微信支付jsapi并写入数据库--回调函数（notify.php）的使用

心已赠人 2022-12-08 01:49 148阅读 0赞

调用链接  
http://2019.weiqingdao.cn/apps/enter/web/wei\_ceshi/00ceshi/008/zhifu.php?goods\_id=45&num=2

<?php
    header('Content-type:text/html; Charset=utf-8');
    session_start();
    require './php/connect.php';
    $params = array(
        // 系统参数
        "mchid" => '',          //微信支付商户号 PartnerID 通过微信支付商户资料审核后邮件发送
        "appid" => '',  //微信支付申请对应的公众号的APPID
        "appKey" => '',   //微信支付申请对应的公众号的APP Key
        "apiKey" => '',   //https://pay.weixin.qq.com 帐户设置-安全设置-API安全-API密钥-设置API密钥
        // 订单信息
        "outTradeNo" => date("YmdHis") . str_pad(mt_rand(0, 99999), 5, 0, STR_PAD_LEFT), //你自己的商品订单号
        "payAmount" => 0.01, //付款金额，单位:元
        "orderName" => 'zhifu',   //订单标题
        "notifyUrl" => '.链接地址./notify.php',     //付款成功后的回调地址(不要有问号)
        "payTime" => time(),    //付款时间
        // sql信息
        'goods_id' => 45, //商品id
        'num' => 1, //数量
        'user_id' => 0 //购买人id
    );
    // 更改参数，也可以直接使用定义的，不过实际上根据商品信息和传递的参数生成数据
    $params['goods_id'] = isset($_GET['goods_id']) ? $_GET['goods_id'] : 45;
    $params['num'] = isset($_GET['num']) ? $_GET['num'] : 2;
    $params['user_id'] = $pdo->query("SELECT id FROM a_user WHERE phone='{ $_SESSION['phone']}' and password='{ $_SESSION['password']}'")->fetch(PDO::FETCH_ASSOC)['id'];
    $params['user_id'] = $params['user_id'] ? $params['user_id'] : 0;
    $params['payTime'] = date("Y-m-d H:i:s", $params['payTime']);
    $paramsres = $pdo->query("SELECT price,title from a_book_info where info_id={ $params['goods_id']}")->fetch(PDO::FETCH_ASSOC);
    $params['payAmount'] = $paramsres['price'] * $params['num'];
    $params['orderName'] = $paramsres['title'];
    print_r('<pre>', $params);
    
    //①、获取用户openid
    $wxPay = new WxpayService($params["mchid"], $params["appid"], $params["appKey"], $params["apiKey"]);
    $openId = $wxPay->GetOpenid();      //获取openid
    if (!$openId) exit('获取openid失败');
    
    //②、统一下单
    $jsApiParameters = $wxPay->createJsBizPackage($openId, $params['payAmount'], $params['outTradeNo'], $params['orderName'], $params['notifyUrl'], $params['payTime']); //下单
    $jsApiParameters = json_encode($jsApiParameters);
    
    // ③下单sql 
    $sql = "INSERT INTO `a_buy`(open_id , `payAmount`,outTradeNo, `orderName`, `status`,info_id,xd_id,payTime ) VALUES ('$openId', { $params['payAmount']},'{ $params['outTradeNo']}','{ $params['orderName']}','待付款',{ $params['goods_id']},{ $params['user_id']},'{ $params['payTime']}')";
    $res = $pdo->exec($sql);
    var_dump($res);
    var_dump($sql);
    
    
    ?>
    
    
    
