Paypal IPN 和 wordpress 失败

Posted 2023-02-22

【中文标题】Paypal IPN 和 wordpress 失败

【英文标题】：Paypal IPN and wordpress failure

【发布时间】：2016-10-15 22:03:06

【问题描述】：

我有一个网站，我将接受来自贝宝的贝宝 IPN。这个网站是一个wordpress网站，在一个共享的环境中，我已经定制了。使用 IPN 模拟器，它总是在我的 ipn 网络服务侦听器上失败，但在基本 url 上却成功。为什么我无法在我的网络服务上收到成功并记录数据？

使用我的浏览器并点击以下网络服务将写入我的日志文件。使用 IPN 模拟器永远不会写入我的日志文件。此外，我的 SSL 访问日志从未收到来自 IPN 的 POST，但 http 会收到。底部访问日志

打击

https://example.example.org/wp-content/plugins/myplugin/controllers/payments/ipn

IPN 模拟器失败。“IPN 未发送，握手未验证。请检查您的信息。”

击球 https://example.example.org/

成功点击IPN已发送，握手已验证。

 Core::error("In the ipn function");
            // STEP 1: read POST data
            // Reading POSTed data directly from $_POST causes serialization issues with array data in the POST.
            // Instead, read raw POST data from the input stream.
            $raw_post_data = file_get_contents('php://input');
            $raw_post_array = explode('&', $raw_post_data);
            $myPost = array();
            foreach ($raw_post_array as $keyval) 
              $keyval = explode ('=', $keyval);
              if (count($keyval) == 2)
                $myPost[$keyval[0]] = urldecode($keyval[1]);
            
            Core::error("IPN");
            Core::error(json_encode($myPost));
            Core::error(json_encode($_GET));
            Core::error(json_encode($_POST));
            // read the IPN message sent from PayPal and prepend 'cmd=_notify-validate'
            $req = 'cmd=_notify-validate';
            if (function_exists('get_magic_quotes_gpc')) 
              $get_magic_quotes_exists = true;
            
            foreach ($myPost as $key => $value) 
              if ($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) 
                $value = urlencode(stripslashes($value));
               else 
                $value = urlencode($value);
              
              $req .= "&$key=$value";
            

            $path = "/home1/xx/";
            $cert = "ff67367c5cd4de4ae18bcce1d70fdabd7c866135.pem";


            $sandBoxUrl = "https://www.sandbox.paypal.com/cgi-bin/webscr";
            $prUrl = "https://www.paypal.com/cgi-bin/webscr";
            // Step 2: POST IPN data back to PayPal to validate
            $ch = curl_init($sandBoxUrl);
            //curl_setopt($ch, CURLOPT_CAINFO, $path . $cert);
            curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_SSLVERSION, 6);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
            curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
            curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));
            // In wamp-like environments that do not come bundled with root authority certificates,
            // please download 'cacert.pem' from "http://curl.haxx.se/docs/caextract.html" and set
            // the directory path of the certificate as shown below:
            curl_setopt($ch, CURLOPT_CAINFO, '/home1/xxx/cacert.pem');
            $res = curl_exec($ch);
            if ( !$res ) 
              Core::error(curl_error($ch));
              // error_log("Got " . curl_error($ch) . " when processing IPN data");
              curl_close($ch);
              exit;
            
            Core::error("Resposne");
            Core::error($res);

            curl_close($ch);

            // inspect IPN validation result and act accordingly
            if (strcmp ($res, "VERIFIED") == 0) 
                    Core::error("VERIFIED ");
                    // The IPN is verified, process it

                    // The IPN is verified, process it:
                    // check whether the payment_status is Completed
                    // check that txn_id has not been previously processed
                    // check that receiver_email is your Primary PayPal email
                    // check that payment_amount/payment_currency are correct
                    // process the notification
                    // assign posted variables to local variables
                    $item_name = $_POST['item_name'];
                    $item_number = $_POST['item_number'];
                    $payment_status = $_POST['payment_status'];
                    $payment_amount = $_POST['mc_gross'];
                    $payment_currency = $_POST['mc_currency'];
                    $txn_id = $_POST['txn_id'];
                    $receiver_email = $_POST['receiver_email'];
                    $payer_email = $_POST['payer_email'];
                    // IPN message values depend upon the type of notification sent.
                    // To loop through the &_POST array and print the NV pairs to the screen:
                    foreach($_POST as $key => $value) 
                            $data =  $key . " = " . $value . "<br>";
                            Core::error($data);
                    

             else if (strcmp ($res, "INVALID") == 0) 
                    // IPN invalid, log for manual investigation
                    Core::error("invalid ");
            

    header("HTTP/1.1 200 OK");

    die();

IPN 垃圾邮件后的 HTTPS 日志

 ip - - [14/Jun/2016:19:29:05 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
ip - - [14/Jun/2016:19:30:07 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
ip - - [14/Jun/2016:19:31:07 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"

IPN 垃圾邮件后的非Https 日志

ip - - [14/Jun/2016:17:35:13 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:37:10 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:39:04 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:58:28 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:58:35 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"

edit 如果我用this 替换我的脚本并将其放在我网站的根目录中，它将起作用。如果我将脚本移动到根目录下的任何位置，它将无法工作。

edit2 无论是否使用我的脚本，IPN 总是在我网站的索引上成功。我不明白为什么它会在这里成功

【问题讨论】：

点击example.example.org/wp-content/plugins/myplugin/controllers/…

我仍然收到“IPN 未发送，握手未验证。请检查您的信息。”到目前为止，它似乎只适用于我网站的根目录。在其他任何地方，我都会失败。

尝试将 github 脚本与您的 wordpress 脚本（放置在根目录时测试良好的那个）放在同一目录中，并测试当您指向 IPN 模拟器时是否获得经过验证的握手它。这是为了检查问题是服务器/证书配置相关还是脚本相关。

尝试从我原来的位置运行新脚本，但我无法让它工作。但是，当我访问我的网站的根目录时，我仍然得到了有效的响应。 :(

但是您可以在浏览器中使用 https:// 协议访问您的 IPN 脚本，对吗？如果是这样，很可能是服务器配置问题，我认为如果您相应地编辑问题标题，您可以获得更好的帮助。

【参考方案1】：

答案是，对于开发，您需要从位于 sandbox.paypal.com 而不是 developer.paypal.com 的 IPN 模拟器发送 IPN 请求。

您还必须使用在 developer.paypal.com 中创建的 [e-mail] 凭据登录到 sandbox.paypal.com。