IMPORTANT – PayPal IPN Validation Failures (01/07/2015 to 03/07/2015)
-
I have evidence of problems with Verification of PayPal IPN messages between 1st and 3rd July 2015. I have not been able (so far) to establish exact timing (which may vary in different locales anyway) but it appears the problem appeared between 08:00 and 13:00 UMT on the 1st and was fixed by 10:00 UMT on 3rd July. At the time I believed that the problem was restricted to the site I was investigating, but evidence that has come to light since suggests that it was far more widespread.
StageShow receives an IPN message from PayPal for each transaction. These messages contain all the details of the transaction and are the only way that StageShow can determine if a sale Checkout has been paid for. As part of the process StageShow requests a validation of the IPN message from PayPal, and if this is not obtained the IPN is assumed to be suspect, and is discarded. During the period above, validation attempts on effected sites would result in an “Internal Server Error” from the PayPal server for all IPN messages, consequently the IPN was rejected, and even valid sales were ignored by StageShow. PayPal did however still take payment.
StageShow was updated on 02/07/2015 to version 5.1 to improve the handling of this situation by marking these sales as “Unverified” and just sending an email to the administrator (but not to the purchaser) so that the sales can be manually verified. At the time this was implemented as a “Belt and Braces” solution to a problem that I thought was unlikely to reoccur.
Suggested Action:
Check the PayPal account to see if there are any sales between 00:00 UMT on 01/07/2015 and 13:00 UMT on 03/07/2015. If there are check that they have been recorded in the StageShow sales record. If there are a lot of sales, it should be sufficient to check that the same number of sales are recorded by StageShow as PayPal between certain times. If sales have been recorded correctly by StageShow then no further action is required.
If sales have been recorded by PayPal but not by StageShow then immediate action is required to remedy the situation. All of these missing sales will have to be manually added and confirmation emails sent out. Checks should also be made to ensure that performances have not been oversubscribed, and in the case of performances with allocated seating, that seats have not been sold twice.
- The topic ‘IMPORTANT – PayPal IPN Validation Failures (01/07/2015 to 03/07/2015)’ is closed to new replies.