I am looking to use PayPal to accept a payment through my website. I am looking at the Smart Payment button option. If the payment is successful I need to update something in my website DB. How can I determine whether the payment was successful or not? I cant see anything the API docs.
I also need to retain user context with a PHP session ID. How can I pass that to the paypal site and ensure it is returned with the success / fail indicator?
Use Paypal IPN to receive payment notifications. Setup a server endpoint to respond to IPN requests and update your DB etc...
To maintain state, you will need to include a hidden input filed in your Smart Payment Button with a name of custom and a value of your choice (session id).
Setup a IPN endpoint ie: /checkout/ipn, to receive Paypal notifications. Capture the session ID with $_POST['custom'];
I ended up using the Braintree API for this use case. Ther Brantree API returns a unique payment identifier (payment Nonce) which you can then validate by submitting a call back to the Braintree API to ensure the payment was actually received properly.
I'm trying to troubleshoot a problem with a Joomla component I brought as the developers aren't helping at all.
When I set for an order through the website and pay for it through PayPal, it returns to the website but the IPN handler - ipntest() - hasn't been triggered. ipntest() should send me an email when triggered. I have used the IPN Simulator to try and trigger ipntest() and it says that its been sent successfully but the ipntest() doesn't trigger.
If I view the function directly in my browser (e.g. http://example.com/index.php?option=com_mycomponent&task=orderprocessor.ipntest), it works fine and sends the email.
Any help would be most appreciated.
Have a workign Magento 1.7 live site, its Paypal has been fine until recently when another site got attached to the PayPal account it uses.
This other site does not use IPN (Magento site uses PayPal Website Standard payments). However, I think it is that the other site triggers a IPN notification that goes to the default URL , which is of course set to the livesite's /paypal/ipn/ URL IPN listener.
I have found this thread on a different site http://www.magentocommerce.com/boards/errors.php/viewthread/285840/ where some solutoins are given but it seems very inconclusive. What is the recommended way to fix this issue?
1) write dummy script IPN to catch nonIPN Calls and respond with something
2) turn off IPN in paypal account, since Magento may send its own ones anyway (?)
3) Other solution?
thanks for any advice!
Do not set actual IPn url in your paypal account.
IPN url should be posted to paypal( Generally is posted in Magento ) so will result in IPNs to these payment received on stated IPN url.
If you set Magento IPN URL in paypal IPN value then when payment is received by another cart added and if that cart is not posting IPN url when payment related request is posted then IPN will be delivered to URL defined in IPN value on Paypal.
Your assumption is correct in that if you have IPN configured in your PayPal account it will catch transactions from anything that hits your PayPal account whether it came from Magento or not.
You can indeed disable IPN in the PayPal account and specify an IPN URL with individual payment requests to PayPal. This is done using NotifyURL in API requests or notify_url in standard buttons.
I'm pretty sure Magento is already doing this by default, but you should probably check. If it's not you can extend the Magento PayPal module to include this so that you don't have to set it in the PayPal account, which again would get hit for ALL transactions.
I'm developing small website which sells digital goods using Joomla. On my website, after confirming the customer's payment, we have to calculate some private information for him.
Hence, we have to prevent someone who didn't pay from visiting our PayPal IPN handler.
Now I have a nice IPN handler code for Joomla, which was written by Mr. Oleksandr Balyuk.
I think, using this code, I can describe my calculation process in Joomla.
But I've one question.
How can I prevent someone who didn't pay from browsing my IPN handler?
PayPal gives you the ability to confirm that an IPN came from them (As opposed to a spoofed IPN from a malicious user).
You simply need to post the entire contents of the received IPN back to PayPal, and you will receive a response that says VERIFIED if the IPN is authentic, or INVALID if even one character is different.
Check out page 16-17 of the IPN guide for more info:
https://cms.paypal.com/cms_content/US/en_US/files/developer/IPNGuide.pdf
When people make a successful payment with PAyPal in my Magento webshop it automatically creates an invoice with unique invoice number. For bookkeeping reasons, I have to disable it.
I've been searching for a few weeks now but I still haven't found the solution for this problem. What I know so far is that this is caused by IPN. The problem is I don't know how to turn this off without damaging my shop or paypal payments.
Some more specs:
- Version: Magento 1.6.2.0
- Standard paypal
Files containing IPN:
www/app/code/core/Mage/Paypal/controllers
"Turning it Off" is sort of vague, but there's no configuration setting on the Magento side that will allow you to accept PayPal standard payments using the IPN system but not create invoices. You're looking at writing custom code to do this. Here are some starting points.
PayPal IPN works with a callback URL. That is, once PayPal has processed a payment, it fetches a specific URL from Magento with a specific set of data in the post field. Then, based on this information, appropriate action is taken (an invoice is created, a credit is issued, etc.). So the quickest way to achieve your goal would be to change the IPN URL in your PayPal configuration. This means PayPal is still notifying a URL, but not the Magento URL, and an invoice never gets created.
