Forums

Paypal is upgrading its protocols to conform with new payment industry standards:
https://www.paypal-notice.com/en/Merchant-Security-Upgrade-Testing/
I am using Chronoforms5 with the full versions of Paypal Redirect and Paypal Listener.
​
1. Are these compatible with the new protocols?
2. If not, are new versions being issued or is an alternative route available?
3. For my own changes is all I need to ensure the site syupports HTTPS?
​
Thank you
Wallyhowe

HI Wallyhowe,
​
As far as I know the current version of the PayPal Plug-ins are OK provided that you have HTTPS installed on the site.
​
One problem might be that the PayPal ReDirect action will not work once PayPal no longer accepts GET requests - I'm not clear on that from the PayPal docs.
​
Bob

Hi Bob
I got this from the Paypal site:
"PayPal currently accepts both GET and POST HTTP methods on our classic
NVP/SOAP APIs, used for Express Checkout, Website Payments Pro, MassPay,
and Button Manager. Going forward, PayPal will allow the use of the
POST request method only for these APIs. This change will not impact the
behaviors of our other API products, such as REST and Adaptive APIs."
​
This resource seems to have relevany information:
​
https://www.paypal-notice.com/en/Discontinue-Use-of-GET-Method-for-Classic-APIs/
​
From my reading of this and looking at the request sent to Paypal from the Paypal redirect I think the plugin is fine.
​
Wally

Presumably therefore I need to install a certificate, get the site working on HTTPS and change the IPN return URL to be an HTTPS address?
​
As Sandbox supposedly is already upgraded it may explain why my Paypal tesing using sandbox gets the payment processed but the IPN notification does not work yet it all works on live.
​
Wallyhowe

Hi Wallyhowe,
​
You've got it I think.
​
Bob

Hi Bob
All has been well up to and including Friday with paypments being processed properly and IPN working fine.
Over the weekend we have had 2 transactions. both were paid by Paypal and entered the IPN but fell into the 'Error in Transaction' path.
In that path I send myself the message content and in both cases the content looks fine.
Below is the (neutralised with X's) content of one of them. Any reason why this would go through the 'Error' route?
Thanks
Wallyhowe
​

This is private content

Hi wallyhowe,
​
I see a "[status] => Error in transaction" entry in there. Do you get any more detail if you check on the PayPal site?
​
Bob

Hi Bob
Sorry - been on holiday.
Just checked my form and (silly me) I put 'Error in Transaction' in the status field then update the database record and send an email.
I will change the order so I send the email first so we will get the status captured.
I am getting these intermittently, most of the transactions go straight through.
Wally