Paypal IPN失败

Question

    // Read the notification from PayPal which comes in the form of a POST array and create the acknowledgement response
    $req = 'cmd=_notify-validate';               // add 'cmd' to beginning of the acknowledgement you send back to PayPal

    foreach ($_POST as $key => $value) 
    { // Loop through the notification NV pairs
    $value = urlencode(stripslashes($value));  // Encode the values
    $req .= "&$key=$value";                    // Add the NV pairs to the acknowledgement
    }


    // Assign the paypal payment notification values to local variables
    if($_POST){
    $item_name = $_POST['item_name'];
    $item_number = $_POST['item_number'];
    $payment_status = $_POST['payment_status'];
    $payment_amount = $_POST['mc_gross'];
    $payment_currency = $_POST['mc_currency'];
    $txn_id = $_POST['txn_id'];
    $receiver_email = $_POST['receiver_email'];
    $payer_email = $_POST['payer_email'];}

    //Set up the acknowledgement request headers (this is the updated version for http 1.1)
    $header .= "POST /cgi-bin/webscr HTTP/1.1\r\n";
    $header .= "Content-Type: application/x-www-form-urlencoded\r\n";
    $header .= "Host: www.paypal.com\r\n";
    $header .= "Connection: close\r\n";
    $header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
    //Open a socket for the acknowledgement request
    $fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);

    if(!$fp){
        echo "HTTP ERROR";
    }
    else
    {//start 1

    // Post request back to PayPal for validation
    fputs ($fp, $header . $req);

    //once paypal receives the acknowledgement response, another message will be send containing the single word VERIFIED or INVALID

    while (!feof($fp)) 
        { //start 2, while not EndOfFile
    $res = fgets ($fp, 1024); // Get the acknowledgement response
    $res = trim($res);
        if (strcmp ($res, "VERIFIED") == 0) 
            {// start 3, Response is OK

            if ($payment_status == "Completed")
                {//start 4

                //send email announcing success

                $from = "Rupert Heath Literary Agency";
                $to = $payer_email;
                $subject = "Ebook";
                $body = "It works";
                mail($to, $subject, $body, $from);

                }//end 4
            }//end 3
            else if(strcmp ($res, "INVALID") == 0)
                {//start 5

                //send email announcing failure
                //$error_log .= 'Line 57'

                $from = "Guide Test Page";
                $to = $payer_email;
                $subject = "INVALID IPN";
                $body = "Doesn't work";
                mail($to, $subject, $body, $from);
                }//end 5


    } //end 2
fclose ($fp);  //close file pointer
} //end 1

即时付款通知(IPN)详细信息

消息ID69025489S2598613V

创建日期/时间18/07/2013 23:22 PDT

IPN消息mc_gross=0.01&protection_eligibility=合格&address_status=confirment&payer_id=c3usv8a4q2qdw&tax=0.00&address_street=ramsey House 34 Fowlers road&payment_date=23:22:44 2013年7月18日pdt&payment_status=completed&charset=windows-1252&address_zip=sp1 2qu&first_name=michael&mc_fee=0.01&address_country_code=gb&address_name=michael heath&notify_version=3.7&custom=&payer_status=verified英国&address_city=salisbury&quantity=1&verify_sign=ahkychsfiy2frgznoqmghq3lhkmabowejqzzycdqp30hb7b99tf.04a&payer_email=[e-mail]&txn_id=4d0877596n038120y&payment_type=instant&last_name=heath&address_state=wiltshire&receiver_email=[e-mail]&payment_fee=&receiver_id=brm2tymp4acz8&txn_type=web_accept&item_name=eBook mc_currency=GBP&item_number=&residence_country=GB&handling_amount=0.00&transaction_subject=eBook&payment_gross=&shipping=0.00&ipn_track_id=b0a3b4ae3c51c

有谁能帮我调试一下这个问题吗？

Answer 1

这条线很可能是一个问题：

$value = urlencode(stripslashes($value));

具体地说，在那里使用stripslashs。如果您的PHP配置有（上帝保佑您）神奇的引号，您只需要包含stripslashs。值得庆幸的是，从PHP5.4开始，神奇的引号已经被删除，因此您可能可以安全地从该行中删除stripslashs，使其成为：

$value = urlencode($value);

信不信由你，Paypal允许用户数据包含反斜杠。因此，如果IPN有任何反斜杠，并且您使用stripslashes删除它们，那么当您将IPN数据发布回PayPal以进行验证时，PayPal将给您无效的响应，因为数据将不匹配。