|
KarenC
|
March 2, 2016 at 6:33 pm
Hi, everything has been running smoothly using payment method Paypal Standard. But a few days ago, the registrations are being marked as Payment Pending after registrants receive successful payment info from Paypal. The order confirmation email says Payment Failed but we can confirm that Paypal account has received payment. Where should we start checking? It seems to be happening to more than one event.
Please advise, thanks.
|
|
KarenC
|
March 3, 2016 at 12:23 am
We have also received notification from Paypal that the IPNs are failing. It says:
——-
Please check your server that handles PayPal Instant Payment Notifications (IPN). Instant Payment Notifications sent to the following URL(s) are failing:
If you do not recognize this URL, you may be using a service provider that is using IPN on your behalf. Please contact your service provider with the above information. If this problem continues, IPNs may be disabled for your account.
———–
Can you please advise what we can do to avoid IPNs being disabled? Where should we start checking?
|
|
Tony
|
March 3, 2016 at 3:46 am
Hi Karen,
You have multiple sites on your account so I’m not sure which site to investigate, can you link me to one of your events so I can take a look please?
|
|
KarenC
|
March 3, 2016 at 4:22 am
Thanks, Tony. It appears to be happening on all the live sites which have identical applications. Please have a look at this event on the main site.
Yackandandah brunch
|
|
Tony
|
March 3, 2016 at 4:33 am
Hmm, that site looks fine.
Can you check you PayPal IPN history and see what status the IPNs show please?
You’ll need to log into your PayPal account anf go to:
Profile and Settings > My Selling Tools > Instant Payment Notifications (click Update)
Or here is a direct link if you want to use that:
https://www.paypal.com/us/cgi-bin/webscr?cmd=_display-ipns-history
(Log into PayPal within a new tab than click that link, it will take you directly to your IPN history)
What status does it show for the IPNs listed there?
|
|
KarenC
|
March 3, 2016 at 4:46 am
Yes, I’ve been checking the IPN history. The status are showing retrying and I think there have been many retries as the no. of retries shows as 12 or 13 for most transactions. What can we do?
|
|
Tony
|
March 3, 2016 at 4:53 am
Have you recently installed any security plugins at all?
Do you have access to the server error logs? If so check within there and see if you can see any errors relating to Event Espresso.
Can you check with your hosting and confirm they are not blocking PayPal’s IP Address:
https://www.paypal-knowledge.com/infocenter/index?page=content&widgetview=true&id=FAQ1056&viewlocale=en_US&direct=en
|
|
KarenC
|
March 3, 2016 at 6:09 pm
We haven’t recently installed any security plugins or any plugins at all. There hasn’t been any changes for a while and it has been running quite smoothly.
I’m trying to look at the error log on cPanel and it appears to be empty. Is there any particular place I should look, i.e., directly at a file in a directory?
I’ve also checked the IP blocker under Security in cPanel and there are no IPs being blocked there. I will check with the host as well.
What else can we do?
|
|
KarenC
|
March 3, 2016 at 7:42 pm
I would like to update that we have now got the transactions going thru. 2 things I’ve done since yesterday (in that sequence) –
1) Added code in .htaccess
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
</IfModule>
as recommended by the hosting provider to see if mod_security was causing the error 403
2) Checked the IPN settings again today after noticing from the history that it is turned off – it appeared that Paypal could have turned it off due to the errors.
So now the failed payments are flowing thru from Paypal and the registrations are slowly becoming approved.
I’m guessing that the server’s mod_security does not like something. Would you think that? How do we go about this? I don’t want to circumvent mod_security permanently. Please advise. Thanks.
|
|
Tony
|
March 4, 2016 at 2:34 am
Hi Karen,
I’m glad you have it working.
Checked the IPN settings again today after noticing from the history that it is turned off – it appeared that Paypal could have turned it off due to the errors.
PayPal automatically disabled the IPN’s if they are not being acknowledged correctly (as they weren’t) so it is likely it was disabled after whatever change was made to the mod_sec rules originally.
I’m guessing that the server’s mod_security does not like something. Would you think that? How do we go about this? I don’t want to circumvent mod_security permanently. Please advise. Thanks.
You’ll need to discuss this with your hosting provider, it will depend entirely on how mod_sec is setup and what ruleset they are using, they should be able to add an exception to the rules that prevent the false positive from happening.
|