    <html>
    
    <head>
        <meta charset="utf-8" />
        <meta name="viewport" content="width=device-width, initial-scale=1" />
        <title>微信支付样例-支付</title>
        <script type="text/javascript">
            //调用微信JS api 支付
            function jsApiCall() { 
                WeixinJSBridge.invoke(
                    'getBrandWCPayRequest',
                    <?php echo $jsApiParameters; ?>,
                    function(res) { 
                        WeixinJSBridge.log(res.err_msg);
                        if (res.err_msg == 'get_brand_wcpay_request:ok') { 
                            alert("支付成功");
                            window.history.back()
                        } else { 
                            alert('支付失败：' + res.err_code + res.err_desc + res.err_msg);
                        }
                    }
                );
            }
            if (typeof WeixinJSBridge == "undefined") { 
                if (document.addEventListener) { 
                    document.addEventListener('WeixinJSBridgeReady', jsApiCall, false);
                } else if (document.attachEvent) { 
                    document.attachEvent('WeixinJSBridgeReady', jsApiCall);
                    document.attachEvent('onWeixinJSBridgeReady', jsApiCall);
                }
            } else { 
                jsApiCall();
            }
        </script>
    </head>
    
    
    
    </html>
    <?php
    class WxpayService
    { 
        protected $mchid;
        protected $appid;
        protected $appKey;
        protected $apiKey;
        public $data = null;
        public function __construct($mchid, $appid, $appKey, $key)
        { 
            $this->mchid = $mchid; //https://pay.weixin.qq.com 产品中心-开发配置-商户号
            $this->appid = $appid; //微信支付申请对应的公众号的APPID
            $this->appKey = $appKey; //微信支付申请对应的公众号的APP Key
            $this->apiKey = $key;   //https://pay.weixin.qq.com 帐户设置-安全设置-API安全-API密钥-设置API密钥
        }
        /** * 通过跳转获取用户的openid，跳转流程如下： * 1、设置自己需要调回的url及其其他参数，跳转到微信服务器https://open.weixin.qq.com/connect/oauth2/authorize * 2、微信服务处理完成之后会跳转回用户redirect_uri地址，此时会带上一些参数，如：code * @return 用户的openid */
        public function GetOpenid()
        { 
            //通过code获得openid
            if (!isset($_GET['code'])) { 
                //触发微信返回code码
                $scheme = $_SERVER['HTTPS'] == 'on' ? 'https://' : 'http://';
                $uri = $_SERVER['PHP_SELF'] . $_SERVER['QUERY_STRING'];
                if ($_SERVER['REQUEST_URI']) $uri = $_SERVER['REQUEST_URI'];
                $baseUrl = urlencode($scheme . $_SERVER['HTTP_HOST'] . $uri); // 例如：https://www.baidu.com/s?ie=UTF-8&wd=$_SERVER%5B%27QUERY_STRING%27%5D
                $url = $this->__CreateOauthUrlForCode($baseUrl);
                Header("Location: $url");
                exit();
            } else { 
                //获取code码，以获取openid
                $code = $_GET['code'];
                $openid = $this->getOpenidFromMp($code);
                return $openid;
            }
        }
        /** * 通过code从工作平台获取openid机器access_token * @param string $code 微信跳转回来带上的code * @return openid */
        public function GetOpenidFromMp($code)
        { 
            $url = $this->__CreateOauthUrlForOpenid($code);
            $res = self::curlGet($url);
            //取出openid
            $data = json_decode($res, true);
            $this->data = $data;
            $openid = $data['openid'];
            return $openid;
        }
        /** * 构造获取open和access_toke的url地址 * @param string $code，微信跳转带回的code * @return 请求的url */
        private function __CreateOauthUrlForOpenid($code)
        { 
            $urlObj["appid"] = $this->appid;
            $urlObj["secret"] = $this->appKey;
            $urlObj["code"] = $code;
            $urlObj["grant_type"] = "authorization_code";
            $bizString = $this->ToUrlParams($urlObj);
            return "https://api.weixin.qq.com/sns/oauth2/access_token?" . $bizString;
        }
        /** * 构造获取code的url连接 * @param string $redirectUrl 微信服务器回跳的url，需要url编码 * @return 返回构造好的url */
        private function __CreateOauthUrlForCode($redirectUrl)
        { 
            $urlObj["appid"] = $this->appid;
            $urlObj["redirect_uri"] = "$redirectUrl";
            $urlObj["response_type"] = "code";
            $urlObj["scope"] = "snsapi_base";
            $urlObj["state"] = "STATE" . "#wechat_redirect";
            $bizString = $this->ToUrlParams($urlObj);
            return "https://open.weixin.qq.com/connect/oauth2/authorize?" . $bizString;
        }
        /** * 拼接签名字符串 * @param array $urlObj * @return 返回已经拼接好的字符串 */
        private function ToUrlParams($urlObj)
        { 
            $buff = "";
            foreach ($urlObj as $k => $v) { 
                if ($k != "sign") $buff .= $k . "=" . $v . "&";
            }
            $buff = trim($buff, "&");
            return $buff;
        }
        /** * 统一下单 * @param string $openid 调用【网页授权获取用户信息】接口获取到用户在该公众号下的Openid * @param float $totalFee 收款总费用 单位元 * @param string $outTradeNo 唯一的订单号 * @param string $orderName 订单名称 * @param string $notifyUrl 支付结果通知url 不要有问号 * @param string $timestamp 支付时间 * @return string */
