Well, apart from other answers, by all means please consider to use CGI;. Most likely this will shrink the size of the script you need to parse the IPN query / response and make it more robust.

Happy new year to all monks!

-lem, but some call me fokat