1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.5 Paypal IPN URL secure when using HTTPS?

Discussion in 'XenForo Questions and Support' started by Beanjam, Jun 30, 2016.

  1. Beanjam

    Beanjam Active Member

    Will the IPN notify URL passed to Paypal automatically be prefixed HTTPS when the Board URL is set to use it?

    If not, then the user will receive a warning about their details being insecurely transmitted.

    There is no mention of the URL used in the User Upgrade Transaction Log.
  2. rainmotorsports

    rainmotorsports Well-Known Member

    Not sure myself. But I wasn't aware of Paypal allowing non https traffic period. In fact the IPN is or has changed to require TLS 1.2 specifically in server to paypal transactions (not the clients browser).
  3. Mike

    Mike XenForo Developer Staff Member

    The IPN URL is automatically prefixed with your Board URL. You can confirm this if you look at the source before going to make a payment (to see what's passed).
    Beanjam likes this.
  4. Beanjam

    Beanjam Active Member

    Thanks Mike, I just found it in the account_upgrades template too.

    <input type="hidden" name="notify_url" value="{$xenOptions.boardUrl}/payment_callback.php" />

Share This Page