        public function createJsBizPackage($openid, $totalFee, $outTradeNo, $orderName, $notifyUrl, $timestamp)
        { 
            $config = array(
                'mch_id' => $this->mchid,
                'appid' => $this->appid,
                'key' => $this->apiKey,
            );
            //$orderName = iconv('GBK','UTF-8',$orderName);
            $unified = array(
                'appid' => $config['appid'],
                'attach' => 'pay',             //商家数据包，原样返回，如果填写中文，请注意转换为utf-8
                'body' => $orderName,
                'mch_id' => $config['mch_id'],
                'nonce_str' => self::createNonceStr(),
                'notify_url' => $notifyUrl,
                'openid' => $openid,            //rade_type=JSAPI，此参数必传
                'out_trade_no' => $outTradeNo,
                'spbill_create_ip' => '127.0.0.1',
                'total_fee' => intval($totalFee * 100),       //单位 转为分
                'trade_type' => 'JSAPI',
            );
            $unified['sign'] = self::getSign($unified, $config['key']);
            $responseXml = self::curlPost('https://api.mch.weixin.qq.com/pay/unifiedorder', self::arrayToXml($unified));
            //禁止引用外部xml实体
            libxml_disable_entity_loader(true);
            $unifiedOrder = simplexml_load_string($responseXml, 'SimpleXMLElement', LIBXML_NOCDATA);
            if ($unifiedOrder === false) { 
                die('parse xml error');
            }
            if ($unifiedOrder->return_code != 'SUCCESS') { 
                die($unifiedOrder->return_msg);
            }
            if ($unifiedOrder->result_code != 'SUCCESS') { 
                die($unifiedOrder->err_code);
            }
            $arr = array(
                "appId" => $config['appid'],
                "timeStamp" => "$timestamp",        //这里是字符串的时间戳，不是int，所以需加引号
                "nonceStr" => self::createNonceStr(),
                "package" => "prepay_id=" . $unifiedOrder->prepay_id,
                "signType" => 'MD5',
            );
            $arr['paySign'] = self::getSign($arr, $config['key']);
            return $arr;
        }
        public static function curlGet($url = '', $options = array())
        { 
            $ch = curl_init($url);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_TIMEOUT, 30);
            if (!empty($options)) { 
                curl_setopt_array($ch, $options);
            }
            //https请求 不验证证书和host
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
            $data = curl_exec($ch);
            curl_close($ch);
            return $data;
        }
        public static function curlPost($url = '', $postData = '', $options = array())
        { 
            if (is_array($postData)) { 
                $postData = http_build_query($postData);
            }
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $url);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
            curl_setopt($ch, CURLOPT_TIMEOUT, 30); //设置cURL允许执行的最长秒数
            if (!empty($options)) { 
                curl_setopt_array($ch, $options);
            }
            //https请求 不验证证书和host
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
            $data = curl_exec($ch);
            curl_close($ch);
            return $data;
        }
        public static function createNonceStr($length = 16)
        { 
            $chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
            $str = '';
            for ($i = 0; $i < $length; $i++) { 
                $str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
            }
            return $str;
        }
        public static function arrayToXml($arr)
        { 
            $xml = "<xml>";
            foreach ($arr as $key => $val) { 
                if (is_numeric($val)) { 
                    $xml .= "<" . $key . ">" . $val . "</" . $key . ">";
                } else
                    $xml .= "<" . $key . "><![CDATA[" . $val . "]]></" . $key . ">";
            }
            $xml .= "</xml>";
            return $xml;
        }
        public static function getSign($params, $key)
        { 
            ksort($params, SORT_STRING);
            $unSignParaString = self::formatQueryParaMap($params, false);
            $signStr = strtoupper(md5($unSignParaString . "&key=" . $key));
            return $signStr;
        }
        protected static function formatQueryParaMap($paraMap, $urlEncode = false)
        { 
            $buff = "";
            ksort($paraMap);
            foreach ($paraMap as $k => $v) { 
                if (null != $v && "null" != $v) { 
                    if ($urlEncode) { 
                        $v = urlencode($v);
                    }
                    $buff .= $k . "=" . $v . "&";
                }
            }
            $reqPar = '';
            if (strlen($buff) > 0) { 
                $reqPar = substr($buff, 0, strlen($buff) - 1);
            }
            return $reqPar;
        }
    }

