<?php
namespace Pn\Controller;
use Think\Controller\RestController;
class PayController extends RestController{
    public function __construct(){
        import('Vendor.WePay.WeEncryption');
        import('Vendor.WePay.Curl');
    }
    public function Payment(){
        $arr['appid'] = $_POST['appid'];//應用id
        $arr['userdid'] = $_POST['userdid'];//登入使用者id
        $arr['paytype'] = $_POST['paytype'];//支付方式
        $arr['productid'] = $_POST['productid'];//商品id
        $arr['time'] = $_POST['time'];
        $sign = $_POST['sign'];//安全驗證sign
        $vsign = strrank($arr);//簽名加密
        
        if($vsign!=$sign){
            $return['respCode'] = 1001;
            $return['msg'] = "簽名錯誤";
            $this -> response($return,'json');//返回資料
            exit();
        }else{
            switch ($_POST["paytype"]){
                case 1://支付寶
                    $data["signdata"] = $this->alipay();
                    echo json_encode($data);
                break;
                case 2://微信支付
                    $data = $this->wechatpay($_POST['appid'],$_POST['userdid'],$_POST['productid']);
                    echo $data;
                break;
                default:
                $return["respCode"] = "error"; 
                $return['msg'] = "支付方式錯誤";
                $this -> response($return,'json');//返回資料
                exit();
            }
        }
    }
    /**
     * 微信APP客戶端支付
     */
    public function wechatpay($appid,$userdid,$productid){
       $WeEncryption = new \WeEncryption();	//例項化傳輸類；
       switch ($productid){
           case 1://季付商品（￥100）
               $body = "陪你季付VIP";//商品描述
               $total_fee = "100.00";//總金額
           break;
           case 2://月付商品（￥50）
               $body = "陪你月付VIP";//商品描述
               $total_fee = "50.00";//總金額
           break;
       }
       $out_trade_no = date("YmdHis").rand(10,100);//商戶訂單號
       $spbill_create_ip = getclientip();//終端IP

       $data = array(
           'body'				=>	$body,
           'out_trade_no'		=>	$out_trade_no,
           'total_fee'			=>	$total_fee,
           'spbill_create_ip'	=>	$spbill_create_ip,
       );
       
       $encpt = $WeEncryption::getInstance();	//例項化簽名類
       $url = "http://xxxx.com/Pay/wx_notify_verify";
       $encpt->setNotifyUrl($url);			//設定非同步通知地址
       
       $curl = new \Curl();				//例項化傳輸類；
       $xml_data = $encpt->sendRequest($curl, $data);		//傳送請求

       $postObj = $encpt->xmlToObject($xml_data);			//解析返回資料
       if ($postObj === false) {
           echo 'FAIL';
           exit;
       }
       if ($postObj->return_code == 'FAIL') {
           echo $postObj->return_msg;
       } else {
           $resignData = array(
               'appid'			=>	$postObj->appid,
               'partnerid'		=>	$postObj->mch_id,
               'prepayid'		=>	$postObj->prepay_id,
               'noncestr'		=>	$postObj->nonce_str,
               'timestamp'		=>	time(),
               'package'	=>	'Sign=WXPay'
           );
           $sign = $encpt->getClientPay($resignData);
           $resignData['sign'] = $sign;
           return  json_encode($resignData);
       }
    }
    /**
     * 微信App支付回撥
     */
    public function wx_notify_verify(){
        $WeEncryption = new \WeEncryption();	//例項化傳輸類；
        $encpt = $WeEncryption::getInstance();
        $obj = $encpt->getNotifyData();
        if ($obj === false) {
            exit;
        }
        if ($obj) {
            $data = array(
                'appid'				=>	$obj->appid,
                'mch_id'			=>	$obj->mch_id,
                'nonce_str'			=>	$obj->nonce_str,
                'result_code'		=>	$obj->result_code,
                'openid'			=>	$obj->openid,
                'trade_type'		=>	$obj->trade_type,
                'bank_type'			=>	$obj->bank_type,
                'total_fee'			=>	$obj->total_fee,
                'cash_fee'			=>	$obj->cash_fee,
                'transaction_id'	=>	$obj->transaction_id,
                'out_trade_no'		=>	$obj->out_trade_no,
                'time_end'			=>	$obj->time_end
            );
            $sign = $encpt->getSign($data);
            if ($sign == $obj->sign) {//驗籤通過
                $reply = "<xml>
					<return_code><![CDATA[SUCCESS]]></return_code>
					<return_msg><![CDATA[OK]]></return_msg>
				</xml>";
                echo $reply;
                exit;
            }else{
                $reply = "<xml>
					<return_code><![CDATA[FAIL]]></return_code>
					<return_msg><![CDATA[NO]]></return_msg>
				</xml>";
                echo $reply;
                exit;
            }
        }
    }
    
