+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Free Services and Giveaways (https://hackforums.net/forumdisplay.php?fid=186)
+---- Thread: [HTML/PHP] Working paypal scripts! (/showthread.php?tid=5970786)
[HTML/PHP] Working paypal scripts! - MrSpencer - May 17, 2019
Hello,
Decided to contribute to the forum by giving some things others might have trouble with.
This is a HTML/PHP based paypal script that allow you to take automated payments.
paypal.php
PHP Code
<?php
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="textarea" name="amount" value="" placeholder="How much Euo do you want to spend?"/><br/>
<input type="hidden" name="cmd" value="_xclick"/>
<input type="hidden" name="business" value="__YOUR_PAYPAL_ADDRESS__"/>
<input type="hidden" name="lc" value="en_US"/>
<input type="hidden" name="item_name" value="__DESCRIPTION_FOR_PAYMENT__"/>
<input type="hidden" name="custom" value="<?php echo $account_id; ?>">
<input type="hidden" name="button_subtype" value="products"/>
<input type="hidden" name="currency_code" value="EUR"/>
<input type="hidden" name="no_shipping" value="1"/>
<input type="hidden" name="no_note" value="1"/>
<input type="hidden" name="notify_url" value="__YOUR_WEBSITE_ADDRESS__/ipn/paypal_ipn.php"/>
<input type="hidden" name="return" value="__WHERE_ON_WEBSITE_AFTER_SUCCESSFUL_PAYMENT__"/>
<input type="hidden" name="rm" value="0"/>
<input type="hidden" name="bn" value="PP-BuyNowBF:btn_buynowCC_LG.gif:NonHostedGuest"/>
<input type="submit" class="btn btn-success" name="submit" value="Purchase with paypal"/>
</form>
/ipn/paypal_ipn.php (database connection not included)
PHP Code
<?php
error_reporting(E_ERROR | E_WARNING | E_PARSE); //report all except notice
if(gethostbyaddr($_SERVER['REMOTE_ADDR']) != 'notify.paypal.com'){
exit();
}
include("__YOUR_SQL_FILE_LOCATION__");
// Variables //
$receiverEmail = htmlspecialchars(strtolower($_REQUEST['receiver_email']));
$paymentStatus = htmlspecialchars(strtolower($_REQUEST['payment_status']));
$account_id = (int)$_REQUEST['custom'];
$time = (int)time();
$transaction_id = htmlspecialchars($_REQUEST['txn_id']);
$transaction_type = htmlspecialchars($_REQUEST['txn_type']);
$money_gross = (int)$_REQUEST['mc_gross'];
$money_fee = (int)$_REQUEST['mc_fee'];
$money_net = (int)$money_gross-$money_fee;
$money_currency = htmlspecialchars(strtolower($_REQUEST['mc_currency']));
$payer_email = htmlspecialchars($_REQUEST['payer_email']);
$payer_id = htmlspecialchars($_REQUEST['payer_id']);
$first_name = htmlspecialchars($_REQUEST['first_name']);
$last_name = htmlspecialchars($_REQUEST['last_name']);
$points = 0;
$pointsPerEuro = 10;
if($money_gross > 0){
$points = (int)($money_gross*$pointsPerEuro);
}
// Setup
$receiver = '__YOUR_PAYPAL_ADDRESS__';
if($paymentStatus == 'completed' && ($receiverEmail == $receiver) && $money_gross > 0 && $money_currency == "eur")
{
// Payment was successful..
// Yours SQL handler to make queries.
// for example:
// mysqli_query("UPDATE `accounts` SET `points`=`points`+".$points." WHERE `id`=".$account_id." LIMIT 1;");
}elseif($paymentStatus == 'reversed' && ($receiverEmail == $receiver)){
// Someone did a chargeback, log it and/or ban the user.
// for example
// mysqli_query("UPDATE `accounts` SET `banished`=1 WHERE `id`=".$account_id." LIMIT 1;");
}else{
exit();
If you don't know how to include and work out your database handlers, you can use this script instead:
/ipn/paypal_ipn.php
PHP Code
<?php
error_reporting(E_ERROR | E_WARNING | E_PARSE); //report all except notice
if(gethostbyaddr($_SERVER['REMOTE_ADDR']) != 'notify.paypal.com'){
exit();
}
$cfg = array(
"SQL_Server" => "localhost",
"SQL_User" => "root",
"SQL_Password" => "myDatabasePassword",
"SQL_Database" => "myDatabaseName",
);
$con = mysqli_connect($cfg['SQL_Server'],$cfg['SQL_User'],$cfg['SQL_Password'],$cfg['SQL_Database']);
if (!$con){
die("Couldn't establish connection to database!");
}
// Variables //
$receiverEmail = htmlspecialchars(strtolower($_REQUEST['receiver_email']));
$paymentStatus = htmlspecialchars(strtolower($_REQUEST['payment_status']));
$account_id = (int)$_REQUEST['custom'];
$time = (int)time();
$transaction_id = htmlspecialchars($_REQUEST['txn_id']);
$transaction_type = htmlspecialchars($_REQUEST['txn_type']);
$money_gross = (int)$_REQUEST['mc_gross'];
$money_fee = (int)$_REQUEST['mc_fee'];
$money_net = (int)$money_gross-$money_fee;
$money_currency = htmlspecialchars(strtolower($_REQUEST['mc_currency']));
$payer_email = htmlspecialchars($_REQUEST['payer_email']);
$payer_id = htmlspecialchars($_REQUEST['payer_id']);
$first_name = htmlspecialchars($_REQUEST['first_name']);
$last_name = htmlspecialchars($_REQUEST['last_name']);
$points = 0;
$pointsPerEuro = 10;
if($money_gross > 0){
$points = (int)($money_gross*$pointsPerEuro);
}
// Setup
$receiver = '__YOUR_PAYPAL_ADDRESS__';
if($paymentStatus == 'completed' && ($receiverEmail == $receiver) && $money_gross > 0 && $money_currency == "eur")
{
// Payment was successful..
// Yours SQL handler to make queries.
// for example:
mysqli_query($con, "UPDATE `accounts` SET `points`=`points`+".$points." WHERE `id`=".$account_id." LIMIT 1;");
}elseif($paymentStatus == 'reversed' && ($receiverEmail == $receiver)){
// Someone did a chargeback, log it and/or ban the user.
// for example
mysqli_query($con, "UPDATE `accounts` SET `banished`=1 WHERE `id`=".$account_id." LIMIT 1;");
}else{
exit();
}
mysqli_close($con);
?>Hope this might help a few people out,
If you got questions or need explaining done, just ask 😁
Edit:
due to my low post count I couldn't post the necessary post action url, I've asked a moderator to change and include the url for me :)
a moderator fixed the url for me, so now ignore my "edit" in the end of the post.
I'd remove that, but I can't post it again because the url is there now and I'm forbidden to post urls xD