php - Paypal IPN 和 wordpress 失败

Question

我有一个网站，我将接受来自 paypal 的 paypal IPN。这个网站是一个 wordpress 网站，在我定制的共享环境中。使用 IPN 模拟器，它总是在我的 ipn 网络服务监听器上失败，但在基本 url 上成功。为什么我无法在我的网络服务上获得成功并记录数据？

使用我的浏览器并点击下面的网络服务将写入我的日志文件。使用 IPN 模拟器永远不会写入我的日志文件。此外，我的 SSL 访问日志从未收到来自 IPN 的 POST，但 http 收到。底部访问日志

打中

https://example.example.org/wp-content/plugins/myplugin/controllers/payments/ipn

IPN 模拟器失败。“IPN 未发送，握手未验证。请检查您的信息。”

击中 https://example.example.org/

成功命中 IPN 已发送且握手已验证。

 Core::error("In the ipn function");
            // STEP 1: read POST data
            // Reading POSTed data directly from $_POST causes serialization issues with array data in the POST.
            // Instead, read raw POST data from the input stream.
            $raw_post_data = file_get_contents('php://input');
            $raw_post_array = explode('&', $raw_post_data);
            $myPost = array();
            foreach ($raw_post_array as $keyval) {
              $keyval = explode ('=', $keyval);
              if (count($keyval) == 2)
                $myPost[$keyval[0]] = urldecode($keyval[1]);
            }
            Core::error("IPN");
            Core::error(json_encode($myPost));
            Core::error(json_encode($_GET));
            Core::error(json_encode($_POST));
            // read the IPN message sent from PayPal and prepend 'cmd=_notify-validate'
            $req = 'cmd=_notify-validate';
            if (function_exists('get_magic_quotes_gpc')) {
              $get_magic_quotes_exists = true;
            }
            foreach ($myPost as $key => $value) {
              if ($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) {
                $value = urlencode(stripslashes($value));
              } else {
                $value = urlencode($value);
              }
              $req .= "&$key=$value";
            }

            $path = "/home1/xx/";
            $cert = "ff67367c5cd4de4ae18bcce1d70fdabd7c866135.pem";


            $sandBoxUrl = "https://www.sandbox.paypal.com/cgi-bin/webscr";
            $prUrl = "https://www.paypal.com/cgi-bin/webscr";
            // Step 2: POST IPN data back to PayPal to validate
            $ch = curl_init($sandBoxUrl);
            //curl_setopt($ch, CURLOPT_CAINFO, $path . $cert);
            curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_SSLVERSION, 6);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
            curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
            curl_setopt($ch, CURLOPT_HTTPHEADER, array('Connection: Close'));
            // In wamp-like environments that do not come bundled with root authority certificates,
            // please download 'cacert.pem' from "http://curl.haxx.se/docs/caextract.html" and set
            // the directory path of the certificate as shown below:
            curl_setopt($ch, CURLOPT_CAINFO, '/home1/xxx/cacert.pem');
            $res = curl_exec($ch);
            if ( !$res ) {
              Core::error(curl_error($ch));
              // error_log("Got " . curl_error($ch) . " when processing IPN data");
              curl_close($ch);
              exit;
            }
            Core::error("Resposne");
            Core::error($res);

            curl_close($ch);

            // inspect IPN validation result and act accordingly
            if (strcmp ($res, "VERIFIED") == 0) {
                    Core::error("VERIFIED ");
                    // The IPN is verified, process it

                    // The IPN is verified, process it:
                    // check whether the payment_status is Completed
                    // check that txn_id has not been previously processed
                    // check that receiver_email is your Primary PayPal email
                    // check that payment_amount/payment_currency are correct
                    // process the notification
                    // assign posted variables to local variables
                    $item_name = $_POST['item_name'];
                    $item_number = $_POST['item_number'];
                    $payment_status = $_POST['payment_status'];
                    $payment_amount = $_POST['mc_gross'];
                    $payment_currency = $_POST['mc_currency'];
                    $txn_id = $_POST['txn_id'];
                    $receiver_email = $_POST['receiver_email'];
                    $payer_email = $_POST['payer_email'];
                    // IPN message values depend upon the type of notification sent.
                    // To loop through the &_POST array and print the NV pairs to the screen:
                    foreach($_POST as $key => $value) {
                            $data =  $key . " = " . $value . "<br>";
                            Core::error($data);
                    }

            } else if (strcmp ($res, "INVALID") == 0) {
                    // IPN invalid, log for manual investigation
                    Core::error("invalid ");
            }

    header("HTTP/1.1 200 OK");

    die();

IPN 垃圾邮件后的 HTTPS 日志

 ip - - [14/Jun/2016:19:29:05 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
ip - - [14/Jun/2016:19:30:07 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"
ip - - [14/Jun/2016:19:31:07 -0500] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 47 "https://wordpress.example.org/wp-admin/admin.php?page=example%2Fexample.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36"

IPN 垃圾邮件后的非 Https 日志

ip - - [14/Jun/2016:17:35:13 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:37:10 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:39:04 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:58:28 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"
ip - - [14/Jun/2016:17:58:35 -0500] "POST /wp-content/plugins/example/controllers/payments/ipn HTTP/1.1" 406 275 "-" "-"

编辑 如果我用 this 替换我的脚本并将它放在我网站的根目录中它会工作。如果我将脚本移动到根目录下的任何位置，它将不起作用。

edit2 无论是否使用我的脚本，IPN 总是在我的站点索引上成功。我不明白为什么它会在这里成功

Answer 1

答案是，对于开发，您需要从位于 sandbox.paypal.com 而非 developer.paypal.com 的 IPN 模拟器发送 IPN 请求。

您还必须使用在 developer.paypal.com 中创建的 something-facilitator@example.com 凭据登录到 sandbox.paypal.com。