What's wrong with this PHP, SQL code?

// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id);
	return $messages;
}

                                              

1:
2:
3:
4:
5:
6:
7:

// MySQL query operations
function insertQuery($query)
{
echo "executing: " . $query;
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
                                              

1:
2:
3:
4:
5:
6:
7:
8:

function processOrder($data)
{
      $id = $_REQUEST['item_number'];
      $amount = $_SESSION['make_payment_amount'];
 $q="SELECT * FROM projects WHERE `id_prj` = '$id'";
echo "processOrder::executing - " . $q;
      $result = mysql_query($q) or die(mysql_error());
	 $query = mysql_fetch_assoc($result);
      $paid = $query['paid_prj'] + $amount;
      $due = $query['due_prj'] - $amount;
      $notes = $query['notes_prj'] . "A payment for " . $amount . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
      insertQuery("UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = '$id' LIMIT 1");
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:

 
 
//Retrieve input parameters
	$id = $_POST['item_number'];
	$amount = $_SESSION['make_payment_amount'];
//Connect to the database
	$link_id = db_connect();
//Make the inputs safe from SQL Injection hacking
	$amount = mysql_real_escape_string($amount);
	$id = mysql_real_escape_string($id);
//Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = '$id'";
	$result1 = mysql_query($query);
	echo mysql_error();
//Retrieve the query data and compute
	$row = mysql_fetch_array($result);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment for " . $amount . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
//Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = '$id' LIMIT 1";
	$result2 = mysql_query($query2, $link_id);
	echo mysql_error();

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:

//Retrieve input parameters
	$id = 1;
	$amount = 1;
//Connect to the database
	$link_id = db_connect();
//Make the inputs safe from SQL Injection hacking
	$amount = mysql_real_escape_string($amount);
	$id = mysql_real_escape_string($id);
//Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = '$id'";
	$result1 = mysql_query($query, $link_id);
	echo mysql_error();
//Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment for " . $amount . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
//Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = '$id' LIMIT 1";
	$result2 = mysql_query($query2, $link_id);
	echo mysql_error();

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:

function db_connect()
{
global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
global $MYSQL_ERRNO, $MYSQL_ERROR;
$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
if (!$link_id)
{
$MYSQL_ERRNO = 0;
$MYSQL_ERROR = "Connection failed to the host.";
return 0;
}
else if (empty($dbname) && !mysql_select_db($default_dbname))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
return 0;
} 
else return $link_id;
}
//Retrieve input parameters
	$id = 1;
	$amount = 1;
//Connect to the database
	$link_id = db_connect();
	if ($link_id = true)
	{ echo "TRUE"; } else { echo "FALSE"; }
//Make the inputs safe from SQL Injection hacking
	$amount = mysql_real_escape_string($amount);
	$id = mysql_real_escape_string($id);
//Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	echo $query;
	$result1 = mysql_query($query);
	echo mysql_error();
//Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment for " . $amount . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
//Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	echo $query2;
	$result2 = mysql_query($query2);
	echo mysql_error();

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:

<?php
mysql_connect($dbhost, $dbusername, $dbuserpassword) or die( mysql_error() );
mysql_select_db('MyDatabaseName') or die( mysql_error() );
 
//Retrieve input parameters
	$id = 1;
	$amount = 1;
 
//Make the inputs safe from SQL Injection hacking
	$amount = mysql_real_escape_string($amount);
	$id = mysql_real_escape_string($id);
//Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	echo $query;
	$result1 = mysql_query($query) or die(mysql_error());
 
//Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment for " . $amount . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
//Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	echo $query2;
	$result2 = mysql_query($query2) or die(mysql_error());
 
?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:

// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
 
// Row count function
function rowCount($query)
{
	$link_id = db_connect();
	$result = mysql_query($query);
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		return "$errnum: $errstr";
	} else
	{
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connections: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp)) { $response[]=@fgets($fp, 1024); }
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	} else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	$result1 = mysql_query($query) or die(mysql_error());
 
	// Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
	// Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	$result2 = mysql_query($query2) or die(mysql_error());
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
} else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
processOrder($_POST['item_number'], $_POST['mc_gross']);
exit;
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:

// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
 
// Process the order
function processOrder($id, $amount)
{
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	insertQuery($query);
 
	// Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
	// Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	insertQuery($query2);
	exit;
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:

// SQL error reporting
function sql_error()
{
global $MYSQL_ERRNO, $MYSQL_ERROR;
if(empty($MYSQL_ERROR))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
global $MYSQL_ERRNO, $MYSQL_ERROR;
$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
if (!$link_id)
{
$MYSQL_ERRNO = 0;
$MYSQL_ERROR = "Connection failed to the host.";
return 0;
}
else if (empty($dbname) && !mysql_select_db($default_dbname))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
return 0;
} 
else return $link_id;
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:

<?php
ini_set ('display_errors', 1);
error_reporting (E_ALL);
 
// SQL error reporting
function sql_error()
{
global $MYSQL_ERRNO, $MYSQL_ERROR;
if(empty($MYSQL_ERROR))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
global $MYSQL_ERRNO, $MYSQL_ERROR;
$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
if (!$link_id)
{
$MYSQL_ERRNO = 0;
$MYSQL_ERROR = "Connection failed to the host.";
return 0;
}
else if (empty($dbname) && !mysql_select_db($default_dbname))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
return 0;
} 
else return $link_id;
}
 
// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
 
// Row count function
function rowCount($query)
{
	$link_id = db_connect();
	$result = mysql_query($query);
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		return "$errnum: $errstr";
	} else
	{
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connections: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp)) { $response[]=@fgets($fp, 1024); }
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	} else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	insertQuery($query);
 
	// Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
	// Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	insertQuery($query2);
	exit;
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
} else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
processOrder($_POST['item_number'], $_POST['mc_gross']);
exit;
 
?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:

>>	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
OK, so that clearly shows the query you intend to execute
 
>>	insertQuery($query);
now here you are invoking a function. Let's digress here for a second and see what that function does:
 
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
 
OK, so it connects to the db, executes the query string in the $query variable AND
RETURNS a resource! To clarify, it returns a "pointer" to a "db recordset". So let's go back to processOrder() and keep following the logic of the execution.
 
>>	// Retrieve the query data and compute
>>	$row = mysql_fetch_array($result1);
OK so per your comment, your intention is clear, but that cannot possibly work. Where did you get $result1 from? If you look back at your previous statement, you just have => insertQuery($query);
 
there is NOTHING receiving the result of the query! So that statment should have been:
$result1 = insertQuery($query);
 
That is the bug in that function. Since you are NOT "catching/receiving" the resource from insertQuery, then $row is NOT getting/seeing any values.
 
On another note, I see that at the end of that function you have:
>>$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
>>insertQuery($query2);
 
The "buggy" statement outlined previously was using insertQuery to "SELECT" records. Now you are using the same function to "UPDATE" records. However, an UPDATE statement does not return records. So I suggest you modify the function so that if you are executing a select, you get back the "recordset", but if you are doing something other than a select, have the function return the number of affected records. You also need to do error checking.
 
Having said that, here are the updated and commented functions so you can follow along:
 
 
 
 
// MySQL query operations
function executeQuery($query)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	$link_id = db_connect();
	
	//check for connection problems
	if(!$link_id)
	{	//simply return null since db_connect() already set the
		//$MYSQL_ERRNO and $MYSQL_ERROR;
		return NULL;
	}
 
	$query =trim($query);
	$messages = mysql_query($query, $link_id);
 
	//check if query failed and update global variables accordingly
	//return NULL so you know query failed. Then at the place where you are callin
	//executeQuery you need to decide whether you want to script to "die" or not
	if( !$messages )
	{
		$MYSQL_ERRNO =mysql_errno();
		$MYSQL_ERROR = 'Problems encountered while executing <br/>'. $query . '<br/>Error:' .  mysql_error();
	return NULL;
	}
 
