News:

Support the VirtueMart project and become a member

Main Menu

Changes to Paypal -- Will these effect me?

Started by tspek, September 21, 2011, 16:23:21 PM

Previous topic - Next topic

tspek

I do some maintenance work for a guy, I didn't set up virtuemart or paypal but we're just using the standard paypal method that came with virtuemart and are using the "HTML-Form based" option. I don't think any of these changes will effect us but I'm also not sure how I would know  ???

Any help is appreciated.

QuoteWe've let you know many times over the past few months that we have been making upgrades to our system to help improve the performance and availability of our services.  We have scheduled a few more activities which will help make our services more scalable and ensure that they’re continuously available to our growing customer base, particularly as we near the holiday shopping season. 
Please be sure to share this notification with your technical resources because network configuration changes may be necessary to avoid a disruption in service.  Please note that there is also information regarding a short service interruption for Payflow on October 1st.

Customers impacted:

"IPN Customers who have their IPN Listener script behind their firewall with hard-coding of IP Addresses or use of Access Control List management of IP addresses" https://www.x.com/content/ip-address-expansion-paypal-services

"Customers using Payflow Pro, Payflow Link, V2 Payflow, Websites Payments Pro (3.0) using Gateway credentials and Website Payments Pro Payflow Edition (2.0)" https://www.x.com/developers/paypal/documentation-tools/site-status/notification-planned-downtime-during-oct-01-maintenance-pf-live-2263

"API Customers, including Express Checkout, Websites Payments Pro (3.0) and Website Payments Pro Payflow Edition (2.0), who either hard code outbound IP addresses or use an Access Control List." https://www.x.com/content/ip-address-expansion-paypal-services

911websiterepair

if your using standard paypal method,    it should not effect you
joomla components, modules and extensions @ http://www.madeforjoomla.com
joomla development, customizations and repair speshitpillts, http://www.911websiterepair.com

Virtuemart 2.0 PayPalPro Module
Virtuemart 2.0 Fedex Shipping Module
Virtuemart 2.0 Express Order Module
Virtuemart 2.0 Authorize.net SIM payment module
http://www.virtuemartmailordermanager.com

stinga

G'day,

I have not read the message yet, but it sounds like they are altering/increasing the number of ip address's. If so then you might reject the IPN because the IPN is coming from an unrecognised IP address, a small change in notify.php will fix the issue.
We had the same problem a year or so ago when PP changed there IP numbers.
I made a longer running change to check the domain name rather than the ip address.
Stinga.
614869 products in 747 categories with 15749 products in 1 category.
                                             Document Complete   Fully Loaded
                Load Time First Byte Start Render   Time      Requests      Time      Requests
First View     2.470s     0.635s     1.276s          2.470s       31            2.470s      31
Repeat View  1.064s     0.561s     1.100s          1.064s       4             1.221s       4

carsten888

While someone is looking into this code in notify.php, please have a look again at my fix for a bug I strugled with earlyer this year. Maybe this can be included.
http://forum.virtuemart.net/index.php?topic=82282.msg273157#msg273157

Meanwhile I have altered it to this.

original code:
$paypal_iplist = array();
        $paypal_iplist = gethostbynamel('www.paypal.com');
$paypal_iplist2 = array();
$paypal_iplist2 = gethostbynamel('notify.paypal.com');
        $paypal_iplist3 = array();
        $paypal_iplist3 = array( '216.113.188.202' , '216.113.188.203' , '216.113.188.204' , '66.211.170.66' );
        $paypal_iplist = array_merge( $paypal_iplist, $paypal_iplist2, $paypal_iplist3 );

       


changed that to:

$paypal_iplist = array();
$paypal_iplist[] = '64.4.241.33';
$paypal_iplist[] = '64.4.241.49';
$paypal_iplist[] = '66.211.169.2';
$paypal_iplist[] = '66.211.169.65';
$paypal_iplist[] = '66.211.170.66';
$paypal_iplist[] = '216.113.188.202';
$paypal_iplist[] = '216.113.188.203';
$paypal_iplist[] = '216.113.188.204';

$paypal_iplist2 = gethostbynamel('www.paypal.com');
if(is_array($paypal_iplist2)){
//make sure its an array
//only then add to array to avoid errors destroying the whole array
foreach($paypal_iplist2 as $iplist_item){
$paypal_iplist[] = $iplist_item;
}
}

$paypal_iplist3 = gethostbynamel('notify.paypal.com');
if(is_array($paypal_iplist3)){
//make sure its an array
//only then add to array to avoid errors destroying the whole array
foreach($paypal_iplist3 as $iplist_item){
$paypal_iplist[] = $iplist_item;
}
}

     




FinallyInSeattle

I received the same email as the original poster as well as a notification of IP updates here: https://ppmts.custhelp.com/app/answers/detail/a_id/92.  I believe I am using what is regarded as "Standard PayPal" although I admit I've lost track of the various "flavors" of PayPal.  I've included an image of the landing page.

Anyway, is there a need to alter the current method of getting the ip list based on this new information?

Thanks in advance!


    // Get the list of IP addresses for www.paypal.com and notify.paypal.com
    $paypal_iplist = array();
        $paypal_iplist = gethostbynamel('www.paypal.com');
$paypal_iplist2 = gethostbynamel('notify.paypal.com');
        $paypal_iplist3 = array( '216.113.188.202' , '216.113.188.203' , '216.113.188.204' , '66.211.170.66' );
        $paypal_iplist = array_merge( $paypal_iplist, $paypal_iplist2, $paypal_iplist3 );


[attachment cleanup by admin]

wldct

As per @stinga's post, do we need to add more IP addresses to the notify.php script in that case? As to not reject the IPN? PayPal have listed all the new IP Address so do we simple copy and paste these in the notify.php doc alongside the existing ones that are in there?