Are you not using the "Payment Data Transfer" or "Instant Payment Notification" available with your paypal merchant account?
The information should be getting passed back to you via a TX token, then you contact paypal with the TX token and your PDT code, it confirms that the payment was made and then sends the orderno, id no etc to you.
All you have to do is store the TX token ID to make sure that you check it each time the page loads, to make sure that someone doesnt keep hitting refresh.
Also, you should probably be saving the order no, amount, currency and your paypal ID into a DB and pulling it out when you get redirected to your site.
Also, you should save the session and cookie info into a DB as it all gets wiped when they make the payment at paypal so you have to re set up the session when they are returned.
Now, Im not saying that infogle is wrong, or that his product wont work, but what I would ask is,
Would I put my faith in something that he is giving away?
Who does a better job at payment security infogle or paypal?
Will infogle guarantee you against loss of earnings or theft
Does infogle have a team of developers working around the clock updating systems and source code to ensure it is safe from hack attacks.
Fact is my friend it took me 3 days to link to paypal with PDT and IPN, mainly because I have neve done it before, and paypal had sod all helpful information on it. But I know that now it is done, it is safe, and I know I ahve done it right because the user will never see the item ID's, amounts, currency, seller account info etc etc.
Why were you not considering using the paypal system in the first place.
If all you have done is click edit in your paypal account, and put in a response redirct page to send the client after payment is made, note that the client will be send to your site regardless if the payment was successful or declined, and without IPN you have no idea if the payment was accepted or not.
+ again, no offense to infogle, but his datacryp looks like it needs new browsers and Java script for it to work.
What happens when you get people on old computers, old browsers or high security settings visit your site, they have to upgrade their pc or not buy from you?
Ps, infogle, this would be a good time to give a free plug to your system because I would be keen to hear more.