[Plugin: WP Event Ticketing] Paypal error message "Security header is not valid"

Did you ever get a response to this query? I’m running into the same problem.

I have the same problem. If you got a response or figured it out on your own, I’d appreciate a lead on the fix!
Thanks.

OK, if wp event ticketing is set to “Sandbox for testing” in the Settings area, PayPal will return this error “Security header is not valid”. When I change the setting to “Live”, the PayPal connection works.

Of course, this makes it kind of hard to test…

Hi Pamela, I never heard back from anyone of 9Seeds (the developers), but I resolved the issue by changing the setting from “Sandbox” to “Live” just like you did. We are now able to sell tickets, but never were able to test without selling. Hope that helps.

Sorry I was slow to respond.

Here’s what the developers told me (and I did get it all straightened out, so it helped):

That error is usually a problem with the Paypal API credentials. Can you verify that you have completed the steps listed here? https://cms.paypal.com/us/cgi-bin/?cmd=_render-content&content_ID=developer/e_howto_api_ECAPICredentials

Also, there are different credentials for Sandbox mode (for testing) and Live mode. If you try to use the Sandbox credentials while running live, you might see this error.

Those steps to receive the PayPal API credentials were followed. Thanks for sending the link, though. The site is working now, though we were never able to test it in Sandbox mode.

I never saw where you would obtain the “Sandbox credentials.” My client set up the API credentials themselves. Is this an option they would have seen during that process. I’ve read through the PayPal instructions multiple times and don’t remember a difference being mentioned.

I found a place for Sandbox Credentials here: https://developer.paypal.com/webapps/developer/applications/

But the credentials have different labels than the WP EVENT TICKETING SETTINGS WINDOW.
Endpoint api.sandbox.paypal.com
Client ID AYWb9hBOSmkzWPUV….agz-loOGqCPNaNxrOk6qKWrlZj4ghbVTWE89v3kF
Secret EHQxpxBKBQYber95e7….6Gqteb2znF8lbo5HyZIv8t9tl59nogS6ABtl3j

I pasted secret into password, and client ID into API signature and Endpoint in Username but it still returned the Security Header error. It doesn’t look like WP Event Ticketing is really ready to test using the Sandbox. It would be great. Playing live is more nerve wracking than playing in the sandbox.