PayPal IPN偵聽器回發失敗

Question

第一次來這里，經過數天試圖解決問題，我完全被迷住了。 這是此問題的背景...

我有一個PayPal IPN偵聽器腳本。 實際上，我有兩個版本，因為第一個不起作用，所以我嘗試了另一個版本，但也沒有起作用。 我從PayPal獲得的兩個IPN偵聽器腳本...

paypal_notifyA.php

來自...開發人員。 貝寶。 com / docs / classic / ipn / gs_IPN /

腳本停在...

fputs（$ fp，$ header。$ req）;

<?php require_once("../lib/PHPMailer/PHPMailerAutoload.php"); ?>

<?php
// Paypal IPN

// Send an empty HTTP 200 OK response to acknowledge receipt of the notification 
header('HTTP/1.1 200 OK');

// Assign payment notification values to local variables
$invoiceID          = $_POST['invoice'];
$paymentStatus      = $_POST['payment_status'];
$productID          = $_POST['item_number'];
$paymentAmount      = $_POST['mc_gross'];
$paymentCurrency    = $_POST['mc_currency'];
$txnID              = $_POST['txn_id'];
$receiverEmail      = $_POST['receiver_email'];
$payerEmail         = $_POST['payer_email'];
$response           = $_POST['response'];

// Build the required acknowledgement message out of the notification just received  
$req = 'cmd=_notify-validate';                  // Add 'cmd=_notify-validate' to beginning of the acknowledgement
foreach ($_POST as $key => $value) {            // Loop through the notification NV pairs
    $value = urlencode(stripslashes($value));   // Encode these values
    $req  .= "&$key=$value";                    // Add the NV pairs to the acknowledgement
}

// Set up the acknowledgement request headers
$header  = "POST /cgi-bin/webscr HTTP/1.1\r\n";                    // HTTP POST request
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";

// The PayPal IPN Simulator fails on the line below...
// Open a socket for the acknowledgement request
$fp = fsockopen('tls://www.sandbox.paypal.com', 443, $errno, $errstr, 30);  // paypal.com (LIVE) - sandbox.paypal.com (TEST)

// Send the HTTP POST request back to PayPal for validation
fputs($fp, $header . $req);

while (!feof($fp)) {                        // While not EOF
    $res = fgets($fp, 1024);                // Get the acknowledgement response
    if (strcmp ($res, "VERIFIED") == 0) {   // Response contains VERIFIED - process notification

        $testStage = "Got past Verified!";
        require_once("../emails/ipn_test.php");

        // DO MY OWN VERIFIED STUFF HERE

// ***** INVALID RESPONSE ***** 
} else if (strcmp ($res, "INVALID") == 0) { // Response contains INVALID - reject notification

    // DO MY OWN INVALID STUFF HERE
}

}
fclose($fp);  // Close the file
?>

paypal_notifyB.php

來自... github。 com /paypal/ipn-code-samples/blob/master/paypal_ipn.php

腳本停在...

$ res = curl_exec（$ ch）;

並在錯誤日志中報告以下內容...

無法連接到PayPal以驗證IPN消息：錯誤：14077410：SSL例程：SSL23_GET_SERVER_HELLO：sslv3警報握手失敗

<?php require_once("../lib/PHPMailer/PHPMailerAutoload.php"); ?>

<?php
// Paypal Notify

// Start session
session_start();

// CONFIG: Enable debug mode. This means we'll log requests into 'ipn.log' in the same directory.
// Especially useful if you encounter network errors or other intermittent problems with IPN (validation).
// Set this to 0 once you go live or don't require logging.
define("DEBUG", 1);

// Set to 0 once you're ready to go live
define("USE_SANDBOX", 1);

define("LOG_FILE", "./ipn.log");


// Read POST data
// reading posted data directly from $_POST causes serialization
// issues with array data in POST. Reading raw POST data from input stream instead.
$raw_post_data = file_get_contents('php://input');
$raw_post_array = explode('&', $raw_post_data);
$myPost = array();
foreach ($raw_post_array as $keyval) {
    $keyval = explode ('=', $keyval);
    if (count($keyval) == 2)
        $myPost[$keyval[0]] = urldecode($keyval[1]);
}

// read the post from PayPal system and add 'cmd'
$req = 'cmd=_notify-validate';
if(function_exists('get_magic_quotes_gpc')) {
    $get_magic_quotes_exists = true;
}

foreach ($myPost as $key => $value) {
    if($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) {
        $value = urlencode(stripslashes($value));
    } else {
        $value = urlencode($value);
    }
    $req .= "&$key=$value";
}

