Community Support Forums

the paypal buttons that s2member generates do not appear to be encrypted. is there a a way to have the created buttons be encrypted or alternatively use paypal's encrypted button generator?

Great question. This is on our @COMPLETED :: TODO ( PayPal Button Encryption ) list, but it has a low priority at this point in time. If you'd like to make a donation toward the addition of this feature, I'll push it into the next release for you. Otherwise, yes. You can use the PayPal® Generator, just be sure to mirror all of the same values that the s2Member Generator uses.

@ This was implemented in the release of s2Member v3.5+.

So I have the same problem. I have a paypal generated button already and would love to use it. You said to make sure it mirrors the same values of S2 Member, but what exactly should be the same? I cut and pasted both codes to compare and notice that S2 Member is much longer. Can you please tell me what I should do and how to do it? Thanks.

Here is my paypal code:
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="L2FJGL5326XA8">
<input type="image" src="https://www.paypal.com/en_US/i/btn/btn_paynowCC_LG.gif" border="0" name="submit" alt="PayPal - The safer, easier way to pay online!">
<img alt="" border="0" src="https://www.paypal.com/en_US/i/scr/pixel.gif" width="1" height="1">
</form>

Here is S2 Member code:
<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="business" value="kinyofu@yahoo.com" />
<input type="hidden" name="cmd" value="_xclick-subscriptions" />
<!-- Instant Payment Notification & Return Page Details -->
<input type="hidden" name="notify_url" value="http://empoweringwomenslives.com/?s2member_paypal_notify=1" />
<input type="hidden" name="cancel_return" value="http://empoweringwomenslives.com" />
<input type="hidden" name="return" value="http://empoweringwomenslives.com/?s2member_paypal_return=1" />
<input type="hidden" name="rm" value="2" />
<!-- Configures All Of The Checkout Fields -->
<input type="hidden" name="no_shipping" value="1" />
<input type="hidden" name="no_note" value="1" />
<input type="hidden" name="custom" value="empoweringwomenslives.com" />
<input type="hidden" name="currency_code" value="USD" />
<input type="hidden" name="page_style" value="paypal" />
<input type="hidden" name="item_name" value="Empowered" />
<input type="hidden" name="item_number" value="2" />
<!-- Identifies/Updates An Existing Member After Checkout -->
<input type="hidden" name="on0" value="<?php echo S2MEMBER_CURRENT_USER_VALUE_FOR_PP_ON0; ?>" />
<input type="hidden" name="os0" value="<?php echo S2MEMBER_CURRENT_USER_VALUE_FOR_PP_OS0; ?>" />
<input type="hidden" name="modify" value="0" />
<!-- Customizes Prices, Payments & Billing Cycle -->
<!--<input type="hidden" name="amount" value="4.99" />-->
<input type="hidden" name="src" value="1" />
<input type="hidden" name="sra" value="1" />
<!--<input type="hidden" name="a1" value="0.00" />-->
<!--<input type="hidden" name="p1" value="0" />-->
<!--<input type="hidden" name="t1" value="D" />-->
<input type="hidden" name="a3" value="4.99" />

No need to respond to this post after all because I called paypal and they discovered that I had encryption turned on and suggested I turn it off, so now it works.

Gotchya. Thanks for the followup.
BTW: s2Member Pro has been released now.
http://www.s2member.com/

Hi Jason,

Regarding your comment below:

Jason Caldwell wrote:Great question. This is on our @TODO ( PayPal Button Encryption ) list, but it has a low priority at this point in time. If you'd like to make a donation toward the addition of this feature, I'll push it into the next release for you. Otherwise, yes. You can use the PayPal® Generator, just be sure to mirror all of the same values that the s2Member Generator uses.

If you haven't already completed a secure form api I would be interested in donating. I think implementing a secure form is important as looking at it anyone could edit the form on your site and pay as little as they like to access your service and as these are subscriptions each and every payment could be set at the basic minimum.

You would then need to go through the trouble of monitoring all new payments to confirm that the new member did actually pay the correct amount. Paypal pro looks like a good option to prevent this kind of fraud but I am concerned about the amount of compliance required by paypal.

If anyone else is concerned about fraud maybe we all can make a small donation towards the development of the PayPal Button Encryption. We would obviously need to know how much Jason would require to put this at the top of his list and how many people would be interested. Or maybe Jason if not enough takers develop as separate plugging of which I would be your first sale.

regards Pete..

Okay,

I have stumbled on an encryption solution, please disregard by post above.

Jason,

Many thanks for including the Paypal encrypted option. I was in the process of
developing my own and when I saw the option on the new update I thought
“Thank goodness”.

I have just sent you a donation, when I have completed my plugin (possibly next few
weeks) if the encryption works as well in the live environment you can expect a donation
of ten times that amount.

Many thanks.

PeterHuk

I've been trying to add button encryption, but without success. Am I missing something??

I've gone to PayPal and gotten an API Username, Password and Signature, all three of which I have entered on the s2Member PayPal Account Details page. And I've said "Yes" to the "Enable Button Encryption?" question on this page.

But the buttons that are generated for me are not encrypted. Indeed, when I go to PayPal and tell it to only accept encrypted buttons, it complains when one of my s2Member-generated buttons is used.

I've got s2Member 3.5.2 and WordPress 3.1.

- David.

s2Member now generates encrypted buttons. Go to WP Admin -> s2Member -> PayPal Options -> PayPal Account Details -> Enable Button Encryption.

dapike,

Hope this answer is not to late, but you need to use the short code, once you insert the shortcode
it converts the code to your button configuration and also encrypts if you selected encryption.

Hope this helps