CODEWITHSUNDEEP
phppaypal
Alex
Alex

Reputation: 1668

Paypal express checkout going live using NVP - "Security header is not valid"

I integrated the Paypal express checkout into our eCommerce system (NVP version 76.0, PHP 5.2) that has a bespoke checkout process. While in development mode (using the sandbox details) everything works but the moment I switch the signature information (username, password, api_signature and the paypal url) to the live Paypal account information it stopped working. It always responds with a error code: 10002 and message: Security header is not valid If I switch back to sandbox details it starts to work again.

Here is the error example:

TIMESTAMP: 2011-12-06T19:09:31Z
CORRELATIONID: cb966ebeb254d
ACK: Failure
VERSION: 76.0
BUILD: 2271164
L_ERRORCODE0: 10002
L_SHORTMESSAGE0: Security error
L_LONGMESSAGE0: Security header is not valid
L_SEVERITYCODE0: Error

I found some posts on stack overflow of people having the same problem but there solution didn't work @Paypal and I did some digging around (on google) and found that a lot of people experience this problem but there is no definitive solution or a thread that would outline what you need to change when you go live because just changing the details mentioned above (and in the paypal express checkout documentation) doesn't seem to work.

Did anyone find a solution to this problem or maybe I just missed something?

Upvotes: 3

Views: 5793

Answers (1)

Alex
Alex

Reputation: 1668

OK so I found the answer:

I contacted Paypal support and even after outlining the issue they still didnt provide a solution but at least there response gave me an idea of what is actually wrong. When you put the system live you not only have to change the:

API_USERNAME
API_PASSWORD
API_SIGNATURE
PAYPAL_URL

with the live details (from Sandbox > Live) but you have to change:

API_ENDPOINT

which they do not provide in there documentation. What I found was that when you switch to live (depending what version of the paypal SDK you have) you have to change the endpoint to the one found in this list API Endpoints

The one I had to use was:

Environment: Live
Authentication: API Signature
Calling: Name-Value Pair
Endpoint: https://api-3t.paypal.com/nvp

Upvotes: 7

Related Questions