Integrating PayPal with a site..

Daggeth

I have no idea how to integrate paypal with a site.

Basically, in my site I want to have a registration page. Users can chose free limited (this has nothing to do with paypal.. ) or paid premium. If they chose to get premium, I want them to go to a page where they will out CC number and such. After the payment is made, I want the script to send the email to the user with his email and password.

I obviously know how to program to send emails and everything, the only problem is how I can integrate paypal in a secure way.

I am reading all the developer tutorials they have provided at the moment.

Daggeth

I realize my last post might have been confusing to some, and probably was so ignore that. I read up on PayPal's documentation and here is what I want done but I cant accomplish it.

Someone makes a payment through the subscription link I provide them and they enter their Username (Optional feild). The IPN thingy confirms that the payment has been made and sends the variable Username and its value to my server. Also, it should send other variables like what the subscription was for and such. Then my server plays with the value, which I can do myself.

That is all I need, and I cant figure out how! 😢
I will be doing this in PHP, duh! I am a begginer, so I can understand SOME code.

Ofcourse, I want this as secure as possible so people cannot take advantage of the system.

Your help will be greatly appreciated.

jayant

When you see paypal documentation, they have the code also given in developers section in many languages including PHP, Perl,...

Daggeth

I just read the part where the sample codes were.. and I am trying to make sense of them. Please go through the code and where you see my comments, tell me If I interpreted the code right..

// read the post from PayPal system and add 'cmd'
$req = 'cmd=_notify-validate';

foreach ($HTTP_POST_VARS as $key => $value) {
  $value = urlencode(stripslashes($value));
  $req .= "&$key=$value";
}

// post back to PayPal system to validate
$header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= 'Content-Length: ' . strlen($req) . "\r\n\r\n";
$fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);

// assign posted variables to local variables
// IF THERE ARE OTHER VARIABLES, WILL THEY BE ALSO SENT?


$item_name = $HTTP_POST_VARS['item_name'];
$receiver_email = $HTTP_POST_VARS['receiver_email'];
$item_number = $HTTP_POST_VARS['item_number'];
$invoice = $HTTP_POST_VARS['invoice'];
$payment_status = $HTTP_POST_VARS['payment_status'];
$payment_gross = $HTTP_POST_VARS['payment_gross'];
$txn_id = $HTTP_POST_VARS['txn_id'];
$payer_email = $HTTP_POST_VARS['payer_email'];

if (!$fp) {
  // ERROR
  echo "$errstr ($errno)";
} else {
  fputs ($fp, $header . $req);
  while (!feof($fp)) {
    $res = fgets ($fp, 1024);
    if (strcmp ($res, "VERIFIED") == 0) {


  // IS THIS THE PART I INSERT MY CODE TO FIDDLE WITH
  // THE VARIABLES SINCE IT RETURNED VERIFIED?


  }
  else if (strcmp ($res, "INVALID") == 0) {
  // log for manual investigation
  }
  }
  fclose ($fp);
}

Fazer

I think it looks pretty good. Try replacing your POST variables with $_POST instead of $HTTP_POST_VAR. Just to keep things simple..

Regards,

Fazer

Also something that i forgot to mention was that you will need a secure certificate if you are going to be doing transactions...

jayant

Originally posted by Fazer
Also something that i forgot to mention was that you will need a secure certificate if you are going to be doing transactions...

Not really if you use PayPal or alike. PayPal has the secure certificate. You needn't get the critical details. Just direct to PayPal site with the amount field filled, rest empty, person will fill in the details there and PayPal tells your script whether the payment made was successful or not.

Fazer

Oh I see...I am not very familliar with PayPal's transaction methods..