	//if you made it this far, there were not problems executing the script
	//so now check if a SELECT query was requested and if so, return the recordset
	if( preg_match('/^SELECT\s+/i',$query )
	{
		return $messages;
	}
 
	//Get the number of affected rows by the last INSERT, UPDATE, REPLACE or 
	//DELETE query associated with link_identifier
	//Example: if you executed an update statement, this will tell you how many
	//records were actually updated, which could be 1 or 100 or even zero!
	if( preg_match('/^(INSERT|UPDATE|DELETE|REPLACE)\s+/',$query) )
	{
		return mysql_affected_rows($link_id); 
	}
 
//for any other command, we just know the command succeeded
return TRUE;
}
 
 
 
// Process the order
function processOrder($id, $amount)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
 
	//this will be used to send back the overall return status of this function
	//assume that initially the function will fail
	$result=NULL;
 
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	
	//save the returned value
	$result1 = executeQuery($query);
 
	//check for errors
	if( NULL === $result1 )
	{
		echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
	}
	else//query succeeded
	{
		// Retrieve the query data and compute
		$row = mysql_fetch_array($result1);
		$paid = $row['paid_prj'] + $amount;
		$due = $row['due_prj'] - $amount;
		$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
		// Update the database
		$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
 
		//save the returned value. If this succeeds, the return value will the
		//the total number of updated records
		$result = executeQuery($query2);
		
		//check for errors
		if(NULL===$result)
		{
			echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
		}
	}
return $result;
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:

<?php function sql_error()
{
global $MYSQL_ERRNO, $MYSQL_ERROR;
if(empty($MYSQL_ERROR))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
global $MYSQL_ERRNO, $MYSQL_ERROR;
$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
if (!$link_id)
{
$MYSQL_ERRNO = 0;
$MYSQL_ERROR = "Connection failed to the host.";
return 0;
}
else if (empty($dbname) && !mysql_select_db($default_dbname))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
return 0;
} 
else return $link_id;
}
 
//Retrieve input parameters
      $id = 1;
      $amount = 1;
 
//Make the inputs safe from SQL Injection hacking
      $amount = mysql_real_escape_string($amount);
      $id = mysql_real_escape_string($id);
//Query for the data
      $query = "SELECT * FROM projects WHERE `id_prj` = $id";
      echo $query;
      $result1 = mysql_query($query) or die(mysql_error());
 
//Retrieve the query data and compute
      $row = mysql_fetch_array($result1);
      $paid = $row['paid_prj'] + $amount;
      $due = $row['due_prj'] - $amount;
      $notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
//Update the database
      $query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
      echo $query2;
      $result2 = mysql_query($query2) or die(mysql_error());
 ?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:

<?php
error_reporting(E_ALL);
...

                                              

1:
2:
3:

<?php
ini_set ('display_errors', 1);
error_reporting (E_ALL);
 
// SQL error reporting
function sql_error()
{
global $MYSQL_ERRNO, $MYSQL_ERROR;
if(empty($MYSQL_ERROR))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
global $MYSQL_ERRNO, $MYSQL_ERROR;
$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
if (!$link_id)
{
$MYSQL_ERRNO = 0;
$MYSQL_ERROR = "Connection failed to the host.";
return 0;
}
else if (empty($dbname) && !mysql_select_db($default_dbname))
{
$MYSQL_ERRNO = mysql_errno();
$MYSQL_ERROR = mysql_error();
return 0;
} 
else return $link_id;
}
 
// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
 
// Row count function
function rowCount($query)
{
	$link_id = db_connect();
	$result = mysql_query($query);
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		return "$errnum: $errstr";
	} else
	{
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connections: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp)) { $response[]=@fgets($fp, 1024); }
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	} else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	} else
	{
		return false;
	}
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	insertQuery($query);
 
	// Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
	// Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	insertQuery($query2);
	exit;
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
} else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
processOrder($_POST['item_number'], $_POST['mc_gross']);
exit;
 
?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:

<?php
ini_set ('display_errors', 1);
error_reporting (E_ALL);
 
