-
Notifications
You must be signed in to change notification settings - Fork 211
SSLv3 is deprecated #34
Comments
Pull request #32 addresses exactly this issue, assuming it is ever accepted. |
Considering that this was last updated two years ago, it might be worth re-uploading it to a repository that will actually keep it updated. |
Using replacing |
I'm having problems with this i've changed the $force_ssl_v3 = true to false and its still not working for me, is there anything else i need to do ? any help would be appreciated. |
Yes we put the new changes in from pull #32 and it did fix part of it but I'm still having a problem with one thing it's not putting the UDID number in my txt after payment has been made, it's strange cause it fixed the part where the email gets sent to buyer with the info and all but this one thing is all that's left and where not getting any error and the IPN is sending fine now! Not sure what to do if anyone has any idea I'd appreciate any help thanks. |
This project has not been updated since 2012. It is a shame because it was a simple, yet efficient, PayPal IPN script. Since this has not been maintained, it does not work anymore. PayPal has removed support for SSLv3 due to the POODLE vulnerability, which came about after the last update to this repo. PayPal has also updated their documentation and example code, which I have updated this project to reflect PayPal's recommendations. I have forked this repo, fixed it, and I am now maintaining the current version. Please use my version found here: https://github.com/WadeShuler/PHP-PayPal-IPN I give FULL credit to Quixotix for his great script. |
Thanks |
Since the SSLv3 is no longer used from PayPal (See http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html
and https://ppmts.custhelp.com/ci/fattach/get/430695/1413497213/redirect/1/filename/Poodle%20SSL%203%200%20Vulnerability%20-%20Merchant%20Response%20Guide.pdf )
I recommend to change the default value of public $force_ssl_v3 = true; to false or compltly remove SSLv3 Support.
The text was updated successfully, but these errors were encountered: