ALERT: PayPal Direct Payment Error ( <!-- -->)

The customers I have contacted who have this issue are receiving messages about the credit card billing address is not correct.

Any help would be great.

Z

I can say that I was getting this error related to an incorrect Address (zip) validation as well. Is there any way to intercept the error from paypal and display a little bit nicer error message? I know that if I was buying something and got some random paypal message on a site that doesn't even appear to be using paypal, I would be gone. Where can I intercept and restate the error?

This change in error handling has worked for me. Caution, it may break other things.

IN FILE:
includes\modules\payment\paypaldp.php

Near Lines 1455
REPLACE or REMARK:
if ($basicError ||
(isset($_SESSION['paypal_ec_token']) && $_SESSION['paypal_ec_token'] != urldecode($response['TOKEN'])) ) {

WITH:
if ($basicError) {

stagebrace:

This change in error handling has worked for me. Caution, it may break other things.

IN FILE:
includes\modules\payment\paypaldp.php

Near Lines 1455
REPLACE or REMARK:
if ($basicError ||
(isset($_SESSION['paypal_ec_token']) && $_SESSION['paypal_ec_token'] != urldecode($response['TOKEN'])) ) {

WITH:
if ($basicError) {

Stagebrace, you're correct -- the $response[TOKEN] isn't always set in the data that comes back from PayPal. So much for consistency in their APIs. Your approach should be fine. Nevertheless ...

I think the following is slightly more efficient from a security standpoint:
Replace this:if ($basicError || (isset($_SESSION['paypal_ec_token']) && $_SESSION['paypal_ec_token'] != urldecode($response['TOKEN'])) ) {with this:```
if ($basicError ||
([B]([/B]isset($_SESSION['paypal_ec_token'])[B] && isset($response['TOKEN']))[/B] && $_SESSION['paypal_ec_token'] != urldecode($response['TOKEN'])) ) {

Thanks for your diligence in resolving this issue.
Will the code change eliminate the errors with PayPal Website Payments Pro module? Would love to use the integrated payment processing, but can't afford to lose any sales...

Will the code change eliminate the errors with PayPal Website Payments Pro module?

The code suggested has elemiated the **ALERT: PayPal Direct Payment Error ( <!-- -->) **for me.

me too.

Does this change need to be made in paypalwpp.php too?

Thanks

Duncan

No, just the file name mentioned in post #24

I too am getting the error.. so I will try the fix as well. I'll let you all know if there are issues.

I am getting this error as well but I cannot open the includes\modules\payment\paypaldp.php

I have had my cart up and working for over a month, now this. Have applied the code && isset($response['TOKEN'])). Will see if it works.

Just had the 10413 problem on my site and spent 6 hours figuring it out. If Sub-total in Modules>Order Total is disabled it gave me the error, but once I turned it back on it now works fine.