// SQL error reporting
function sql_error()
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	if(empty($MYSQL_ERROR))
	{
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
	}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
	global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
	if (!$link_id)
	{
		$MYSQL_ERRNO = 0;
		$MYSQL_ERROR = "Connection failed to the host.";
	return 0;
	}
	else if (empty($dbname) && !mysql_select_db($default_dbname))
	{
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
		return 0;
	} 
	else
		return $link_id;
}
 
/*
// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
*/
// MySQL query operations
function executeQuery($query)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	$link_id = db_connect();
	
	//check for connection problems
	if(!$link_id)
	{	//simply return null since db_connect() already set the
		//$MYSQL_ERRNO and $MYSQL_ERROR;
		return NULL;
	}
 
	$query =trim($query);
	$messages = mysql_query($query, $link_id);
 
	//check if query failed and update global variables accordingly
	//return NULL so you know query failed. Then at the place where you are callin
	//executeQuery you need to decide whether you want to script to "die" or not
	if( !$messages )
	{
		$MYSQL_ERRNO =mysql_errno();
		$MYSQL_ERROR = 'Problems encountered while executing <br/>'. $query . '<br/>Error:' .  mysql_error();
	return NULL;
	}
 
	//if you made it this far, there were not problems executing the script
	//so now check if a SELECT query was requested and if so, return the recordset
	if( preg_match('/^SELECT\s+/i',$query )
	{
		return $messages;
	}
 
	//Get the number of affected rows by the last INSERT, UPDATE, REPLACE or 
	//DELETE query associated with link_identifier
	//Example: if you executed an update statement, this will tell you how many
	//records were actually updated, which could be 1 or 100 or even zero!
	if( preg_match('/^(INSERT|UPDATE|DELETE|REPLACE)\s+/',$query) )
	{
		return mysql_affected_rows($link_id); 
	}
 
//for any other command, we just know the command succeeded
return TRUE;
}
 
 
// Row count function
function rowCount($query)
{
	$link_id = db_connect();
	$result = mysql_query($query);
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		return "$errnum: $errstr";
	} else
	{
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connection: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp))
		{
			$response[]=@fgets($fp, 1024);
		}
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		return true;
	}
return false;
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	}
	else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	}
return false;
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
 
	//this will be used to send back the overall return status of this function
	//assume that initially the function will fail
	$result=NULL;
 
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	
	//save the returned value
	$result1 = executeQuery($query);
 
	//check for errors
	if( NULL === $result1 )
	{
		echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
	}
	else//query succeeded
	{
		// Retrieve the query data and compute
		$row = mysql_fetch_array($result1);
		$paid = $row['paid_prj'] + $amount;
		$due = $row['due_prj'] - $amount;
		$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
		// Update the database
		$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
 
		//save the returned value. If this succeeds, the return value will the
		//the total number of updated records
		$result = executeQuery($query2);
		
		//check for errors
		if(NULL===$result)
		{
			echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
		}
	}
return $result;
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
processOrder($_POST['item_number'], $_POST['mc_gross']);
exit;
 
?>
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:

<?php
ini_set ('display_errors', 1);
error_reporting (E_ALL);
 
// SQL error reporting
function sql_error()
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	if(empty($MYSQL_ERROR))
	{
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
	}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
	global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
	if (!$link_id)
	{
		$MYSQL_ERRNO = 0;
		$MYSQL_ERROR = "Connection failed to the host.";
	return 0;
	}
	else if (empty($dbname) && !mysql_select_db($default_dbname))
	{
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
		return 0;
	} 
	else
		return $link_id;
}
 
/*
// MySQL query operations
function insertQuery($query)
{
	$link_id = db_connect();
	$messages = mysql_query($query, $link_id) or die(mysql_error());
	return $messages;
}
*/
// MySQL query operations
function executeQuery($query)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	$link_id = db_connect();
	
	//check for connection problems
	if(!$link_id)
	{	//simply return null since db_connect() already set the
		//$MYSQL_ERRNO and $MYSQL_ERROR;
		return NULL;
	}
 
	$query =trim($query);
	$messages = mysql_query($query, $link_id);
 