<?php
    require './php/connect.php';
    
    $info = file_get_contents("php://input");
    $order = xmlToArray($info);
    $trade['order'] = $order['out_trade_no'];   /* 微信分配的小程序ID,即订单号 */
    $trade["total_fee"] = $order["total_fee"];    /* 金额 */
    $trade["sign"] = $order["sign"];    /* 签名 */
    // https://pay.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=9_7&index=8
    
    
    // // 3，针对信息做处理，
    // // 3.1根据返回的信息在生成签名防止数据泄漏导致出现“假通知”，造成资金损失。
    $newSign = verifySign($order);
    // // 3.2根据订单id去数据库或者换成查找订单消息
    $data = $pdo->query("SELECT payAmount,status from a_buy WHERE outTradeNo='{ $trade['order']}'")->fetch(PDO::FETCH_ASSOC); //需要注意单位为分
    
    if (($data['payAmount'] * 100) == $trade['total_fee'] && $newSign == $trade["sign"]) { 
        if ($data['status'] == '待付款') { 
            // 更改订单状态
            $pdo->exec("UPDATE a_buy set status='待发货' WHERE outTradeNo='{ $trade['order']}'");
            logInfo($info); //写入日志
        }
        return
            '<xml> <return_code><![CDATA[SUCCESS]]></return_code> <return_msg><![CDATA[OK]]></return_msg> </xml>';
        var_dump($data);
    } else { 
        // 失败的请求
    }
    
    
    
    // 将xml装换为数组
    function xmlToArray($data)
    { 
        return  (array)simplexml_load_string($data, 'SimpleXMLElement', LIBXML_NOCDATA);
    }
    // 将付款成功后的数据写入log 日志文件
    function logInfo($info, $fileName = 'log')
    { 
        $debugInfo = debug_backtrace();
        $message = date("Y-m-d H-i-s") . PHP_EOL . $info . PHP_EOL;;
        $message .= '[' . $debugInfo[0]['file'] . ']' . 'line' . $debugInfo[0]["line"] . PHP_EOL;
        file_put_contents($fileName . '-' . date("Y-m-d") . '.log', $message, FILE_APPEND);
    }
    // 判断返回的签名和根据数据生成的数据判断是否相同，防止数据泄漏导致出现“假通知”，造成资金损失。
    function verifySign($params, $apikey = "c17FZND q71Tt9")
    { 
        ksort($params);
        $string = "";
        foreach ($params as $k => $v) { 
    
            if ($k != "sign" && $v != "" && !is_array($v)) { 
                $string .= $k . "=" . $v . "&";
            }
        }
        $string = $string . "key=" . $apikey;
        $string = md5($string);
        $result = strtoupper($string);
        return $result;
    }