Paypal Integration With PHP & MYSQL

PAYPAL INTEGRATION WITH PHP & MYSQL

Paypal Integration

Previously Discussed Simple PHP shopping cart stored a cart payment integration is discussed Follow us
Simple Way to PHP Paypal Integration following steps.

Step : 1

First Setup your Paypal Account

Signup Paypal Account if you don't already have one. In order to use PIN, the paypal account you are selling from must be a Business Account

Select ‘edit profile’ from your PayPal account and check the following settings.

Under ‘My Selling Preferences’ >> ‘Getting paid and managing risk’ >> ‘Instant Payment Notification Preferences’

Set the IPN value to ‘On’
Set the IPN URL to the PHP page containing the IPN code shown in steps 3 & 4 of this tutorial. (http://www.example.com/payment.php)

Step : 2

Your Website Looking UI design and must now send all required value to paypal so that the payment can be processed.


<!DOCTYPE html>

<html>

<head>

 <meta charset="utf-8">

 <meta http-equiv="X-UA-Compatible" content="IE=edge">

 <meta name="viewport" content="width=device-width, initial-scale=1">

 <title>Paypal Integration Test</title>

</head>

<body>



<form class="paypal" action="payments.php" method="post" id="paypal_form" target="_blank">

  <input type="hidden" name="command" value="_xclick" />

  <input type="hidden" name="no_note" value="1" />

  <input type="hidden" name="lc" value="UK" />

  <input type="hidden" name="currency_code" value="GBP" />

  <input type="hidden" name="bn" value="PP-BuyNowBF:btn_buynow_LG.gif:NonHostedGuest" />

  <input type="hidden" name="first_name" value="Customer's First Name" />

  <input type="hidden" name="last_name" value="Customer's Last Name" />

  <input type="hidden" name="payer_email" value="customer@example.com" />

  <input type="hidden" name="item_number" value="123456" / >

  <input type="submit" name="submit" value="Submit Payment"/>

 </form>

</body>

</html>

Step:3

Paymen Page REQUEST



// Database variables

$hostname = "localhost"; //database location

$username = ""; //database username

$password = ""; //database password

$db_name = ""; //database name




// PayPal settings

$paypal_email = 'user@domain.com';

$return_url = 'http://domain.com/payment-successful.html';

$cancel_url = 'http://domain.com/payment-cancelled.html';

$notify_url = 'http://domain.com/payments.php';




$item_name = 'Test Item';

$item_amount = 5.00;




// Include Functions

include("functions.php");




// Check if paypal request or response

if (!isset($_POST["txn_id"]) &amp;amp;amp;amp;amp;amp;&amp;amp;amp;amp;amp;amp; !isset($_POST["txn_type"])){

    $querystring = '';



    // Firstly Append paypal account to querystring

    $querystring .= "?business=".urlencode($paypal_email)."&amp;amp;amp;amp;amp;amp;";



    // Append amount&amp;amp;amp;amp;amp;amp; currency (£) to quersytring so it cannot be edited in html



    //The item name and amount can be brought in dynamically by querying the $_POST['item_number'] variable.

    $querystring .= "item_name=".urlencode($item_name)."&amp;amp;amp;amp;amp;amp;";

    $querystring .= "amount=".urlencode($item_amount)."&amp;amp;amp;amp;amp;amp;";



    //loop for posted values and append to querystring

    foreach($_POST as $key =&amp;amp;amp;amp;amp;gt; $value) {

        $value = urlencode(stripslashes($value));

        $querystring .= "$key=$value&amp;amp;amp;amp;amp;amp;";

    }



    // Append paypal return addresses

    $querystring .= "return=".urlencode(stripslashes($return_url))."&amp;amp;amp;amp;amp;amp;";

    $querystring .= "cancel_return=".urlencode(stripslashes($cancel_url))."&amp;amp;amp;amp;amp;amp;";

    $querystring .= "notify_url=".urlencode($notify_url);



    // Append querystring with custom field

    //$querystring .= "&amp;amp;amp;amp;amp;amp;custom=".USERID;



    // Redirect to paypal IPN

    header('location:https://www.sandbox.paypal.com/cgi-bin/webscr'.$querystring);

    exit();

} else {

   // Response from PayPal

}

Step: 4

Payment Page Response

// Database variables

$hostname = "localhost"; //database location

$username = ""; //database username

$password = ""; //database password

$db_name = ""; //database name

// PayPal settings

$paypal_email = 'user@domain.com';

$return_url = 'http://domain.com/payment-successful.html';

$cancel_url = 'http://domain.com/payment-cancelled.html';

$notify_url = 'http://domain.com/payments.php';

$item_name = 'Test Item';

$item_amount = 5.00;

// Include Functions

include("functions.php");

// Check if paypal request or response

if (!isset($_POST["txn_id"]) &amp;amp;&amp;amp; !isset($_POST["txn_type"])){

$querystring = '';

// Firstly Append paypal account to querystring

$querystring .= "?business=".urlencode($paypal_email)."&amp;amp;";

// Append amount&amp;amp; currency (£) to quersytring so it cannot be edited in html

//The item name and amount can be brought in dynamically by querying the $_POST['item_number'] variable.

