title: Field format error: Secure Token Not found
body: <p>This does not make sense.</p>
  
  <p>I am using Paypal Payments Advance, using the hosted checkout pages.</p>
  
  <p>I am following this in setting it up:</p>
  
  <p><a href="https://developer.paypal.com/webapps/developer/docs/classic/payflow/gs_ppa_hosted_pages/" rel="nofollow">https://developer.paypal.com/webapps/developer/docs/classic/payflow/gs_ppa_hosted_pages/</a></p>
  
  <p>I use cURL to grab a Secure Token (RESULT=0, RESPMSG=Approved, I get back SECURETOKEN AND SECURETOKENID as expected)</p>
  
  <p>I Use my paypal manager login, and user (user I created, with API_FULL_TRANSACTIONS).  I verify PARTNER, VENDOR, USER, PWD are all correct, TRXTYPE = S, CREATESECURETOKEN = Y, and pass a 36 length random hash.  Transaction Process Mode is Test.</p>
  
  <p>When I go to test (cURL URL grabbing secure token from https:// pilot-payflowlink.paypal.com) and then posting to https:// pilot-payflowlink.paypal.com  <strong>(yes, there is a space between / and p due to me not being able to post links)</strong></p>
  
  <p>I get the following error:</p>
  
  <pre><code>[RESPMSG] =&gt; Invalid merchant information: 10002-You do not have permissions to make this API call
  [RESULT] =&gt; 5
  </code></pre>
  
  <p>Not sure what this is.  According to Paypal Manager, it says:  Status: Your account is currently in ACTIVE status. You can run both live and test transactions.</p>
  
  <p>When using the live checkout, using a real credit card, posting to: https: //payflowlink.paypal.com <strong>(again, I know the space is there)</strong></p>
  
  <p>I get this response (I took out my information and replaced it with j or whatever):</p>
  
  <pre><code>Array
  (
      [TYPE] =&gt; S
      [STATE] =&gt; NV
      [BILLTOEMAIL] =&gt; j
      [BILLTOLASTNAME] =&gt; j
      [BILLTONAME] =&gt; j j
      [LASTNAME] =&gt; j
      [PNREF] =&gt; E09P2DF86729
      [TENDER] =&gt; CC
      [EMAIL] =&gt; j
      [PHONE] =&gt; 5555555555
      [METHOD] =&gt; CC
      [BILLTOFIRSTNAME] =&gt; j
      [SHIPTOCOUNTRY] =&gt; US
      [AMT] =&gt; 0.01
      [ZIP] =&gt; 99999
      [BILLTOCOUNTRY] =&gt; US
      [RESPMSG] =&gt; Field format error: Secure Token Not found
      [COUNTRY] =&gt; US
      [BILLTOZIP] =&gt; j
      [BILLTOCITY] =&gt; j
      [TAX] =&gt; 0.00
      [BILLTOSTATE] =&gt; CA
      [FIRSTNAME] =&gt; j
      [AVSDATA] =&gt; XXN
      [SECURETOKEN] =&gt; QmJyCnGu4X0CEOpHv0eJCGAFV
      [SECURETOKENID] =&gt; 1c370788b7cfd3eb23847421918249e8
      [CITY] =&gt; j
      [BILLTOPHONE] =&gt; 9999999999
      [NAME] =&gt; j j
      [BILLTOSTREET] =&gt; j
      [COUNTRYTOSHIP] =&gt; US
      [RESULT] =&gt; 7
      [ADDRESS] =&gt; j
  )
  </code></pre>
  
  <p>Says Secure Token Not Found, despite, the SECURETOKEN being RIGHT THERE in the response (QmJyCnGu4X0CEOpHv0eJCGAFV).  I have verified that the SECURETOKEN is being sent prior to posting to paypal.</p>
  
  <p>I am not sure where to go from here.</p>
  
  <p><strong>Edit:  In more testing, if I go through my checkout process, and INSTEAD of directly entering in a Credit Card, I login with one of my sandbox paypal accounts, and pay with a credit card (the same credit card I use to directly pay), it seems to work fine, and i get a RESULT=0.  but the problem seems to lie if I directly pay with a Credit/Debit Card directly on the page.</strong></p>