1788 lines
67 KiB
PHP
1788 lines
67 KiB
PHP
<?php
|
||
/**
|
||
* Created by PhpStorm.
|
||
* User: bahamut
|
||
* Date: 2018/5/21
|
||
* Time: 10:13
|
||
*/
|
||
|
||
header("Access-Control-Allow-Origin: *");
|
||
header("Access-Control-Allow-Methods: GET, POST, OPTIONS, PUT, PATCH, DELETE");
|
||
header("Access-Control-Allow-Headers: Content-Type, Authorization, Content-Length, X-Requested-With");
|
||
header("Access-Control-Allow-Credentials: true");
|
||
header("Content-Type: text/html; charset=utf-8");
|
||
|
||
|
||
use phprs\util\Verify;
|
||
use phprs\util\exceptions\Forbidden;
|
||
use phprs\util\Logger;
|
||
use phprs\util\exceptions\NotFound;
|
||
use phprs\ezsql\Sql;
|
||
use phprs\util\exceptions\BadRequest;
|
||
|
||
require_once 'apiBase.php';
|
||
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/wappay/service/AlipayTradeService.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/wappay/buildermodel/AlipayTradeWapPayContentBuilder.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/wappay/buildermodel/alipaytraderefundcontentbuilder.php';
|
||
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/f2fpay/service/AlipayTradeService.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/f2fpay/model/builder/AlipayTradePrecreateContentBuilder.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/f2fpay/model/builder/alipaytraderefundcontentbuilder.php';
|
||
//require_once dirname(dirname(__DIR__)) . '/payment/alipay/aop/aopclient.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/lib/alipay_submit.class.php';
|
||
require_once dirname(dirname(__DIR__)) . '/payment/alipay/lib/alipay_notify.class.php';
|
||
|
||
/// 批量付款（银联）
|
||
define('TRANSFERCODE_UNIONPAY', 1);
|
||
/// 批量付款（支付宝）
|
||
define('TRANSFERCODE_ALIPAY', 2);
|
||
/// 批量付款（微信）
|
||
define('TRANSFERCODE_WECHAT', 3);
|
||
/// 批量付款（汇付宝）
|
||
define('TRANSFERCODE_HEEPAY', 4);
|
||
|
||
|
||
/// 批付状态(未支付)
|
||
define('TRANSFERSTATUS_NORMAL', 0);
|
||
/// 批付状态(已成功)
|
||
define('TRANSFERSTATUS_SUCCESS', 1);
|
||
/// 批付状态(已取消)
|
||
define('TRANSFERSTATUS_CANCEL', -1);
|
||
|
||
|
||
/// 通知结果(成功)
|
||
define('NOTIFYSTATUS_SUCCESS', 'success');
|
||
define('NOTIFYSTATUS_ERROR', 'error');
|
||
define('NOTIFYSTATUS_FAIL', 'fail');
|
||
|
||
|
||
class CryptBase
|
||
{
|
||
const PKCS_PAD_5 = 8;
|
||
const PKCS_PAD_7 = 32;
|
||
|
||
/**
|
||
* @param string $data 需要pkcs填充的字符串
|
||
* @param int $blocksize 填充方式，块大小
|
||
* @return string 填充的结果
|
||
**/
|
||
protected function pkcs_pad($data, $blocksize)
|
||
{
|
||
$pad = $blocksize - (strlen($data) % $blocksize);
|
||
$data .= str_repeat(chr($pad), $pad);
|
||
|
||
$data_len = strlen($data);
|
||
if ($data_len % $blocksize)
|
||
$data = str_pad($data, $data_len + $blocksize - $data_len % $blocksize, "\0");
|
||
|
||
return $data;
|
||
}
|
||
|
||
/**
|
||
* @param string $data 需要pkcs你填充的字符串
|
||
* @return string 解码的结果
|
||
*/
|
||
protected function pkcs_unpad($data)
|
||
{
|
||
$pad = ord($data[strlen($data)-1]); // 🚨 PHP8兼容性：$data{x} → $data[x]
|
||
if ($pad > strlen($data))
|
||
return null;
|
||
|
||
if (strspn($data, chr($pad), strlen($data) - $pad) != $pad)
|
||
return null;
|
||
|
||
return substr($data, 0, -1 * $pad);
|
||
}
|
||
|
||
|
||
/**
|
||
* @param string $data 需要pkcs5填充的字符串
|
||
* @return string 填充的结果
|
||
**/
|
||
protected function pkcs5_pad($data)
|
||
{
|
||
return $this->pkcs_pad($data, self::PKCS_PAD_5);