$querystring .= "item_name=".urlencode($item_name)."&amp;amp;";

$querystring .= "amount=".urlencode($item_amount)."&amp;amp;";

//loop for posted values and append to querystring

foreach($_POST as $key =&amp;gt; $value){

$value = urlencode(stripslashes($value));

$querystring .= "$key=$value&amp;amp;";

}

// Append paypal return addresses

$querystring .= "return=".urlencode(stripslashes($return_url))."&amp;amp;";

$querystring .= "cancel_return=".urlencode(stripslashes($cancel_url))."&amp;amp;";

$querystring .= "notify_url=".urlencode($notify_url);

// Append querystring with custom field

//$querystring .= "&amp;amp;custom=".USERID;

// Redirect to paypal IPN

header('location:https://www.sandbox.paypal.com/cgi-bin/webscr'.$querystring);

exit();

} else {

//Database Connection

$link = mysql_connect($host, $user, $pass);

mysql_select_db($db_name);

// Response from Paypal

// read the post from PayPal system and add 'cmd'

$req = 'cmd=_notify-validate';

foreach ($_POST as $key =&amp;gt; $value) {

$value = urlencode(stripslashes($value));

$value = preg_replace('/(.*[^%^0^D])(%0A)(.*)/i','${1}%0D%0A${3}',$value);// IPN fix

$req .= "&amp;amp;$key=$value";

}

// assign posted variables to local variables

$data['item_name'] = $_POST['item_name'];

$data['item_number'] = $_POST['item_number'];

$data['payment_status'] = $_POST['payment_status'];

$data['payment_amount'] = $_POST['mc_gross'];

$data['payment_currency'] = $_POST['mc_currency'];

$data['txn_id'] = $_POST['txn_id'];

$data['receiver_email'] = $_POST['receiver_email'];

$data['payer_email'] = $_POST['payer_email'];

$data['custom'] = $_POST['custom'];

// post back to PayPal system to validate

$header = "POST /cgi-bin/webscr HTTP/1.0\r\n";

$header .= "Content-Type: application/x-www-form-urlencoded\r\n";

$header .= "Content-Length: " . strlen($req) . "\r\n\r\n";

$fp = fsockopen ('ssl://www.sandbox.paypal.com', 443, $errno, $errstr, 30);

if (!$fp) {

// HTTP ERROR

} else {

fputs($fp, $header . $req);

while (!feof($fp)) {

$res = fgets ($fp, 1024);

if (strcmp($res, "VERIFIED") == 0) {

// Used for debugging

// mail('user@domain.com', 'PAYPAL POST - VERIFIED RESPONSE', print_r($post, true));

// Validate payment (Check unique txnid &amp;amp; correct price)

$valid_txnid = check_txnid($data['txn_id']);

$valid_price = check_price($data['payment_amount'], $data['item_number']);

// PAYMENT VALIDATED &amp;amp; VERIFIED!

if ($valid_txnid &amp;amp;&amp;amp; $valid_price) {

$orderid = updatePayments($data);

if ($orderid) {

// Payment has been made &amp;amp; successfully inserted into the Database

} else {

// Error inserting into DB

// E-mail admin or alert user

// mail('user@domain.com', 'PAYPAL POST - INSERT INTO DB WENT WRONG', print_r($data, true));

}

} else {

// Payment made but data has been changed

// E-mail admin or alert user

}

} else if (strcmp ($res, "INVALID") == 0) {

// PAYMENT INVALID &amp;amp; INVESTIGATE MANUALY!

// E-mail admin or alert user

// Used for debugging

//@mail("user@domain.com", "PAYPAL DEBUGGING", "Invalid Response

data =

&amp;lt;pre&amp;gt;".print_r($post, true)."&amp;lt;/pre&amp;gt;

");

}

fclose ($fp);

}

Step 5 - Function.php

// functions.php
function check_txnid($tnxid){
global $link;
return true;
$valid_txnid = true;
//get result set
$sql = mysql_query("SELECT * FROM `payments` WHERE txnid = '$tnxid'", $link);
if ($row = mysql_fetch_array($sql)) {
$valid_txnid = false;
}
return $valid_txnid;
}

function check_price($price, $id){
$valid_price = false;
//you could use the below to check whether the correct price has been paid for the product

/*
$sql = mysql_query("SELECT amount FROM `products` WHERE id = '$id'");
if (mysql_num_rows($sql) != 0) {
while ($row = mysql_fetch_array($sql)) {
$num = (float)$row['amount'];
if($num == $price){
$valid_price = true;
}
}
}
return $valid_price;
*/
return true;
}

function updatePayments($data){
global $link;

if (is_array($data)) {
$sql = mysql_query("INSERT INTO `payments` (txnid, payment_amount, payment_status, itemid, createdtime) VALUES (
'".$data['txn_id']."' ,
'".$data['payment_amount']."' ,
'".$data['payment_status']."' ,
'".$data['item_number']."' ,
'".date("Y-m-d H:i:s")."'
)", $link);
return mysql_insert_id($link);
}
}

Step: 6 Databast Table

Website Paypal Integration store payment details inset database table is most Important.

CREATE TABLE IF NOT EXISTS `payments` (
 `id` int(6) NOT NULL AUTO_INCREMENT,
 `txnid` varchar(20) NOT NULL,
 `payment_amount` decimal(7,2) NOT NULL,
 `payment_status` varchar(25) NOT NULL,
 `itemid` varchar(25) NOT NULL,
 `createdtime` datetime NOT NULL,
 PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8 AUTO_INCREMENT=1 ;

Paypal Integration With PHP & MYSQL

PAYPAL INTEGRATION WITH PHP & MYSQL

Author : Dev2Tricks

Share this

2 comments

Paypal Integration With PHP & MYSQL

PAYPAL INTEGRATION WITH PHP & MYSQL

Author : Dev2Tricks

Share this

Related Posts

2 comments