django-paypal
django-paypal copied to clipboard
Disabled CSRF protection for IPN view
trafficstars
As of Django version 1.2 the CSRF protection is enabled by default. To make the IPN view work I had to disable the CSRF protection with the @csrf_exempt decorator .
I also had to make this change and was about to submit my own pull request when I saw there is one already open. Seems to be a common problem: http://stackoverflow.com/questions/2580375/ipn-delivery-failed-http-error-code-403-forbidden
Therefore, for what it's worth, I support this request.
You may want to have a look at the fork of dcramer https://github.com/dcramer/django-paypal It is much more up-to-date.
Thanks, Anvio