Paypal :: Archived

DJ Maze · Posted: Wed Apr 28, 2004 6:36 pm Post subject: Paypal

I recieved a lot of spam within 1 week due to the old Paypal button on website.
How to prevent spammers from recieving your emailaddess:

Paypal now has the availability of a encoded string so it's hard for spammer software to trace the emailaddress for it.

So when you generate a button at paypal.com be shure the "secure code" is checked, then youget code like this

Code::

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">
<input type="hidden" name="encrypted" value="-----BEGIN PKCS7-----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-----END PKCS7-----
">
</form>

instead of

Code::

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_xclick">
<input type="hidden" name="business" value="NOBODY@LOCALHOST.COM">
<input type="hidden" name="item_name" value="CPG-Nuke Donation">
<input type="hidden" name="item_number" value="3">
<input type="hidden" name="no_shipping" value="1">
<input type="hidden" name="return" value="http://cpgnuke.com/index.php?name=Paypal">
<input type="hidden" name="cn" value="Your CPG-Nuke membername">
<input type="hidden" name="currency_code" value="EUR">
<input type="hidden" name="tax" value="0">
<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">
</form>

Jeruvy · Posted: Wed May 26, 2004 4:40 pm Post subject: Re: Paypal

You know I could find nothing on paypals site about this. Could you provide a link? Nothing about a SECURE button that I could see...

This is a great idea btw...

Viperal · Posted: Wed May 26, 2004 5:17 pm Post subject: Re: Paypal

when you do a make link or bottom it asks you if you want to make it a secure link or bottom. Tell me if you don't see , I'll go into my paypal and find the excact location.

BrainSmashR · Posted: Sun May 30, 2004 4:39 pm Post subject: Re: Paypal

Woot, got my donation block up, so get on over to BrainSmashR.com and make a donation today!!!!

submit2s · Posted: Sat Jun 25, 2005 2:17 pm Post subject: Re: Paypal

DJMaze, do you know if there is a way to incorporate this on the current treasury structure?

I started getting spam after enabling treasury on my site, and I do not know how to factor in nuke sentinel to block the harvest?

DJ Maze · Posted: Sat Jun 25, 2005 2:31 pm Post subject: Re: Paypal

PKCS7 (Public Key) is a SSL encryption type.

To generate PKCS7 keys you need the OpenSSL extension in PHP then use commands like

php.net/openssl_pkcs7_encrypt
php.net/openssl_pkcs7_decrypt
php.net/openssl_pkcs7_sign
php.net/openssl_pkcs7_verify

I haven't checked the above key yet to verify if you could write your own pem's to send to PayPal

DJ Maze · Posted: Sat Jun 25, 2005 2:46 pm Post subject: Re: Paypal

Update:

i did a search on paypal.com for EWP and in the General Technical Questions forum i found some nice links about it.

paypaltech.com/Stephen.../index.php
paypaltech.com/Dave/ap...wpphp.html

submit2s · Posted: Sat Jun 25, 2005 3:04 pm Post subject: Re: Paypal

Thanks DJMaze, I have no problem if I was designing a site other than a phpnuke or dragonfly,

I have the latest dragonfly system and not sure how to incorporate this encrypted information or in what file, so that it will not confuse the other modules that pull information from another module.

I rather have sentinel, but not sure how if this has been ported, now i'm getting spam of bogus paypal emails, and i'm sure it is because of the form exposing the addy.

I will try to find the paypal receive email addy in the form and encrypte the email addy, see if that helps, without messing out the form.

Thanks.