Yes, you are right. Here is the suspect code:

read (STDIN, $query, $ENV{'CONTENT_LENGTH'});
$query .= '&cmd=_notify-validate';
# post back to PayPal system to validate
use LWP::UserAgent;
$ua = new LWP::UserAgent;
$req = new HTTP::Request 'POST','http://www.paypal.com/cgi-bin/webscr'
+;
$req->content_type('application/x-www-form-urlencoded');
$req->content($query);
$res = $ua->request($req);
[download]

Everything else works OK. I am sending the buyer an email, the seller an email, and writing a record to a sales header file, and record(s) to a sales detail file. All of that works. The log records no errors. Thanks for your help! T.Davis