Thanks as always for the great help here Daniel and hopefully this will give us a workaround for the problem. What I've done in the end is just a simple check to see if the length of the IP is over 15 characters and if it is then substitute the blank IP. I don't think it needs a more complicated check on the validity of the IP than that. I've added the change to the updater Jan, so if you get a new copy of the updater and copy the inccart.php script to your site it should hopefully solve this.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

Thank you! I need to go to 6.7.2 anyway, so I'll do that this morning. PayPal won't have an issue with a blank IP?

http://www.sleepingbaby.net/
Using ECT 6.7.1

According to what I read, the blank IP shouldn't be an issue, but the only way to know for sure is to test it out.

Daniel Ewers
Ecom-Mods.com

PHP extensions from Ecom-Mods.com
Rate Our Products & Services

That doesn't seem to have worked. I ran the updater last night and this morning, had a confirmed IP failure (customer actually wrote and said that the cart and PayPal weren't talking). I've turned off the XML debugging emails because the ones where people had used credit cards, their number, expiration, and CVV were being transmitted as part of the email and that feels extremely insecure to me -- I don't want to be responsible for someone having their cards stolen because of a plaintext email. It also wasn't providing any additional information on the failed PP transactions.

So... what's my next step here? I've changed the message when it fails to indicate that the customer can go to my paypal.me link and put in the appropriate total, but that's a workaround and still puts an extra step in front of completing the purchase. I've reported the latest to PayPal and will see what they say, particularly about their lack of support for IPv6.

http://www.sleepingbaby.net/
Using ECT 6.7.1

Hi Jan
No, you don't want to have the debugging emails while you are not debugging but can you send me the XML info from the last transactions that failed. I want to see how the IP address is being sent now.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

I turned off the emails and deleted them (permanently) from Gmail because of the unsecured credit card numbers. I can turn them back on and see if another transaction fails, though.

http://www.sleepingbaby.net/
Using ECT 6.7.1

Sales are slow so I haven't had one fail in the last 24 hours (only two orders in that time), but PayPal had only this to say:. "Unfortunately you would need to do the conversion on your cart side from IPv6 to IPv4 prior to passing the IP address to PayPal. My apologies for the inconvenience!"

Can I transform IPv6 to my IP address rather than a blank one, if it keeps happening?

http://www.sleepingbaby.net/
Using ECT 6.7.1

The latest credit card one that went through (they have consistently gone through even with an IP error, however) has the IP listed as 0.0.0.0. Do you want me to email you the XML message that starts with "secret=" and is followed by pretty much gibberish?

http://www.sleepingbaby.net/
Using ECT 6.7.1

This afternoon I had a PayPal failure, but no XML email was generated. She did see my message to go to PayPal.me though.

http://www.sleepingbaby.net/
Using ECT 6.7.1

Bump!

Another failed transaction this morning. The bad IPs are still showing as 2600, 2605, etc. but they do not trigger an XML debug email -- only the successful transactions do so. It looks like the cart will substitute a 0.0.0.0 for a credit card transaction, but not a PayPal one.

http://www.sleepingbaby.net/
Using ECT 6.7.1

Still happening... and without the cart generating an XML email with the one transaction type that fails, I'm not sure what to do next. Any ideas? I asked earlier if there's a way to change their ipv6 address to my own IP for this type of transaction; is this something I can do, or is this basically an abandoned issue at this point?

http://www.sleepingbaby.net/
Using ECT 6.7.2

Well, following PayPal's idea of doing the IPv6 to IPv4 conversion would be a way to get around it but firstly, it really does seem like something they should look into and secondly, the idea I have is that there isn't a direct conversion from one to the other. Well from v4 to v6 yes but not back the other way. Can you possibly ask PayPal what conversion they recommend?

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

I will, thanks.

http://www.sleepingbaby.net/
Using ECT 6.7.2

They are washing their hands of the issue, it seems:

"I certainly understand the frustration. Unfortunately I am unable to make recommendations on how to make the IP conversions as we are not developers. If you would like to find a PayPal certified developer to work with, you may look at www.paypal.com/partnerdirectory."

I'm really at a loss. They are being extremely unhelpful, but I cannot believe that an organization as large as PayPal has no way to work with IPv6 in PP account-based payments. That's ridiculous.

Also, the fact that no one else using ECT seems to be having this issue is strange to me. I would think more people would be affected if they accept PP-funds-based payments and are using the same cart. Is it possible I have an old API running somewhere, or something else like that is happening?



http://www.sleepingbaby.net/
Using ECT 6.7.2

Hi Jan, I don't know if this will help but I don't think it will hurt either, doing a whois it appears your hosting with Dreamhost, according to their docs they added IPV6 support some time ago but it has to be enabled on the account, can you check that you have it enabled as outlined here https://help.dreamhost.com/hc/en-us/articles/216510458-IPv6

I also used this tool http://centralops.net/co/Ping.aspx it ran successful for IPV4 but gave could not obtain an IP address when selecting require ipv6

quote:

---

Adding an IPv6 address to your domain will allow your site to be accessible over IPv6

---

I would think that the host would have checked on this but since its been support for a while they may have overlooked checking.

Winners never quit, quitters never win
CSS and Responsive Designs
User Manual for Ecommerce Templates

Interesting! Thanks for the tip. I have done that, and will await the next PP/IPv6 order to see if it works :)

Meanwhile I have replied with my annoyance to PayPal -- a Google search turned up a lot of complaining about lack of IPv6 support going back to 2012, so it's not like they haven't had time to deal with the issue on their end!

http://www.sleepingbaby.net/
Using ECT 6.7.2

Hi pinging the ipv6 now has the following results, I'd give it some more time but you should check it later to make sure there are no time outs or lost packets.

Results
count ttl (hops) rtt (ms) from
1 TimedOut
2 TimedOut
3 752 XXXX:f298:5:112b::4d6:XXXX
4 33 XXXX:f298:5:112b::4d6:XXXX
5 33 XXXX:f298:5:112b::4d6:XXXX
Statistics
packets sent 5 times (ms) min 33
received 3 60% avg 272
lost 2 40% max 752





Winners never quit, quitters never win
CSS and Responsive Designs
User Manual for Ecommerce Templates

Unfortunately, that didn't make a difference. Had an IP showing as 2601 this morning with a confused customer who followed my error procedure and used my PayPal.me link, but of course that's not connected to the cart and she was concerned when it was still unauthorized after her payment. There's now an extra step of explaining to these folks that it's a manual process.

http://www.sleepingbaby.net/
Using ECT 6.7.2

PayPal has washed their hands of this -- they don't support IPv6 for this and couldn't say if they ever will. I'm still dumbstruck by that -- so many ISPs are using it now! -- but I guess that's that on their end.

Is there a way to substitute a generic real IP (like my home computer's) for IPv6 purchases? I made a dummy order from another computer that actually has an IPv6 address and of course got the error, but it seems like this is something I ought to be able to work around. Should I ask in the developers forum?

http://www.sleepingbaby.net/
Using ECT 6.7.2

I know it's not really a step forward, and I'm a little shocked that PP don't support IPv6, but you could just disable IPv6 on your site and watch this problem evaporate. There's no compelling reason why you have to accept IPv6 connections at this time.

Peter

ServeLink
Professional ecommerce web hosting for ASP & PHP
https://servelink.com

Take a look at our image upload/resize tool for the ASP cart
https://servelink.com/clients/cart?gid=7