	//check if query failed and update global variables accordingly
	//return NULL so you know query failed. Then at the place where you are callin
	//executeQuery you need to decide whether you want to script to "die" or not
	if( !$messages )
	{
		$MYSQL_ERRNO =mysql_errno();
		$MYSQL_ERROR = 'Problems encountered while executing <br/>'. $query . '<br/>Error:' .  mysql_error();
	return NULL;
	}
 
	//if you made it this far, there were not problems executing the script
	//so now check if a SELECT query was requested and if so, return the recordset
	if( preg_match('/^SELECT\s+/i',$query) )
	{
		return $messages;
	}
 
	//Get the number of affected rows by the last INSERT, UPDATE, REPLACE or 
	//DELETE query associated with link_identifier
	//Example: if you executed an update statement, this will tell you how many
	//records were actually updated, which could be 1 or 100 or even zero!
	if( preg_match('/^(INSERT|UPDATE|DELETE|REPLACE)\s+/',$query) )
	{
		return mysql_affected_rows($link_id); 
	}
 
//for any other command, we just know the command succeeded
return TRUE;
}
 
 
// Row count function
function rowCount($query)
{
	$link_id = db_connect();
	$result = mysql_query($query);
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		return "$errnum: $errstr";
	} else
	{
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connection: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp))
		{
			$response[]=@fgets($fp, 1024);
		}
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		return true;
	}
return false;
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	}
	else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	}
return false;
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
 
	//this will be used to send back the overall return status of this function
	//assume that initially the function will fail
	$result=NULL;
 
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	
	//save the returned value
	$result1 = executeQuery($query);
 
	//check for errors
	if( NULL === $result1 )
	{
		echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
	}
	else//query succeeded
	{
		// Retrieve the query data and compute
		$row = mysql_fetch_array($result1);
		$paid = $row['paid_prj'] + $amount;
		$due = $row['due_prj'] - $amount;
		$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
		// Update the database
		$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
 
		//save the returned value. If this succeeds, the return value will the
		//the total number of updated records
		$result = executeQuery($query2);
		
		//check for errors
		if(NULL===$result)
		{
			echo $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
		}
	}
return $result;
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
echo "verifyIPN() returned: " . $result;
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
echo "payment status".$_POST['payment_status'];
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
echo "confirmProducts() return" . $result;
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
$result = processOrder($_POST['item_number'], $_POST['mc_gross']);
 
echo "processOrder() returned:" . $result;
exit;
 
?>

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:

<?php
ini_set ('display_errors', 1);
error_reporting (E_ALL);
 
$DEBUG_MODE=TRUE;
$DEBUG_MSG="";
// SQL error reporting
function sql_error()
{
	global $MYSQL_ERRNO, $MYSQL_ERROR;
	if(empty($MYSQL_ERROR))
	{
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
	}
return "$MYSQL_ERRNO: $MYSQL_ERROR";
}
 
// Connection information
$dbhost = '';
$dbusername = '';
$dbuserpassword = '';
$default_dbname = '';
$MYSQL_ERRNO = '';
$MYSQL_ERROR = '';
$default_sort_order = 'ASC';
$defaualt_order_by = 'uid';
$records_per_page = '5';
function db_connect()
{
	global $dbhost, $dbusername, $dbuserpassword, $default_dbname;
	global $MYSQL_ERRNO, $MYSQL_ERROR,$DEBUG_MODE,$DEBUG_MSG;
	if($DEBUG_MODE) $DEBUG_MSG .= "-> dbConnect()\n";
	$link_id = mysql_connect($dbhost, $dbusername, $dbuserpassword);
	if (!$link_id)
	{
		$MYSQL_ERRNO = 0;
		$MYSQL_ERROR = "Connection failed to the host." . mysql_error();
		if($DEBUG_MODE) $DEBUG_MSG .= "-----> mysql_connect() Line: ".__LINE__."; Error:{$MYSQL_ERROR}\n";
	return 0;
	}
	else if (empty($dbname) && !mysql_select_db($default_dbname))
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "-----> mysql_connect() Line: ".__LINE__."; Status:OK\n";
		$MYSQL_ERRNO = mysql_errno();
		$MYSQL_ERROR = mysql_error();
		if($DEBUG_MODE) $DEBUG_MSG .= "-----> mysql_select_db() Line: ".__LINE__."; Error: {$MYSQL_ERROR}\n";
		return 0;
	}
	if($DEBUG_MODE) $DEBUG_MSG .= "-----> db_connect() Line: ".__LINE__."; Status: OK\n";
return $link_id;
}
 
