user2667066
user2667066

Reputation: 2139

What happens to paypal IPNs if no message sent back to PayPal

For a while I have been running a site which logs paypal transactions by sending a notify_url to the paypal site, and listens in on that notify_url. My listening page parses the IPN info sent from paypal, and returns an http 200 response, but it doesn't then "send the complete message back to PayPal using HTTPS POST" to https://ipnpb.paypal.com/cgi-bin/webscr (point 3 at https://developer.paypal.com/docs/classic/ipn/integration-guide/IPNImplementation/). The payments seems to have been going through OK. I want to know what problems I have been storing up for myself by not doing this response part of the IPN request-response flow?

Upvotes: 0

Views: 51

Answers (1)

user207421
user207421

Reputation: 311054

You have laid yourself open to accepting IPN messages that may not be from PayPal. The purpose of the message you're omitting is to ensure that the IPN you are processing came from PayPal.

Upvotes: 1

Related Questions