Securing a Subscription Website....

[hokage]

Hey, I just opened my site www.desktopmixtapes.com

 

Its a membership site, I coded it how i liked and it turned out nicely..but their's one thing i'm trying to fix.

 

Basically , I have it setup where you pay the subscription via Paypal, and you will be redirected to the create_account.php. Is there a way to edit create_account.php so it makes sure the users to access that page come from the Paypal site.... Because I don't want people guessing my create_Account.php and making free accounts without paying... If anyone can help me with this , i'd be very thankful

[Guest]

you could use the pwa then if the customer pays you could create the account and send an email. The problem is you must still verify the payment from paypal - a manual process.

 

Maybe if you use another service or paypal like wpp or a cc gateway, you could rely on the valid cc info and create the account - during checkout_process.php

[hokage]

I'm pretty much going to stick with paypal..that's a nice idea..but i want customers to get automatic service....

[hokage]

So frustrating....there has to be some way to make it refer from da paypal website..

[wwalbaum]

So frustrating....there has to be some way to make it refer from da paypal website..

 

 

doesnt paypal have a place to set what page you want it to go to after they have successfully paid? and one if they did not?

 

This is for all versions of paypal. The other post recommended wpp by paypal which costs another $20 per month to use... but basic paypal has a way to do this. I would think you would make it so no one can access the registration page by any links on the site... but have the link that goes to the registration the url you use to thank the customer for the payment.

 

The only problem is if someone knows your website is made through osCommerce they could probably get free access... but you may be able to change the file name to something harder to guess??? And then again you may put a check on the page that is used before it loads making sure the page was accessed by coming from paypal. I would think that a website traffic tracking script in the file would be the ticket just to help it out more. But depending on how you set that up if someone went to the paypal site then entered in that address that someone else told them was the address could then get free service I would think... but they would have to know how your system is working to do this so chances would be smaller. The more specific you can make the script check which location they are coming from the better and doing a few tests on the subscription site would help as well.

 

I hope this helps....

[cre8nkos]

So frustrating....there has to be some way to make it refer from da paypal website..

 

Hey there. It sounds like you're trying to do something very similar to what I'm trying to do. Did you ever figure it out? Would you mind helping me out? I've been struggling with this for a friend of mine, and I just REALLY want to get his site finished.

 

Thanks,

Amy

[Guest]

This is for all versions of paypal. The other post recommended wpp by paypal which costs another $20 per month to use... but basic paypal has a way to do this. I would think you would make it so no one can access the registration page by any links on the site... but have the link that goes to the registration the url you use to thank the customer for the payment.

So what happens if the customer never returns from paypal but just closes his browser after paying? Don't you have to create the account now manually?

 

The only problem is if someone knows your website is made through osCommerce they could probably get free access... but you may be able to change the file name to something harder to guess??? And then again you may put a check on the page that is used before it loads making sure the page was accessed by coming from paypal.

Bots can read the form elements including the return url you sent with the paypal form apparently. When you can specify the return URL in the cpanel of the gateway you will be able to do that. But that happens mainly with cc gateways.

[MattMallory]

What contrib allows us to setup subscription payments via PayPal? We sell hosting and other recurring payment services and want to add them to our osCommerce with all of our products. PayPal Pro Direct Payments & Express Checkout have allot of features but it does not look like this is one of them. Any help would be greatly appreciated, thank you.

[kyao888]

Maybe OSCommerce is not the best way to do this.

 

Basically you will need Paypal Pro DirectPay. You will need to have both create_account and checkout_payment all in one page. It will then sends all the data silently to Paypal and return to the home page to access the rest of the protected pages.

 

I'm still struggling to make this happen.