// MySQL query operations
function executeQuery($query)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR,$DEBUG_MODE,$DEBUG_MSG;
	$link_id = db_connect();
	
	//check for connection problems
	if(!$link_id)
	{	//simply return null since db_connect() already set the
		//$MYSQL_ERRNO and $MYSQL_ERROR;
		return NULL;
	}
	$query =trim($query);
	if($DEBUG_MODE) $DEBUG_MSG .= "-> executeQuery('{$query}') Line: ".__LINE__.";\n";
	$messages = mysql_query($query, $link_id);
 
	//check if query failed and update global variables accordingly
	//return NULL so you know query failed. Then at the place where you are callin
	//executeQuery you need to decide whether you want to script to "die" or not
	if( !$messages )
	{
		$MYSQL_ERRNO =mysql_errno();
		$MYSQL_ERROR = 'Problems encountered while executing <br/>'. $query . '<br/>Error:' .  mysql_error();
		if($DEBUG_MODE) $DEBUG_MSG .= "-----> executeQuery('...') Line: ".__LINE__."; Error: {$MYSQL_ERROR}\n";
	return NULL;
	}
 
	if($DEBUG_MODE) $DEBUG_MSG .= "-----> executeQuery('...') Line: ".__LINE__."; Status: OK\n";
 
	//if you made it this far, there were not problems executing the script
	//so now check if a SELECT query was requested and if so, return the recordset
	if( preg_match('/^SELECT\s+/i',$query) )
	{
		return $messages;
	}
 
	//Get the number of affected rows by the last INSERT, UPDATE, REPLACE or 
	//DELETE query associated with link_identifier
	//Example: if you executed an update statement, this will tell you how many
	//records were actually updated, which could be 1 or 100 or even zero!
	if( preg_match('/^(INSERT|UPDATE|DELETE|REPLACE)\s+/',$query) )
	{
		return mysql_affected_rows($link_id); 
	}
 
//for any other command, we just know the command succeeded
return TRUE;
}
 
 
// Row count function
function rowCount($query)
{
	global $DEBUG_MODE,$DEBUG_MSG;
	if($DEBUG_MODE) $DEBUG_MSG .= "-> rowCount('{$query}') Line: ".__LINE__."\n";
	$link_id = db_connect();
	$result = mysql_query($query);
	if( !result )
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "-----> rowCount('...') Line: ".__LINE__."; Error:".mysql_error()."\n";
	}
	$rowCount = mysql_num_rows($result);
	return $rowCount;
}
 
// Validating the IPN with PayPal
function verifyIPN($data)
{
	global $DEBUG_MODE,$DEBUG_MSG;
	$postdata = "";
	$response = array();
	
	foreach($data as $var=>$val)
	{
		$postdata .= $var . "=" . urlencode($val) . "&";
	}
	$postdata .="cmd=_notify-validate";
	if($DEBUG_MODE) $DEBUG_MSG .= "-> verifyIPN('{$postdata}') Line: ".__LINE__."\n";
 
