We will be upgrading to the latest version of Matukio shortly (after our busy season ends next month). We are currently on version 6.1.5 and are having an issue with the return_url that is getting generated for PayPal processing.

This may have been updated in later versions, but wanted to make you aware if it has not been changed.

Code: com_matukio\views\paymentplatform\tmpl\default.php
Date: 2017-03-11
Line 68
$link = JRoute::_($bplink, true, -1);

The -1 option forces the URL to be generate with "http" regardless if there is a correct certificate for the site.

For us, when the user competes their purchase with PayPal standard, they can use the button "Return to merchant" to go back to our website. But they are given a warning that the site is insecure.

I could make an update to us "1" rather than "-1" to force the "https" url to be generated. However, that would not be a good global fix.

Using 0 gave me an interesting result, it did not display the domain information at all. I'm not sure if that's an issue with our Joomla version - 3.7?

Here are the tests that I ran on my dev server (non-ssl site). The last entry seems to give a more "universal" solution. Again, this may have already been addressed in the updates that you have made.

$link = JRoute::_($bplink, true, -1); - forces http
<input type="hidden" name="return" value="http://localhost/events/upcoming-events/booking?uuid=d160c6a4dc794b6e9b1760b704d3e051" />

Updated link to $link = JRoute::_($bplink, true, 1); - forces https
<input type="hidden" name="return" value="https://localhost/events/upcoming-events/booking?uuid=06da2ad09a994b3a972822773453d774" />

Updated link to $link = JRoute::_($bplink, true, 0); - truncates the first part of the URL
<input type="hidden" name="return" value="/events/upcoming-events/booking?uuid=bea7981429044129ad453536a4bd80f8" />

Updated link to $link = JRoute::_($bplink); - truncates the first part of the URL
<input type="hidden" name="return" value="/events/upcoming-events/booking?uuid=f998b194408044f089c7178a60b58e55" />

Think this is the best solution
Updated link to $link = JURI::base() . substr(JRoute::_($bplink), strlen(JURI::base(true)) + 1);
<input type="hidden" name="return" value="http://localhost/events/upcoming-events/booking?uuid=e9a30850324345199da0f74a3f626b3f" />

If you have any thoughts, please let me know.