Hi I have two files, config.php and protect.php... config.php simply has variable assignments.
protect.php has the actual code to receive the POST variables from paypal, send it back with the required appended text and check if the reply is INVALID or VERIFIED. If it is verified it will send an email to the customer with the download link for the product....
Also, I have set the page protect.php as the page the customer's will be redirected to after a successful check out. If the customer gets to the page this way, then the page will simply inform the payment is successful and download link has been emailed..
I have also enabled IPN in my paypal profile and entered the path for protect.php.... I now want to check it will work or not:
This is the contents of my config.php where I have replaced the actual details with www.example.com:
<?php
$website = "http://www.example.com";
$msg = "Thanks for your purchase at www.example.com";
$email = "contact@example.com";
$yourname = "Example.com Sales";
$product = "Example product";
$paypal = "paypal@example.com";
$amount = 14.99;
$download = "http://www.example.com/files/example.pdf";
global $website, $msg, $email, $yourname, $product, $paypal, $amount, $download;
?>
Here is the code inside protect.php:
<?
require("config.php");
$req = 'cmd=_notify-validate';
foreach ($_POST as $key => $value) {
$value = urlencode(stripslashes($value));
$req .= "&$key=$value";
}
$header .= "POST /cgi-bin/webscr HTTP/1.0\r\n";
$header .= "Content-Type: application/x-www-form-urlencoded\r\n";
$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";
$fp = fsockopen ('www.paypal.com', 80, $errno, $errstr, 30);
//These are all of the variables that paypal sends us:
$item_name = $_POST['item_name'];
$item_number = $_POST['item_number'];
$payment_status = $_POST['payment_status'];
$payment_gross = $_POST['payment_gross'];
$txn_id = $_POST['txn_id'];
$receiver_email = $_POST['receiver_email'];
$payer_email = $_POST['payer_email'];
$invoice = $_POST['invoice'];
$first_name = $_POST['first_name'];
<html>
<head>
<title><?=$msg?></title>
</head>
<body bgcolor="#FFFFFF" text="#000000">
<?
if (!$fp) {
echo "<p align='center'><font face='Verdana' size=2 color='#FF0000'><b>Error:</b> $errstr ($errno)<br><br>You may want to refresh your browser in a couple of minutes.</font></p>";
$email_msg = "There has been an error on your Paypal Download Protection script: $errstr ($errno)";
mail("$email", "Invalid Purchase", $email_msg, "From: $email");
} else {
fputs ($fp, $header . $req);
while (!feof($fp)) {
$res = fgets ($fp, 1024);
if (strcmp ($res, "VERIFIED") == 0) {
if ($payment_status != "Completed") {
echo "<p align='center'><font face='Verdana' size=2 color='#FF0000'><b>Error:</b> The status of the payment is not yet completed.</font></p>";
} elseif ($receiver_email != $paypal) {
echo "<p align='center'><font face='Verdana' size=2 color='#FF0000'><b>Error:</b> You did not purchase this item from the correct seller.</font></p>";
} elseif ($payment_gross == $amount) {
echo "<p align='center'><font face='Verdana' size=2 color='#FF0000'><b>Error:</b> You have no paid the full amount.</font></p>";
} else {
$headers = "From: $yourname <$email>\n";
$headers .= "X-Sender: <$email>\n";
$headers .= "X-Mailer: PHP\n";
$headers .= "X-Priority: 1\n";
$headers .= "Return-Path: <$email>\n";
$email_send_msg = "
Thank you for your purchase, $first_name
To download your $product, please go to: $download
Please feel free to email us at: $email
$yourname
$website
$email
";
mail($payer_email, $msg, $email_send_msg, $headers);
?>
<p align=center>The web site address containing the download link has been sent to <?=$payer_email?>
<br><br>If you do not receive an email from us within 24 hours, please email <?=$email?>
<br><br>Thank you, <?=$first_name?></p>
<?
// And.. that's it!
}
} else if (strcmp ($res, "INVALID") == 0) {
echo "<p align='center'><font face='Verdana' size=2 color='#FF0000'><b>Error:</b> You did not purchase this item from the correct seller.</font></p>";
$email_msg = "There has been an invalid request from your Paypal Download Protection script. You may want to investiage this manually from your paypal account.";
mail("$email", "Invalid Purchase", $email_msg, "From: $email");
$success = true;
}
}
fclose ($fp);
}
?>
<p><br>
</center>
</BODY>
</HTML>
Earlier I tried to use this with real time payments but it didn't work but I noticed then that in protect.php $HTTP_POST_VARS was used instead of $_POST.. So I changed it.. But haven't tested with this edited code.