	$fp=@fsockopen("ssl://www.sandbox.paypal.com" ,"443" , $errnum, $errstr, 30);
	if(!$fp)
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "-----------> fsockopen('ssl://www.sandbox.paypal.com' ,'443') Line: ".__LINE__."; Error: $errnum; $errstr\n";
		return "$errnum: $errstr";
	} 
	else
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "-----------> fsockopen('ssl://www.sandbox.paypal.com' ,'443') Line: ".__LINE__."; Status: OK\n";
		fputs($fp, "POST /cgi-bin/webscr HTTP/1.0\r\n");
		fputs($fp, "Host: www.sandbox.paypal.com\r\n");
		fputs($fp, "Content-type: application/x-www-form-urlencoded\r\n");
		fputs($fp, "Content-length: ".strlen($postdata)."\r\n");
		fputs($fp, "Connection: close\r\n\r\n");
		fputs($fp, $postdata . "\r\n\r\n");
		while(!feof($fp))
		{
			$response[]=@fgets($fp, 1024);
		}
		fclose($fp);
	}
	$response = implode("\n", $response);
	if(eregi("VERIFIED", $response))
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "-> verifyIPN('{$postdata}') Line: ".__LINE__."; Status: VERIFIED\n";
		return true;
	}
	if($DEBUG_MODE) $DEBUG_MSG .= "-> verifyIPN('{$postdata}') Line: ".__LINE__."; Status: NOT VERIFIED\n";
return false;
}
 
// Confirming product information
function confirmProduct($id, $name, $amount)
{
	if (!(ctype_digit("$id") && is_numeric("$amount")))
	{
		return false;
	}
	else
	{
		$name = "Payment for " . mysql_escape_string("$name");
	}
	$query = "SELECT id_prj FROM projects WHERE `id_prj` = '$id' AND `name_prj` = '$name' LIMIT 1";
	if (rowCount($query) == 1)
	{
		return true;
	}
return false;
}
 
// Pending payment confirmation
function paymentPendingThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. However, PayPal is still processing your payment at this time. Once PayPal confirms that they have completed processing your payment we will contact you again to confirm the details.\n\n If you have any questions please do not hesitate to contact us.\n\n ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Completed payment confirmation
function paymentCompletedThankYou($address)
{
	$subject = "Order Received";
	$body = "Thanks for your payment to EMB!\n This automated message confirms that we have received notifications from PayPal regarding your payment. ";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: admin@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Process the order
function processOrder($id, $amount)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR,$DEBUG_MODE,$DEBUG_MSG;
 
	//this will be used to send back the overall return status of this function
	//assume that initially the function will fail
	$result=NULL;
 
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	
	//save the returned value
	$result1 = executeQuery($query);
 
	//check for errors
	if( NULL === $result1 )
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "result after executing processOrder({$id},{$amount}) Line".__LINE__.": ".$MYSQL_ERROR . " - " . $MYSQL_ERRNO;
	}
	else//query succeeded
	{
		// Retrieve the query data and compute
		$row = mysql_fetch_array($result1);
		$paid = $row['paid_prj'] + $amount;
		$due = $row['due_prj'] - $amount;
		$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
		// Update the database
		$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
 
		//save the returned value. If this succeeds, the return value will the
		//the total number of updated records
		$result = executeQuery($query2);
		
		//check for errors
		if(NULL===$result)
		{
			if($DEBUG_MODE) "result after execQuery('{$query2}') Line:" . __LINE__ ."; ".$DEBUG_MSG .= $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
		}
	}
return $result;
}
 
// Step 0. Record the transaction
ob_start();
echo date("D M j G:i:s T Y") . "\n";
print_r($_SERVER);
print_r($_POST);
$body = ob_get_clean();
file_put_contents("logs/IPN.txt", $body, FILE_APPEND);
 
// Step 1. Verify IPN with PayPal
$result = verifyIPN($_POST);
if($DEBUG_MODE) $DEBUG_MSG .= "verifyIPN() returned: " . $result;
if ($result == 0)
{
	$subject = "FAKE IPN RECEIVED";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
else if ($result != 1)
{
	$subject = "Unable to validate IPN";
	$body = "If this payment notification is valid it will need to be manually processed\n $result\n $body";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" . 
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 1.5. Check payment status
if($DEBUG_MODE) $DEBUG_MSG .= "payment_status: ".$_POST['payment_status'];
switch ($_POST['payment_status'])
{
	case "Completed":
		paymentCompletedThankYou($_POST['payer_email']);
		break;
	case "Pending":
		paymentPendingThankYou($_POST['payer_email']);
		break;
	default:
		$body = "Hi, an IPN was received that was neither a complete payment nor a pending payment. Please contact us to confirm this transaction against our records.";
		$body .= $post;
		$subject = "IPN Received";
		$address = "admin@emarketbuilders.com";
		$headers = 
			"From: admin@emarketbuilders.com\r\n" . 
			"Reply-To: donotreply@emarketbuilders.com\r\n" . 
			"X-Mailer: PHP/" . phpversion();
		mail($address, $subject, $body, $headers);
		exit;
}
 
