Stripe Webhook Debugger for PHP

Fix Stripe webhook signature verification failures.

Paste the raw event body, Stripe-Signature header, endpoint secret, and error message to validate the exact inputs before changing production webhook code.

Diagnostic scope: rule-based checks for the most common PHP webhook signature mistakes. No Stripe account connection required.

Signature guide Raw body guide Secret guide CLI secret guide WordPress guide Timestamp guide

What this checks: raw body presence, JSON event shape, `Stripe-Signature` format, timestamp clues, `whsec_` endpoint secret, old replayed events, and common PHP `constructEvent()` errors.

Secret safety: use a test-mode or redacted `whsec_` value. Do not paste production signing secrets into public tools. This app does not intentionally store submissions, but form data still passes through the site request path and may appear in hosting/server logs.