    /**
     * https://doc.open.alipay.com/doc2/detail.htm?spm=a219a.7629140.0.0.NgdeQA&treeId=59&articleId=103663&docType=1
     * 服務端生成app支付使用的引數以及簽名
     * @param $params <Array>
     * @return <Array>
    */
    public function alipay(){ 

        $ali = array(
          'service' => 'mobile.securitypay.pay',
          'partner' => 'xxxx',
          '_input_charset' => 'utf-8',
          'sign_type' => 'RSA',
          'sign' => '',
          'notify_url' => 'http://xxxxxxxx.com/Pay/alipay_notify_url',//回撥地址
          'out_trade_no' => date("YmdHis").rand(10,100),//商戶網站唯一訂單號
          'subject' => '測試',//商品名稱
          'payment_type' => 1,//支付型別
          'seller_id' => '
 
[email protected]',//支付寶賬號
          'total_fee' => '0.01',//總金額
          'body' => 'Iphone6 16G',//商品詳情
        );
        
        $ali = self::argSort($ali);
        $str = '';
        
        foreach($ali as $key=>$val){
            if($key == 'sign_type' || $key == 'sign'){
                continue;
            }else{
                if($str == ''){
                    $str = $key.'='.'"'.$val.'"';
                }else{
                    $str = $str.'&'.$key.'='.'"'.$val.'"';
                }
            }
        }        
                               
        $sign = urlencode(self::sign($str));
        $str = $str.'&sign='.'"'.$sign.'"'.'&sign_type='.'"'.$ali['sign_type'].'"';//傳給支付寶介面的資料
        return $str;
    }
    
    /**
     * 準備簽名引數
     */
    public function argSort($para) {
        ksort($para);
        reset($para);
        return $para;
    }
    
   /**
     * 生成請求引數的簽名
     * @param $params <Array>
     * @return <String>
     *
   */
   public function sign($data) {
        //讀取私鑰檔案
        $priKey = file_get_contents('./Public/key/rsa_private_key.pem');//私鑰檔案路徑
        //轉換為openssl金鑰，必須是沒有經過pkcs8轉換的私鑰
        $res = openssl_get_privatekey($priKey);
        //呼叫openssl內建簽名方法，生成簽名$sign
        openssl_sign($data, $sign, $res);
        //釋放資源
        openssl_free_key($res);
        //base64編碼
        $sign = base64_encode($sign);
        return $sign;
    }
    
   /**
     * 支付寶回撥地址
    */
    public function alipay_notify_url(){

        $orderpay = M("orderpay");
        $async = empty($_GET);
        $data = $async ? $_POST : $_GET;
  
        if (empty($data)) {
            return FALSE;
        }

        $signValid = $this->verifyParameters($data, $data["sign"]);//驗籤
        $notify_id = isset($data['notify_id']) ? $data['notify_id'] : NULL;
        
        //獲取支付寶遠端伺服器ATN結果（驗證是否是支付寶發來的訊息）
        $responseTxt = 'true';
        if (!empty($notify_id)) {
            $responseTxt = $this->verifyFromServer($notify_id);
        }

        if($signValid && preg_match("/true$/i", $responseTxt)){//驗證成功
            if($_POST['trade_status'] == 'TRADE_FINISHED'){
                
