I am developing a website which will allow users to pay via Paypal.
Paypal IPN seems to be easy to integrate and it works on my localhost.
Now the problem is that, the amount and the business name are passed to paypal using POST Data.
I know it’s very dangerous to put it that way, but I am not sure what are the alternatives.
How can I make Paypal IPN secure?
The POST data is sent over a secure HTTPS connection which encrypts the data between sender and receiver. It’s how all sensitive data is sent over the Internet. If it really was dangerous then Paypal, and every reputable website handling sensitive information, wouldn’t be using it.