Jason (Lead Developer)

Thanks for the heads up on this thread.

@Mark

I just tested an s2Member protected file download with remote authentication using a Motorola Atrix running Android v2.3.6 and it works fine from my end of things. I’m prompted for my username/password and upon entering the proper credentials, the file download begins.

If problems persist on your end, can you please let us know the specifics of what fails during your tests. For instance, does the username/password authentication window not open at all? Or it opens, but fails to authenticate you?

I would try testing in the phone’s browser first. If it works there, but does not work in specific Apps, it could be related to the app itself, which might NOT be capable of dealing with protected content that requires remote authentication to access. Some apps are incapable of sending the “Authorization” header, or dealing with a 401 header in an HTTP response, which is something that browsers ARE capable of.

Thanks for the heads up on this thread.

s2Member working together with PayPal, PayPal Pro, or with Authorize.Net; will automatically cancel previous billing profiles during an upgrade and/or downgrade from one Membership Level to another. So these are the payment gateways I would recommend for the scenario you mentioned.

With ccBill, ClickBank and Google Checkout, automated cancellations are not possible for s2Member (i.e. the gateways APIs do not allow for such a thing to occur from the s2Member side of things), it must be handled manually, or by the customer.

In other words, if a customer is upgrading and/or downgrading his account, under a ClickBank and/or Google Checkout subscription, they will need to cancel any previous billing plans they have with you (in most cases), by contacting you (or by contacting ClickBank directly). Or, in the case of Google Checkout, the customer can log into their Google Wallet account and cancel charges from there.

In either of these cases, cancellation is handled manually, and then s2Member is notified automatically behind-the-scene that a cancellation took place, and it will terminate whatever site access was associated with the billing plan, at the correct point in time.

NOTE: In the case of ClickBank… ClickBank provides customers with a link which allows them to request cancellation via ClickBank directly: https://www.clickbank.com/orderDetail.htm

This can also be introduced to a customer through an
s2Member Pro ClickBank Cancellation Button, as seen in the screenshot below.

The same is true for Google Checkout, as seen in the screenshot below.

Cristian brought to my attention…

You posted this script, which is a hack that we posted some time ago, but should still work as expected.

<?php
/*
---- Configuration. -------------------------------------------------------------------------------------------------------*/

/* s2Member installation domain. */
$config&#91;"custom"&#93; = "www.wpskillset.com";

/* s2Member Membership Level# */
$config&#91;"item_number"&#93; = "1";

/* s2Member Proxy IPN URL handler. - You'll get this from Dashboard: `s2Member -> PayPal Options -> IPN Integration -> Proxy IPN URL`. */
$config["proxy_ipn_handler_url"] = "http://www.wpskillset.com/?s2member_paypal_notify=1";

/* Or use "http://www.wpskillset.com/?s2member_paypal_notify=1&s2member_paypal_proxy=proxy&s2member_paypal_proxy_verification=12b122ba5812a0fcdfb1a1613727464d";  */

/*
---- Do NOT edit anything below, unless you know what you're doing. --------------------------------------------------------*/
@ignore_user_abort(true);
header("HTTP/1.0 200 OK");
header("Content-Type: text/plain; charset=utf-8");
eval /* Clean buffers. */('while (@ob_end_clean ());');

if( /* No ``$_POST`` vars? */empty($_POST) || !is_array($_POST))
	exit /* Exit now. There is nothing to process. */();
	
$_p = (get_magic_quotes_gpc()) ? stripslashes_deep($_POST) : $_POST;
$_p = trim_deep /* Now trim this array deeply. */($_p);

$_paypal_ipn_server_ip = $_ip = /* Forge IP address to match the PayPal® IPN server here. */ "216.113.188.202";
/* See list of IPs here: <https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/howto_api_golivechecklist>. */

$_p["custom"] = $config["custom"]; $_p["item_number"] = $config["item_number"];
echo (trim(curlpsr($config["proxy_ipn_handler_url"], http_build_query($_p, null, "&"), 20, 20, array("REMOTE_ADDR: ".$_ip, "HTTP_X_FORWARDED_FOR: ".$_ip))));

