Verify Paypal Php

職業

分類

支付

Verification Procedure

1. Code Analysis

• Extract PayPal initialization and API call patterns
• Identify SDK version constraints and dependencies
• Map webhook implementation details

2. Security Domain Checks

Review security-checklist.md for:

• Credential and token storage (no hardcoding)
• API signature validation
• HTTPS enforcement
• Input sanitization and validation
• Error message handling (sensitive data leakage)

3. Authentication & API Integration

Verify:

• OAuth 2.0 flow correctness
• Token refresh mechanisms
• Client ID/Secret handling
• Permission scopes

4. Error Handling & Logging

Check:

• Exception handling for PayPal API responses
• Proper error logging (secure, no sensitive data)
• Retry logic and timeout configuration
• Fallback mechanisms

5. Data Validation

Validate:

• Input sanitization before API calls
• Response validation from PayPal
• Type checking and null safety
• Business logic validation (amounts, currencies, etc.)

6. PHP & SDK Compatibility

Verify:

• PHP version compatibility with SDK requirements
• Required PHP extensions (curl, json, etc.)
• SDK version up-to-date
• Deprecated methods usage

7. Webhook Implementation

Review webhook-checklist.md:

• Webhook endpoint HTTPS
• Signature verification
• Event ID tracking (prevent duplicates)
• Proper response codes

Output Report Format

Generate a .md report with:

# PayPal Implementation Audit Report
- Date: [generated date]
- File(s) analyzed: [list of files]
- PHP Version: [detected or provided]
- SDK Version: [detected]

## Critical Issues (Must Fix)
[List items blocking production deployment]

## High Priority (Fix Before Launch)
[Items that impact security or core functionality]

## Medium Priority (Improve)
[Best-practice recommendations]

## Low Priority (Nice to Have)
[Code quality and maintainability]

## Summary & Recommendations
[Key takeaways and action plan]

Related References

• security-checklist.md — Detailed security verification points
• webhook-checklist.md — Webhook implementation validation
• php-compatibility.md — PHP version and extension requirements
• best-practices.md — PayPal SDK best practices

Example Invocations

/verify-paypal-php src/PayPal/PaymentHandler.php

/verify-paypal-php /app/payments/

Note: This skill requires internet access to fetch PayPal documentation. All checks are performed against the latest official PayPal PHP Server SDK standards.