// Step 2. Confirm product information
$result = confirmProduct($_POST['item_number'], $_POST['item_name'], $_POST['mc_gross']);
if($DEBUG_MODE) $DEBUG_MSG .= "confirmProducts() returned " . $result;
if ($result == false)
{
	$subject = "Product Name/ID/Price Error";
	$address = "admin@emarketbuilders.com";
	$headers = 
		"From: admin@emarketbuilders.com\r\n" . 
		"Reply-To: donotreply@emarketbuilders.com\r\n" .
		"X-Mailer: PHP/" . phpversion();
	mail($address, $subject, $body, $headers);
	exit;
}
 
// Step 3. Process the order
$result = processOrder($_POST['item_number'], $_POST['mc_gross']);
 
echo "processOrder() returned:" . $result;
 
if($DEBUG_MODE){
	$yourEmail='you@yourcompany.com';
	mail($yourEmail, 'Program Trace', $DEBUG_MSG, 'From: admin@emarketbuilders.com\r\nTo:'.$yourEmail);
}
exit; 
?>
                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:
323:
324:
325:
326:
327:
328:
329:
330:
331:
332:
333:
334:
335:
336:
337:
338:
339:
340:

function processOrder($id, $amount)
{
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	insertQuery($query);
 
	// Retrieve the query data and compute
	$row = mysql_fetch_array($result1);
	$paid = $row['paid_prj'] + $amount;
	$due = $row['due_prj'] - $amount;
	$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
	// Update the database
	$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
	insertQuery($query2);
	exit;
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:

function processOrder($id, $amount)
{
	global $MYSQL_ERRNO, $MYSQL_ERROR,$DEBUG_MODE,$DEBUG_MSG;
 
	//this will be used to send back the overall return status of this function
	//assume that initially the function will fail
	$result=NULL;
 
	// Make the inputs safe from SQL injection hacking
	$id = mysql_real_escape_string($id);
	$amount = mysql_real_escape_string($amount);
 
	// Query for the data
	$query = "SELECT * FROM projects WHERE `id_prj` = $id";
	
	//save the returned value
	$result1 = executeQuery($query);
 
	//check for errors
	if( NULL === $result1 )
	{
		if($DEBUG_MODE) $DEBUG_MSG .= "result after executing processOrder({$id},{$amount}) Line".__LINE__.": ".$MYSQL_ERROR . " - " . $MYSQL_ERRNO;
	}
	else//query succeeded
	{
		// Retrieve the query data and compute
		$row = mysql_fetch_array($result1);
		$paid = $row['paid_prj'] + $amount;
		$due = $row['due_prj'] - $amount;
		$notes = $row['notes_prj'] . "A payment of $" . number_format($amount, 2) . " was made on " . date('l, F j, Y') . " at " . date('g:i A T') . ". ";
 
		// Update the database
		$query2 = "UPDATE projects SET `paid_prj` = '$paid', `due_prj` = '$due', `notes_prj` = '$notes' WHERE `id_prj` = $id LIMIT 1";
 
		//save the returned value. If this succeeds, the return value will the
		//the total number of updated records
		$result = executeQuery($query2);
		
		//check for errors
		if(NULL===$result)
		{
			if($DEBUG_MODE) "result after execQuery('{$query2}') Line:" . __LINE__ ."; ".$DEBUG_MSG .= $MYSQL_ERROR . "<br/>" . $MYSQL_ERRNO;
		}
	}
return $result;
}

                                              

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46: