Help, Im at a total loss

[Anon]

I havn't accually started on the script, but I've just been thinking. I am trying to make a script where people are allowed to use paypal. I would like to know how to read the email from paypal confirming the registration. But, a person could just email me with that and get credit for money that wasn't set. So after I recieve the email I would have to go to the paypal account info (Still at a loss because i wouldnt know how to set cookies on my server) and check if that person really submitted some money. BUT, they (the person) could send a fake email saying they deposited the same amount, then when the script goes to check paypal info it would be there, so the user could get unlimited deposits. This was probably hard to understand, but if you would like to help please respond. Thanks alot.

[ame12]

If you read the Paypal mail headers and parse them, it should be a pretty good indicator of validity. The mail headers require some skill to forge, especially if you have some specific and unique attributes regarding your account identifier. Also the email ID might be verified as well against the Paypal server (to ensure that it really sent it). This would be a good two-step process to make sure the mail is real.

Dave

===========================================
http://badblue.com/helpphp.htm
Free small footprint web server for Windows

PHP, file-sharing, Access/Excel transcoding