// Post IPN data back to PayPal to validate the IPN data is genuine
// Without this step anyone can fake IPN data
if(USE_SANDBOX == true) {
    $paypal_url = "https://www.sandbox.paypal.com/cgi-bin/webscr";
    $livetestEmail = "info-facilitator@flysoftware.com";
} else {
    $paypal_url = "https://www.paypal.com/cgi-bin/webscr";
    $livetestEmail = "info@flysoftware.com";
}

$ch = curl_init($paypal_url);
if ($ch == FALSE) {
    return FALSE;
}

curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);

if(DEBUG == true) {
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch, CURLINFO_HEADER_OUT, 1);
}

// Set TCP timeout to 30 seconds
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));

// CONFIG: Please download 'cacert.pem' from "http://curl.haxx.se/docs/caextract.html" and set the directory path
// of the certificate as shown below. Ensure the file is readable by the webserver.
// This is mandatory for some environments.

$cert = __DIR__ . "./cacert.pem";
curl_setopt($ch, CURLOPT_CAINFO, $cert);

// PayPal IPN Simulator fails on the line below and reports following error...
// Can't connect to PayPal to validate IPN message: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
$res = curl_exec($ch);

if (curl_errno($ch) != 0) { // cURL error

    if(DEBUG == true) { 
        error_log(date('[Y-m-d H:i e] '). "Can't connect to PayPal to validate IPN message: " . curl_error($ch) . PHP_EOL, 3, LOG_FILE);
    }
    curl_close($ch);
    exit;
} else {
        // Log the entire HTTP response if debug is switched on.
        if(DEBUG == true) {
            error_log(date('[Y-m-d H:i e] '). "HTTP request of validation request:". curl_getinfo($ch, CURLINFO_HEADER_OUT) ." for IPN payload: $req" . PHP_EOL, 3, LOG_FILE);
            error_log(date('[Y-m-d H:i e] '). "HTTP response of validation request: $res" . PHP_EOL, 3, LOG_FILE);
        }
        curl_close($ch);
}

// Inspect IPN validation result and act accordingly
// Split response headers and payload, a better way for strcmp

$tokens = explode("\r\n\r\n", trim($res));
$res = trim(end($tokens));

if (strcmp ($res, "VERIFIED") == 0) { // Response is verified

    $testStage = "Got past Verified!";
    require_once("../emails/ipn_test.php");

    // DO MY OWN VERIFIED STUFF HERE

// ***** INVALID RESPONSE ***** 
} else if (strcmp ($res, "INVALID") == 0) { // Response contains INVALID - reject notification

    // DO MY OWN INVALID STUFF HERE

    if(DEBUG == true) {
        error_log(date('[Y-m-d H:i e] '). "Invalid IPN: $req" . PHP_EOL, 3, LOG_FILE);
    }

}
?>

當我在PayPal IPN模擬器中嘗試兩個腳本時，兩個報告...

IPN已發送，握手已驗證。

但是，兩個腳本都不會與PayPal通信，並且永遠不會達到“如果已驗證”條件。 因此，在這種情況之后還沒有后端代碼是無關緊要的-只是試圖讓監聽器暫時工作！

我已經與我的網絡托管商進行了交談，他們說他們禁用了SSLv3，以希望引起問題。 這沒有什么區別，並且兩個腳本在它們再次與PayPal通信時仍繼續失敗。 我的房東聲稱這不是“他們的”錯誤，並且與PayPal有關。 盡管我將主機指向相關的SO線程（盡管我沒有聲譽，所以無法發布）。

堆棧溢出 。 com /問題/ 35030756 / paypal-ipn-openssl-error14077410ssl-routinesssl23-get-server-hellosslv3-aler

堆棧溢出 。 com /問題/ 34955346 / paypal-ipn-握手問題

貝寶的這個頁面...

貝寶知識。 com / infocenter / index？page = content＆id = FAQ1766＆expand = true＆locale = zh_CN

我希望有人能幫助我解決這個問題，或者至少確認它是“我的”腳本有問題還是服務器有問題，因為我無處可去！

PS我對PHP非常陌生。

Answer 1

面臨同樣的問題，但是這里使用Java servlet來捕獲IPN通知。 收到大量參數后，將響應狀態200 OK發送回。 然后，形成一個新的HTTP請求，保留第一步中接收到的所有參數，並添加一個額外的命令“ cmd”-事情看上去與您的php代碼非常相似。

如我所見，fsockopen嘗試連接到“ tls：//www.sandbox.paypal.com”，而我正在使用“ https://www.sandbox.paypal.com/cgi-bin/webscr ”。 您可能會遵循本教程，該教程非常有幫助http://www.geekality.net/2011/05/28/php-tutorial-paypal-instant-payment-notification-ipn

終於收到了驗證。 需要注意的一件事是，由於https，有一個證書過期警告，為此我必須在Apache http客戶端中禁用忽略cookie。

希望這篇文章減輕您的痛苦。