PayPal IPN Verification
Below is a guide to integrate PayPal order management:
Processing PayPal's response to your callback
PayPal responds to your callbacks with one word in the response text: VERIFIED or INVALID.
When you receive a VERIFIED REPORT, do the following IPN data checks:
- Make sure payment_status is complete.
- If payment_status is complete, check the txn_id for the previous PayPal transaction you processed to make sure it is not a duplicate.
- Make sure receiver_email is the email address registered with your PayPal account.
- Make sure the price rolled into mc_gross and the currency rolled into mc_currency are correct for the item moved to item_name or item_number.
After completing the above checks, the notification check is complete. You can update your database with the information provided, and you can initiate other appropriate automated internal processing.
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_cart" />
<input type="hidden" name="upload" value="1" />
<input type="hidden" name="business" value="GXLC9H9VFPLQE">
.....
<input type="submit" name="Submit" value="Submit" />
</form>
In step 3, I have to check receiver_email , but I don't want to.
I don't want my PayPal email in my application.
My question is, can I check the business variable ?
a source to share
I have an answer here :
The checks provided are merely a recommendation and not a requirement to use the IPN. You can check "business" instead of "receiver_email". However, if you submit the form, the business value that is returned to you in the IPN will be the merchant email address in your account, and the receiver_id value will be GXLC9H9VFPLQE.
So, if you want to check your seller ID instead of email address then check "receiver_id".
a source to share