Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?


Login with username, password and session length
February 09, 2012, 08:04:15 PM

Pages: [1]   Go Down
« previous next »
  Print  
Author Topic: How to create login page with PAYPAL PASSWORD MANAGEMENT system.  (Read 2763 times)
gaypo0
Space Explorer
***
Offline Offline

Posts: 9
« on: November 18, 2009, 08:17:04 AM »
So, if I am correct, after payment has been received to my account, PayPal automatically generates a username and a password, which it sends to the user. This paired username and password are stored on MY server in a file. My question is this: how do I create a login page which will verify the username and password in a SECURE manner (I am not on a dedicated host server)? Any tips? Total beginner here, so any help would be greatly appreciated! Thanks.
Logged
gaypo0
Space Explorer
***
Offline Offline

Posts: 9
« Reply #1 on: November 26, 2009, 05:23:24 PM »
Quote from: gaypo0 on November 18, 2009, 08:17:04 AM
So, if I am correct, after payment has been received to my account, PayPal automatically generates a username and a password, which it sends to the user. This paired username and password are stored on MY server in a file. My question is this: how do I create a login page which will verify the username and password in a SECURE manner (I am not on a dedicated host server)? Any tips? Total beginner here, so any help would be greatly appreciated! Thanks.
Logged
Danielle
Guest
« Reply #2 on: November 27, 2009, 08:56:47 AM »
PayPal generates a username and password for the user for their site that they send to you to store? I find that hard to believe, since that wouldn't be secure at all and would be providing login details off the PayPal site. Do you mean they generate a username and password for your site? Again, that is hard to believe, since why would they generate usernames and passwords for your site from theirs?

Can you detail with PayPal what plan type you are using with them? Are you just using them to process all payments for PayPal or using them as a merchant provider? I guess I just don't understand why PayPal would be generating a username and password to use on their site (security risk to provide customer logins to a site owner other than the customer themselves who signed up) or on your site (why do they care the login details for people to your site), so explaining what process is going on here would help a lot to see what to do with the information.
Logged
darkwolf
Guest
« Reply #3 on: December 24, 2009, 03:57:30 AM »
Took a look, and it does appear that paypal is now offering a password management service (https://www.paypal.com/us/cgi-bin/webscr?cmd=p/xcl/rec/subscription-pass-manual-outside) for subscriptions and recurring payments,  however it appears to be fairly complicated for installation, and as this would be in fact giving your users usernames/passwords to paypal.

This would be a security risk for anyone who is using your site, as if paypal stores the usernames and passwords (you have to assume they do) and paypal were ever compromised then all of your users usernames and password could be at risk.

Implementation of the usernames and password would depend on the type of script you are using, and if your script contains its own username/password database, you may need to manually add the usernames and passwords to the database/script from the file that paypal sends to the file on your account.
Logged
Danielle
Guest
« Reply #4 on: December 24, 2009, 07:09:31 AM »
You can't assume that's what the person was talking about here, so it would be preferable they actually replied back to clarify exactly what is meant for exactly which PayPal system instead.
Logged
Pages: [1]   Go Up
  Print  
« previous next »
 
Jump to: