About: Leho Kraav

I’ve come to the conclusion that I using clickbank_postvars() to verify $REQUEST[“cbpop”] should works after all. Confirmation on this would be nice.

Unfortunately during upsell flow this verification routine is blocked by the $_REQUEST[“s2member_pro_clickbank_return”] check. This means I have to copy-paste the whole routine for myself.

Is there a better way? Is there an oversight in the library regarding the problem I’ve presented above?

• This reply was modified 3 years, 2 months ago by  Leho Kraav.

I am still stuck.

add_action( 'template_redirect', 'my_template_redirect' );
function my_template_redirect() {
    if ( is_page( "upsell" ) ) {
        if ( current_user_can( "access_s2member_level1" ) ) return;

        if ( ! is_array( c_ws_plugin__s2member_pro_clickbank_utilities::clickbank_postvars() ) )
            die( "failed" );
    }
}

For some reason clickbank_postvars() doesn’t not validate the request. Is this maybe because it’s already been done in “init” action and I’m running it twice?

• This reply was modified 3 years, 2 months ago by  Leho Kraav.

Actually I’m seeing that upsell return URL contains a whole bunch of request parameters to check against.

Now the question is which ones should I choose and what are the values to check for integrity?