CB Paid Subscriptions

Around mid-May, Paypal started subitely ignoring the rm=2 parameter (behaving like rm=0) for payments requiring a secure return by POST and not just GET with long URL potentially disclosing private information.

This undocumented change is a bug on Paypal.com side.

The Paypal.com documentation still states that rm=2 should return to site with a POST and not a GET:
https://developer.paypal.com/docs/paypal-payments-standard/integration-guide/Appx-websitestandard-htmlvariables/

This breaks the return page, that displays "INVALID" instead of the Thank you message, as it is not treated as a valid PDT return, because it is lacking the POST part and returning private information that a PDT with rm=2 should not return.