eCart PayPal express checkout Question
I got this email from PayPal this morning talking about how they are going to be changing the way there IPN works.
I just want to make sure that my eCart PayPal express checkout will not be affected. I just want to be prepared.
Will my site be affected?
To improve our site’s performance, scalability and availability, we’re going to expand the number of IP addresses for www.paypal.com. We announced this in a bulletin on October 18, 2011. As part of this expansion, we’ll discontinue support for the HTTP 1.0 protocol on February 1, 2013.
If your IPN (Instant Payment Notification) or PDT (Payment Data Transfer) scripts use the HTTP 1.0 protocol, this change may impact your ability to perform IPN post-back validation or PDT posts to www.paypal.com.
Starting February 1, 2013, we’ll require all incoming requests to have a “Host” header which complies with HTTP 1.1 specifications. This header was not required with the HTTP 1.0 protocol. IPN and PDT scripts using HTTP 1.0 may start failing with “HTTP/1.0 400 Bad Request” errors after February 1, 2013, which will result in IPN messages not being validated successfully, or PDT scripts not being able to retrieve transaction information.
Action Required before February 1, 2013
If your IPN (Instant Payment Notification) or PDT (Payment Data Transfer) scripts use the HTTP 1.0 protocol, you’ll need to update your scripts to HTTP 1.1, and include the “Host” header in the IPN postback script.
//Set values for the request back
// post back to PayPal system to validate
$header .="POST /cgi-bin/webscr HTTP/1.1\r\n";
$header .="Content-Type: application/x-www-form-urlencoded\r\n";
$header .="Host: www.paypal.com\r\n";
HttpsURLConnection uc=(HttpsURLConnection) u.openConnection();
Our Sandbox environment has been configured to reject any HTTP requests without the “Host” header with a HTTP 400 error. You can use Sandbox to test any changes to your IPN and PDT scripts.
For more information on PDT and IPN, please refer to pdt and ipn.
For additional information about this change, please refer to mts.