               $_POST["createdatetime"] = time();
               
               if($orderpay->create()){
                    $orderpay->add();
                    echo "success";
               }else{
                   echo "fail";//驗證失敗
               }
            }
            else if ($_POST['trade_status'] == 'TRADE_SUCCESS') {
                $_POST["createdatetime"] = time();
                if($orderpay->create()){
                    $orderpay->add();
                    echo "success";
                }else{
                    echo "fail";//驗證失敗
                }
            }
        }else{
            echo "fail";//驗證失敗
        }
    }
    /**
     * 將剩下引數進行url_decode, 然後進行字典排序，組成字串，得到待簽名字串
     * @param unknown $params
     * @param unknown $sign
     * @return boolean
     */
    function verifyParameters($params, $sign) {
        
        $public_key_path = './Public/key/alipay_public_key.pem';//公鑰（合作伙伴）

        $params = $this->filterSignParameter($params);
        ksort($params);
        reset($params);
    
        $content = urldecode(http_build_query($params));
       
        return $this->rsaVerify($content, $public_key_path, $sign);

    }
    /**
     * 過濾引數,去除sign/sign_type引數
     * @param $params
     * @return <Array>
     */
    function filterSignParameter($params) {
        $result = array();
        foreach ($params as $key => $value) {
            if ($key != 'sign' && $key != 'sign_type' && $value) {
                $result[$key] = $value;
            }
        }
        return $result;
    }
    /**
     * RSA驗籤,注意驗籤的公鑰是支付寶的公鑰,不是自己生成的rsa公鑰,可以在淘寶的demo中獲得
     * @param $data string 待簽名資料
     * @param $ali_public_key_path string 支付寶的公鑰檔案路徑
     * @param $sign string 要校對的的簽名結果
     * @return <Boolean> 驗證結果
     * @throws Exception
     */
    function rsaVerify($data, $ali_public_key_path, $sign) {
        $pubKey = file_get_contents($ali_public_key_path);
        $res = openssl_get_publickey($pubKey);
        if(!$res){
            throw new \Exception('公鑰格式錯誤');
        }
        $result = (bool)openssl_verify($data, base64_decode($sign), $res);
        openssl_free_key($res);
        return $result;
    }
    function verifyFromServer($notify_id) {
        $transport = "http";
        $partner = "xxxxxxxxxxx";
        $cacert = "./Public/key/cacert.pem";
        $transport = strtolower(trim($transport));
        $partner = trim($partner);
        $veryfy_url = "http://notify.alipay.com/trade/notify_query.do?partner=$partner¬ify_id=$notify_id";
        $curl = curl_init($veryfy_url);
        curl_setopt($curl, CURLOPT_HEADER, 0); // 過濾HTTP頭
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);//SSL證書認證
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//嚴格認證
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);// 顯示輸出結果
        curl_setopt($curl, CURLOPT_CAINFO, $cacert);//證書地址
        $responseText = curl_exec($curl);
        // var_dump( curl_error($curl) );//如果執行curl過程中出現異常，可開啟此開關，以便檢視異常內容
        curl_close($curl);
        return $responseText;
    }
 

      /**格式化公鑰
    * $pubKey PKCS#1格式的公鑰串
    * return pem格式公鑰， 可以儲存為.pem檔案
    */
   function formatPubKey($pubKey) {
       $fKey = "-----BEGIN PUBLIC KEY-----\n";
       $len = strlen($pubKey);
       for($i = 0; $i < $len; ) {
           $fKey = $fKey . substr($pubKey, $i, 64) . "\n";
           $i += 64;
       }
       $fKey .= "-----END PUBLIC KEY-----";
       return $fKey;
   }
}
 

問題諮詢QQ1370373713http://blog.csdn.net/apensu/article/details/46945193