unset($_paypal_ipn_server_ip, $_ip);
/*
---- Do NOT edit anything below, unless you know what you're doing. --------------------------------------------------------*/
function trim_deep($value = FALSE)
	{
		return is_array($value) ? array_map("trim_deep", $value) : trim((string)$value);
	}
function stripslashes_deep($value = FALSE)
	{
		return is_array($value) ? array_map("stripslashes_deep", $value) : stripslashes((string)$value);
	}
function curlpsr($url = FALSE, $post_vars = array(), $max_con_secs = 20, $max_stream_secs = 20, $headers = array())
	{
		if(($url = trim($url)) && ($curl = curl_init()))
			{
				if /* Because cURL can't deal with complex arrays. */(is_array($post_vars))
					$post_vars = http_build_query($post_vars);
				$follow = (!ini_get("safe_mode") && !ini_get("open_basedir"));
				curl_setopt_array($curl, array(CURLOPT_URL => $url, CURLOPT_POST => true, CURLOPT_CONNECTTIMEOUT => $max_con_secs, CURLOPT_TIMEOUT => $max_stream_secs, CURLOPT_HEADER => false, CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => $headers, CURLOPT_POSTFIELDS => $post_vars, CURLOPT_FOLLOWLOCATION => $follow, CURLOPT_MAXREDIRS => (($follow) ? 5 : 0), CURLOPT_ENCODING => "", CURLOPT_VERBOSE => false, CURLOPT_FAILONERROR => true, CURLOPT_FORBID_REUSE => true, CURLOPT_SSL_VERIFYPEER => false));
				$o = trim(curl_exec($curl));
				curl_close($curl);
			}
		return (!empty($o)) ? $o : false;
	}
?>

In this script/hack, the custom and item_number variables are set explicitly, as seen in this portion of the code:

$_p["custom"] = $config["custom"]; $_p["item_number"] = $config["item_number"];

Since the custom and item_number variables are NOT being filled in however (according to your log files), I suspect one of the following is happening.

1. Your PayPal account is NOT actually processing IPNs through this script, and instead it’s processing them directly, or through another central IPN processing script somewhere?

2. You’ve made some modifications to the above script?

If problems persist, I recommend that you attach a logging routine to this script, so you/we can see the results. Here is the full code you posted above, with an extra line of code that logs the full set of POST data being processed.

<?php
/*
---- Configuration. -------------------------------------------------------------------------------------------------------*/

/* s2Member installation domain. */
$config&#91;"custom"&#93; = "www.wpskillset.com";

/* s2Member Membership Level# */
$config&#91;"item_number"&#93; = "1";

/* s2Member Proxy IPN URL handler. - You'll get this from Dashboard: `s2Member -> PayPal Options -> IPN Integration -> Proxy IPN URL`. */
$config["proxy_ipn_handler_url"] = "http://www.wpskillset.com/?s2member_paypal_notify=1";

/* Or use "http://www.wpskillset.com/?s2member_paypal_notify=1&s2member_paypal_proxy=proxy&s2member_paypal_proxy_verification=12b122ba5812a0fcdfb1a1613727464d";  */

/*
---- Do NOT edit anything below, unless you know what you're doing. --------------------------------------------------------*/
@ignore_user_abort(true);
header("HTTP/1.0 200 OK");
header("Content-Type: text/plain; charset=utf-8");
eval /* Clean buffers. */('while (@ob_end_clean ());');

if( /* No ``$_POST`` vars? */empty($_POST) || !is_array($_POST))
	exit /* Exit now. There is nothing to process. */();
	
$_p = (get_magic_quotes_gpc()) ? stripslashes_deep($_POST) : $_POST;
$_p = trim_deep /* Now trim this array deeply. */($_p);

$_paypal_ipn_server_ip = $_ip = /* Forge IP address to match the PayPal® IPN server here. */ "216.113.188.202";
/* See list of IPs here: <https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/howto_api_golivechecklist>. */

$_p["custom"] = $config["custom"]; $_p["item_number"] = $config["item_number"];
file_put_contents(dirname(__FILE__)."/paypal-proxy-ipn.log", var_export($_p, TRUE)."\n\n", FILE_APPEND);
echo (trim(curlpsr($config["proxy_ipn_handler_url"], http_build_query($_p, null, "&"), 20, 20, array("REMOTE_ADDR: ".$_ip, "HTTP_X_FORWARDED_FOR: ".$_ip))));

