如何拒绝通过PayPal IPN付款? [英] How to deny payment via PayPal IPN?

问题描述

我需要在我的网站上创建动态的立即付款"按钮，贝宝说，做到这一点的方法是通过HTML表单，该表单带有用于价格，货币和所购商品的预设变量.付款完成后，我会使用PayPal IPN通知我.

I need to create dynamic 'Pay Now' buttons on my site, and PayPal says the way to do this is via an HTML FORM with preset variables for the price, currency, and item of the purchase. I use PayPal IPN to notify me when a payment has complete.

但是，怎样阻止某人修改立即付款"按钮的查询参数来更改价格?有人告诉我，可以通过一个PHP文件重定向该按钮，该文件会将您发送到具有适当参数的PayPal付款页面，但是价格可以在Web浏览器的地址栏中轻松操作.我的问题是，如果我从PayPal的IPN服务接收的信息无效(如果价格与我们的记录不匹配)，我该如何拒绝付款?

However, what's to stop someone from modifying the query parameters of the Pay Now button to change the price? Some people have told me to redirect the button through a PHP file that sends you to a PayPal payment page with the parameters in place, but the price could just as easily be manipulated in the Web browser's address bar. My question is, how can I deny a payment if the information I receive from PayPal's IPN service is invalid (if the price doesn't match our records)?

我很困惑，找不到我想要的任何文档.希望你们能有所帮助.

I'm quite confused and couldn't find any documentation on what I'm looking for. Hopefully, you guys can help.

谢谢！

推荐答案

我想您要启用加密的网站付款.我以前没有做过，但是您可以在这里阅读更多内容: https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/e_howto_html_encryptedwebpayments

I think you want to enable Encrypted Website Payments. I haven't done this before, but you can read more here: https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/e_howto_html_encryptedwebpayments

这篇关于如何拒绝通过PayPal IPN付款?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！