If that doesn't work or has unacceptable side effects, here's the code points you're interested in. Assuming you're using a standard Magento PayPal setup with an IPN URL configured at
http://yourstore.example.com/paypal/ipn/
Magento will handles this request with the indexAction method in
#File: app/code/core/Mage/Paypal/controllers/IpnController.php
public function indexAction()
{
if (!$this->getRequest()->isPost()) {
return;
}
try {
$data = $this->getRequest()->getPost();
Mage::getModel('paypal/ipn')->processIpnRequest($data, new Varien_Http_Adapter_Curl());
} catch (Exception $e) {
Mage::logException($e);
}
}
The business logic for this method (including your invoice creation) starts in the paypal/ipn model. In a standard system this resolves to the class at
#File: app/code/core/Mage/Paypal/Model/Ipn.php
class Mage_Paypal_Model_Ipn
{
....
}
Trace the code from here to find the method you'll want to rewrite and implement your desired functionality changes (not creating an invoice). Your best bet will be setting up a PayPal developer sandbox account so you can repeatedly hit the URL until you've traced your code to the right spot.
Good luck!
instead of hacking your core Magento files, just turn off IPN within PayPal.
By default, there are three states for PayPal IPN:
On
Off
Disabled
The first option will let you specify an IPN URL within your PayPal Profile, and you'll have access to 'IPN History' under the 'History' tab. All IPN data for your account will be sent to the URL you specified, unless you override it with notify_url / NOTFIFYURL on a per-transaction basis.
The second option will turn IPN off on your account, but you can still use it by setting notify_url / NOTIFYURL on a per-transaction basis. This is what Magento uses.
The third option will stop generating IPN messages for your account, even if your shopping cart (Magento, in this case) specifically asks for IPN messages by sending notify_url / NOTIFYURL. No IPN messages will be delivered whatsoever.
To set IPN to 'Disabled', first set it to 'On' in your PayPal account and provde a URL to an IPN address (though this can be any address, just enter http://www.google.com/ for example).
Once enabled, look for the option stating 'Stop receiving IPN messages (Disable)'. Use this to disable IPN altogether.
Source:-https://lastdropofink.co.uk/tools/magento/magento-paypal-ipn/
If I got you right, you should change Payment Action to Authorization for your paypal payment method. See more info there:
http://www.magentocommerce.com/knowledge-base/entry/setting-up-paypal-for-your-magento-store#1.1
Or, instead of hacking your core Magento files, just turn off IPN within PayPal.
By default, there are three states for PayPal IPN:
On
Off
Disabled
The first option will let you specify an IPN URL within your PayPal Profile, and you'll have access to 'IPN History' under the 'History' tab. All IPN data for your account will be sent to the URL you specified, unless you override it with notify_url / NOTFIFYURL on a per-transaction basis.
The second option will turn IPN off on your account, but you can still use it by setting notify_url / NOTIFYURL on a per-transaction basis. This is what Magento uses.
The third option will stop generating IPN messages for your account, even if your shopping cart (Magento, in this case) specifically asks for IPN messages by sending notify_url / NOTIFYURL. No IPN messages will be delivered whatsoever.
To set IPN to 'Disabled', first set it to 'On' in your PayPal account and provde a URL to an IPN address (though this can be any address, just enter http://www.google.com/ for example).
Once enabled, look for the option stating 'Stop receiving IPN messages (Disable)'. Use this to disable IPN altogether.
What I’ve been really surprised by over the past few weeks is the number of sites that don’t actually have this turned on and it’s just not limited to self-builds even the really expensive Magento builds are missing this out this as a step.
Turning on the PayPal Instant Payment Notification (IPN for short) is an excellent idea as means that when a customer pays for an item using PayPal then the payment information will be updated on the Magento order details in the administration panel.
It only takes a few moments to enable and I’ll show you how to enable IPN for your Magento site below. This will mean that when you receive an order via PayPal Express for example, you can actually see the transaction details in Magento and if you’re using eSellerPro and have the eSellerPro Connector enabled for sales order processing, your order & payment details will match up automatically.
Setting this up won’t take more than a few moments and here are 6 simple steps to do this:
1 Login to PayPal
2 Hover on “Profile” and select “My Selling Preferences”
3 Halfway down the page, click on “Update” next to “Instant payment notifications”
Now enter the following details:
Notification URL – This is simply http://your-magento-store.com/paypal/ipn/ replacing “your-magento-store.com” with your website address. <= This is the part that normally trips everyone up as they’re not sure what to enter here.
IPN messages – Set this to “Receive IPN messages (Enabled)”
Press Save
That’s it job done.
To test whether IPN is working or not is dead simple, just make a test transaction through your website (you will need a secondary PayPal account for this) and a few minutes later, check on the order in your Magento admin panel has been updated with the PayPal transaction details.
To help you, I have put to images below, the image on the left has no IPN details, the image on the right does.