQ6J&tax=0.00&address_street=deleted&payment_date=06:03:54 May 12, 2010 PDT&payment_status=Completed&charset=windows-1252&address_zip=deleted&first_name=deleted=0.64&address_country_code=GB&address_name=deleted&notify_version=2.9&custom=EC-4256-deleted9430&payer_status=unverified&address_country=United Kingdom&address_city=Dundee&quantity=1&verify_sign=AqBqA1nSf.CEBj1d5rbDP.LO-woKA5UkOUIVt7UhQ7ilpopLOgLtST27&payer_email=deleted.co.uk&contact_phone=+44 deleted48&txn_id=5WK95693F2876833C&payment_type=instant&last_name=deletedaddress_state=Angus&receiver_email=deleted&payment_fee=&receiver_id=JSUV4P3CBWKX2&txn_type=express_checkout&item_name=&mc_currency=GBP&item_number=&residence_country=GB&handling_amount=7.95&transaction_subject=&payment_gross=&shipping=0.00

I've inserted the word deleted where there is personal info.

Thanks

Nedward

Are they all showing &payment_status=Completed and &txn_type=express_checkout ?

Hi Dr Byte, yes they all say that.

Thanks

Nedward

Hi again, so now when I go into IPN History in paypal.co.uk, I see that the ones that were retrying are now disabled.
I've still been paid and I still receive my orders through zen cart, so am I missing anything vital by having it disabled?

It would have been nice if paypal had responded to my support ticket!

Thanks

Nedward

Since Express Checkout transactions don't rely on IPN notifications to save an order's information when it is completed, you're not missing anything in this case.
The only reason IPN is needed with Express Checkout is to record any updates to a transaction, such as refunds or disputes/reversals/fraud-alerts/etc. In such cases, it simply adds another comment in your order-status-history with the status change. It doesn't change the order amount or anything anyway. You can see all the same info in your PayPal account, so there's nothing to worry about for these 3 messages you mention with &payment_status=Complete

Ok great thanks Dr Byte.
:smile:

Paypal still didn't respond to my question.

grrrr.