PayPal IPN数据 - 如何验证？

Question

我在ASP.NET MVC 3应用程序中玩我的PayPal Sandbox帐户,我想知道一个thig.付款完成后,我在服务器上收到IPN回复.

如何检查in my app该响应字符串是不是假的/黑客攻击？换句话说,我想确保响应是原始的PayPal的响应,然后我得到用户他付出的东西.

SUCCESS
mc_gross=10.00
protection_eligibility=Eligible
address_status=confirmed
payer_id=RV2RBQBZDK6N6
tax=0.00
address_street=1+Main+St
payment_date=13%3A55%3A37+Feb+24%2C+2012+PST
payment_status=Completed
charset=windows-1252
address_zip=95131
first_name=tony
mc_fee=0.59
address_country_code=US
address_name=tony+a
custom=Registration+started%3A+2012-02-24+22%3A54%3A59
payer_status=verified
business=seller_1330118126_biz%40gmail.com
address_country=United+States
address_city=San+Jose
quantity=1
payer_email=buyer_1330118087_per%40gmail.com
txn_id=9V8712675P592753E
payment_type=instant
last_name=a
address_state=CA
receiver_email=seller_1330118126_biz%40gmail.com
payment_fee=0.59
receiver_id=R35PLL9VN3UFY
txn_type=web_accept
item_name=My+painting
mc_currency=USD
item_number=
residence_country=US
handling_amount=0.00
transaction_subject=Registration+started%3A+2012-02-24+22%3A54%3A59
payment_gross=10.00
shipping=0.00

Answer 1

您将交易提交至https://www.paypal.com/cgi-bin/webscr,它将验证交易是否合法.PayPal提供沙盒测试模式,您应该编写代码来正确处理这些事务.

以下是一些关于如何通过IPN测试交易的文档:https://www.paypal.com/cgi-bin/webscr？ cmd = p/sell/ipn- test-outside

以下是实际验证交易的各种代码示例:https: //www.paypal.com/us/cgi-bin/webscr?cmd=p/pdn/ipn-codesamples-pop-outside