unset($_paypal_ipn_server_ip, $_ip);
/*
---- Do NOT edit anything below, unless you know what you're doing. --------------------------------------------------------*/
function trim_deep($value = FALSE)
	{
		return is_array($value) ? array_map("trim_deep", $value) : trim((string)$value);
	}
function stripslashes_deep($value = FALSE)
	{
		return is_array($value) ? array_map("stripslashes_deep", $value) : stripslashes((string)$value);
	}
function curlpsr($url = FALSE, $post_vars = array(), $max_con_secs = 20, $max_stream_secs = 20, $headers = array())
	{
		if(($url = trim($url)) && ($curl = curl_init()))
			{
				if /* Because cURL can't deal with complex arrays. */(is_array($post_vars))
					$post_vars = http_build_query($post_vars);
				$follow = (!ini_get("safe_mode") && !ini_get("open_basedir"));
				curl_setopt_array($curl, array(CURLOPT_URL => $url, CURLOPT_POST => true, CURLOPT_CONNECTTIMEOUT => $max_con_secs, CURLOPT_TIMEOUT => $max_stream_secs, CURLOPT_HEADER => false, CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => $headers, CURLOPT_POSTFIELDS => $post_vars, CURLOPT_FOLLOWLOCATION => $follow, CURLOPT_MAXREDIRS => (($follow) ? 5 : 0), CURLOPT_ENCODING => "", CURLOPT_VERBOSE => false, CURLOPT_FAILONERROR => true, CURLOPT_FORBID_REUSE => true, CURLOPT_SSL_VERIFYPEER => false));
				$o = trim(curl_exec($curl));
				curl_close($curl);
			}
		return (!empty($o)) ? $o : false;
	}
?>

The line that handles logging, is as follows:

file_put_contents(dirname(__FILE__)."/paypal-proxy-ipn.log", var_export($_p, TRUE)."\n\n", FILE_APPEND);

So you’ll want to monitor this file in the same directory: paypal-proxy-ipn.log

Thank you for the reply!

I’m updating our diagnostic report on this, and we’ll continue our attempts to reproduce this. So far I’ve been unsuccessful, even with content filters applied, but we’ll do our best to continue the search.

Thanks for your patience.

I’ve looked through your log file entries, and I find some very confusing scenarios where s2Member is lead to believe that transient data entries exist for IPNs that are brand new, and have never been processed before. This is not the expected and/or normal behavior.

Upon further investigation, I am lead to believe that there might be a plugin conflict that exists on your installation, related to one of the following.

1. A caching plugin, which has object caching enabled (and perhaps not behaving properly).
2. Or, another plugin which modifies the built-in behavior of the WordPress get_transient() and/or set_transient() functions.

I would suggest that you disable any plugins that you believe might be related to the above (at least temporarily), and see if the problem goes away. If problems persist, please submit a list of all of the plugins that you are currently running together with s2Member. Also, please submit a Dashboard login for us via our private contact form here: s2Member® » Private Contact Form

Thanks for the heads up on this thread.

We will keep an eye on this issue in the future. Currently s2Member is not in control of routines in the authoring of posts, and only restricts data from users viewing the page, therefore any issues with the post’s author is most likely an issue with core WordPress functionality or JWPlayer itself.

Please keep in mind that you can change the author from within the WordPress Dashboard if any problems persist.

Thanks for the heads up on this request for support.

Having more than one member with the same paid Subscr. ID would be produce very unpredictable results within the context of s2Member itself. Payment gateways supply a unique transaction and/or subscription ID for s2Member, which is associated with a specific customer. s2Member expects this value to be a unique identifier for a particular paying customer, so having more than one customer with the same ID is not advised.

s2Member also associates each paid subscription ID with the underlying gateway. So each paying customer will have these two meta fields:

wp_s2member_subscr_gateway
wp_s2member_subscr_id

(always unique for each paying customer)

I would suggest that you add some additional meta fields of your own, instead of modifying these which the s2Member software itself uses. That way you won’t run into any compatibility issues.

Thanks for the follow-up.

Yes, that hosting configuration will be incompatible with s2Member. Any hosting company which blocks the server from making requests to itself (i.e. for s2Member, or for WP_Cron, or for any other script that needs to post HTTP requests to itself for any reason), will be a problem.

I recommend any of these hosts:
http://wordpress.org/hosting/

Also recommend:
HostGator
MediaTemple (gs)
Rackspace Cloud Hosting
FireHost

If possible, please tell us who your current hosting provider is?

@Allan

Thanks for your patience.

OK. Based on the log entries you’ve posted, I’m unable to find a logical reason why this is failing on this one particular installation. I’d like to see the log files in their entirety, so I can see the broader perspective, and that should help us to shed light on the underlying cause of this for you.

If it’s possible to send us the full details, please submit a private contact form entry via this URL:
s2Member® » Private Contact Form