mcksly Posted September 25, 2007 Share Posted September 25, 2007 I am setting up the Paypal IPN contribution, and am wondering why I would have to set up Encrypted Web Payments? If my customers are already being redirected to the secure paypal site... then what benefit will enabling Encrypted Web Payments do for me? Quote Link to comment Share on other sites More sharing options...
AlexStudio Posted September 25, 2007 Share Posted September 25, 2007 The PayPal IPN module uses the PayPal Standard Button Code to pass through the order details with the post method. The order detail needs to go through users' browser, and submitted when users arrive at PayPal site. Security breaches exist if the users are capable of modifying the post data, and change the payment amount or the item quantity, etc. EWP (Encrypted Web Payments) is to protect the store, by encrypting the order info, so the post data cannot be modified. IMHO, EWP is a must have if you attempt to use PayPal IPN module. Quote Super Download Shop, PayPal Express Checkout IPN, Selling Downloads, Visual Validation (preventing robotic flood), phpBB2 Integration Yes, I'm willing to help, but please ask in the right place. Think twice before trying to PM me, it might be ignored. Link to comment Share on other sites More sharing options...
mcksly Posted September 25, 2007 Author Share Posted September 25, 2007 Thanks for the reply! That makes sense. ...Now the only way to get EWP is to purchase an SSL certificate correct? Quote Link to comment Share on other sites More sharing options...
mcksly Posted September 25, 2007 Author Share Posted September 25, 2007 Also, do I need to purchase a static IP address from my web hosting provider?, and if so why? Quote Link to comment Share on other sites More sharing options...
AlexStudio Posted September 25, 2007 Share Posted September 25, 2007 EWP doesn't require a trust signed certificate to work with. You don't need to purchase one, a self signed certificate is good enough. I don't know if PayPal IPN works without a dedicated IP. If you're asking me, I would say that a dedicated IP is not good enough for a decent online shopping website, you need at least a shared SSL as well. Quote Super Download Shop, PayPal Express Checkout IPN, Selling Downloads, Visual Validation (preventing robotic flood), phpBB2 Integration Yes, I'm willing to help, but please ask in the right place. Think twice before trying to PM me, it might be ignored. Link to comment Share on other sites More sharing options...
mcksly Posted September 25, 2007 Author Share Posted September 25, 2007 I believe I do have a shared SSL. I purchsed the "business" hosting services from Gnet hosting.. but when I was asking their technicians about the EWP, they said I would need to purchase a static IP address (maybe they just wanted me to pay more money).... not sure why though.. and I was under the impression I would have to buy a certificate. I only started this process a while ago, and I feel I have learned so much! (even though I still know nothing!). These forums have been such a great help. I've got my entire site up and running.. just trying to figure out this EWP before I open. Ok.. so to get the inputs required for EWP, how do I go about getting a self signed certificate? Thank you so much for your help! I really appreciate it. Quote Link to comment Share on other sites More sharing options...
AlexStudio Posted September 25, 2007 Share Posted September 25, 2007 Check the link Selling Downloads on the tag of my signature. There is a detailed instruction about how to setup EWP. Quote Super Download Shop, PayPal Express Checkout IPN, Selling Downloads, Visual Validation (preventing robotic flood), phpBB2 Integration Yes, I'm willing to help, but please ask in the right place. Think twice before trying to PM me, it might be ignored. Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.