Getting INVALID IPN status every time

[digiogi]

I'm getting INVALID IPN status every time even the payment is made.

I'm using the php api.

Is there any way to do this properly?

[arvydaso]

A month ago I was working with IPN, everything worked perfectly.

[petert82]

I believe this is related to the 'force_ssl_v3' option. PayPal have recently disabled SSLv3.

[digiogi]

@arvydaso With paypal ipn test tools, yeah I'm getting valid responses. But I was getting INVALID in the real life scenario even the payment is made and valid.

@petert82 With disabling SSL3, the api was broken. I've changed the line 109 with
curl_setopt($ch, CURLOPT_SSLVERSION, 4);

It works again but the INVALID situation still continues.

[kicktraq]

Pretty sure it's from the POODLE vulnerability. I just changed from 108:

if ($this->force_ssl_v3) {
    curl_setopt($ch, CURLOPT_SSLVERSION, 3);
}

to

if ($this->force_ssl_v3) {
    curl_setopt($ch, CURLOPT_SSL_CIPHER_LIST, 'SSLv3');
} else {
    curl_setopt($ch, CURLOPT_SSLVERSION, 3);
}

[petert82]

@kicktraq After reading the answer from Archimedix here, I opted to just ditch the 'force_ssl_v3' option and replace that if statement in curlPost with:

curl_setopt($ch, CURLOPT_SSLVERSION, 1);

[kicktraq]

Ah perfect. Thanks for the link!

[thefotolander]

Is fsock option any different? I have a lot of people depending on this for payments, can I switch to this?

    $listener->use_curl = false;

[mdriess]

Thank you @petert82 !! Works great for us.

[afbora]

INVALID error response still continue.

@digiogi did you fix it?

[CyberPunkCodes]

This project has not been updated since 2012. It is a shame because it was a simple, yet efficient, PayPal IPN script. Since this has not been maintained, it does not work anymore. PayPal has removed support for SSLv3 due to the POODLE vulnerability, which came about after the last update to this repo. PayPal has also updated their documentation and example code, which I have updated this project to reflect PayPal's recommendations.

I have forked this repo, fixed it, and I am now maintaining the current version. Please use my version found here: https://github.com/WadeShuler/PHP-PayPal-IPN

I give FULL credit to Quixotix for his great script.