如果 PayPal IPN 返回已验证，我如何添加视频

Question

我是第一次尝试使用 PayPal IPN，但我很难让它端到端地工作。如果 IPN 响应得到验证，感谢页面应显示视频。如果它没有被验证（例如，如果有人试图直接进入感谢页面，而不是通过成功的 PayPal 交易），它应该会显示一条错误消息。

签入 PayPal 时，我已设法在 IPN 历史记录中返回“已发送”状态，但我的感谢页面（包含 IPN 验证器）显示错误 500。错误日志表明未发送任何帖子数据到页面，即使 PayPal 注册它是成功的。

<?php namespace Listener;

require('PaypalIPN.php');

use PaypalIPN;

$ipn = new PaypalIPN();

$ipn->useSandbox();
$verified = $ipn->verifyIPN();
if ($verified) {

    echo ("My video will go here");
}

header("HTTP/1.1 200 OK"); 

?>

PaypalIPN.php 看起来像这样：

<?php

class PaypalIPN
{
/** @var bool Indicates if the sandbox endpoint is used. */
private $use_sandbox = false;
/** @var bool Indicates if the local certificates are used. */
private $use_local_certs = true;

/** Production Postback URL */
const VERIFY_URI = 'https://ipnpb.paypal.com/cgi-bin/webscr';
/** Sandbox Postback URL */
const SANDBOX_VERIFY_URI = 'https://ipnpb.sandbox.paypal.com/cgi-bin/webscr';

/** Response from PayPal indicating validation was successful */
const VALID = 'VERIFIED';
/** Response from PayPal indicating validation failed */
const INVALID = 'INVALID';

/**
 * Sets the IPN verification to sandbox mode (for use when testing,
 * should not be enabled in production).
 * @return void
 */
public function useSandbox()
{
    $this->use_sandbox = true;
}

/**
 * Sets curl to use php curl's built in certs (may be required in some
 * environments).
 * @return void
 */
public function usePHPCerts()
{
    $this->use_local_certs = false;
}

/**
 * Determine endpoint to post the verification data to.
 *
 * @return string
 */
public function getPaypalUri()
{
    if ($this->use_sandbox) {
        return self::SANDBOX_VERIFY_URI;
    } else {
        return self::VERIFY_URI;
    }
}

/**
 * Verification Function
 * Sends the incoming post data back to PayPal using the cURL library.
 *
 * @return bool
 * @throws Exception
 */
public function verifyIPN()
{
    if ( ! count($_POST)) {
        throw new Exception("Missing POST Data");
    }

    $raw_post_data = file_get_contents('php://input');
    $raw_post_array = explode('&', $raw_post_data);
    $myPost = array();
    foreach ($raw_post_array as $keyval) {
        $keyval = explode('=', $keyval);
        if (count($keyval) == 2) {
            // Since we do not want the plus in the datetime string to be encoded to a space, we manually encode it.
            if ($keyval[0] === 'payment_date') {
                if (substr_count($keyval[1], '+') === 1) {
                    $keyval[1] = str_replace('+', '%2B', $keyval[1]);
                }
            }
            $myPost[$keyval[0]] = urldecode($keyval[1]);
        }
    }

    // Build the body of the verification post request, adding the _notify-validate command.
    $req = 'cmd=_notify-validate';
    $get_magic_quotes_exists = false;
    if (function_exists('get_magic_quotes_gpc')) {
        $get_magic_quotes_exists = true;
    }
    foreach ($myPost as $key => $value) {
        if ($get_magic_quotes_exists == true && get_magic_quotes_gpc() == 1) {
            $value = urlencode(stripslashes($value));
        } else {
            $value = urlencode($value);
        }
        $req .= "&$key=$value";
    }

    // Post the data back to PayPal, using curl. Throw exceptions if errors occur.
    $ch = curl_init($this->getPaypalUri());
    curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
    curl_setopt($ch, CURLOPT_SSLVERSION, 6);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);

    // This is often required if the server is missing a global cert bundle, or is using an outdated one.
    if ($this->use_local_certs) {
        curl_setopt($ch, CURLOPT_CAINFO, __DIR__ . "/cert/cacert.pem");
    }
    curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
    curl_setopt($ch, CURLOPT_HTTPHEADER, array(
        'User-Agent: PHP-IPN-Verification-Script',
        'Connection: Close',
    ));
    $res = curl_exec($ch);
    if ( ! ($res)) {
        $errno = curl_errno($ch);
        $errstr = curl_error($ch);
        curl_close($ch);
        throw new Exception("cURL error: [$errno] $errstr");
    }

    $info = curl_getinfo($ch);
    $http_code = $info['http_code'];
    if ($http_code != 200) {
        throw new Exception("PayPal responded with http code $http_code");
    }

    curl_close($ch);

    // Check if PayPal verifies the IPN data, and if so, return true.
    if ($res == self::VALID) {
        return true;
    } else {
        return false;
    }
}
}

Answer 1

您的所作所为误解了 IPN 的工作方式。

IPN 是从 PayPal 到您的服务器的直接帖子，不会、不能、也不应该以任何方式直接涉及客户的网络浏览器或感谢页面。

您的 IPN 侦听器应更新您的数据库以将订单标记为已付款。

您的感谢页面可以从数据库中读取。

这些是异步操作。

---

要获得更强大的解决方案，请忘记使用 IPN，而是集成一个前端结帐 UI，如 https://developer.paypal.com/demo/checkout/#/pattern/server ，它将调用您服务器上的 2 个路由（您必须创建）来“设置交易”和“捕获” Transaction'，每个都将与此处记录的 PayPal API 通信：https://developer.paypal.com/docs/checkout/reference/server-integration/