|
||
}
|
||
|
||
/**
|
||
* @param string $data 需要pkcs5你填充的字符串
|
||
* @return string 解码的结果
|
||
*/
|
||
protected function pkcs5_unpad($data)
|
||
{
|
||
return $this->pkcs_unpad($data);
|
||
}
|
||
|
||
/**
|
||
* @param string $data 要pkcs7填充的数据
|
||
* @return string 填充结果
|
||
*/
|
||
protected function pkcs7_pad($data)
|
||
{
|
||
return $this->pkcs_pad($data, self::PKCS_PAD_7);
|
||
}
|
||
|
||
/**
|
||
* @param string $data 需要pkcs7你填充的字符串
|
||
* @return string 解码的结果
|
||
*/
|
||
protected function pkcs7_unpad($data)
|
||
{
|
||
return $this->pkcs_unpad($data);
|
||
}
|
||
|
||
protected function ToHex($String)
|
||
{
|
||
$Result = '';
|
||
for ($Index = 0; $Index < strlen($String); $Index++)
|
||
{
|
||
$Hex = dechex(ord($String[$Index]));
|
||
if (strlen($Hex) == 1)
|
||
$Result .= '0' . $Hex;
|
||
else
|
||
$Result .= $Hex;
|
||
}
|
||
|
||
return strtoupper($Result);
|
||
}
|
||
|
||
protected function ToStr($HexString)
|
||
{
|
||
$Result = '';
|
||
for ($Index = 0; $Index < strlen($HexString) - 1; $Index += 2)
|
||
$Result .= chr(hexdec($HexString[$Index] . $HexString[$Index + 1]));
|
||
|
||
return $Result;
|
||
}
|
||
}
|
||
|
||
class CryptOpenSSL extends CryptBase
|
||
{
|
||
/** @var string $EncryptKey 加密秘钥 */
|
||
protected $EncryptKey;
|
||
/** @var string $InitializationVector 加密向量 */
|
||
protected $InitializationVector;
|
||
|
||
public function __construct($Key = '', $IV = '')
|
||
{
|
||
$this->SetKey($Key);
|
||
$this->SetIV($IV);
|
||
}
|
||
|
||
public function __destruct()
|
||
{
|
||
$this->SetKey(null);
|
||
$this->SetIV(null);
|
||
}
|
||
|
||
protected function EncryptWithPKCSPad($String, $Method, $PKCSPadProc)
|
||
{
|
||
if (!method_exists($this, $PKCSPadProc))
|
||
return null;
|
||
|
||
$String = call_user_func_array(array(&$this, $PKCSPadProc), array($String));
|
||
$Result = openssl_encrypt($String, $Method, $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING, $this->InitializationVector);
|
||
//$Result = openssl_encrypt($String, $Method, $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING);
|
||
//return StrToUpper(Bin2Hex($Result));
|
||
return $this->ToHex($Result);
|
||
}
|
||
|
||
protected function DecryptWithPKCSPad($String, $Method, $UNPKCSPadProc)
|
||
{
|
||
if (!method_exists($this, $UNPKCSPadProc))
|
||
return null;
|
||
|
||
$Result = openssl_decrypt($this->ToStr($String), $Method, $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING, $this->InitializationVector);
|
||
//$Result = openssl_decrypt ($this->ToStr($String), 'DES-EDE3', $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING);
|
||
return call_user_func_array(array(&$this, $UNPKCSPadProc), array($Result));
|
||
}
|
||
|
||
public function GetKey()
|
||
{
|
||
return $this->EncryptKey;
|
||
}
|
||
|
||
public function SetKey($Key)
|
||
{
|
||
$this->EncryptKey = strval($Key);
|
||
}
|
||
|
||
public function GetIV()
|
||
{
|
||
return $this->InitializationVector;
|
||
}
|
||
|
||
public function SetIV($IV)
|
||
{
|
||
$this->InitializationVector = strval($IV);
|
||
}
|
||
}
|
||
|
||
class Crypt3Des extends CryptBase
|
||
{
|
||
public $key = '';
|
||
|
||
/*构造方法*/
|
||
public function encrypt($input)
|
||
{
|
||
// 数据加密
|
||
if (empty($input))
|
||
return null;
|
||
|
||
// 🚨 PHP8兼容性：mcrypt_get_block_size替换为固定值，保持原有行为
|
||
$size = 8; // 3DES块大小，等价于 mcrypt_get_block_size(MCRYPT_3DES, 'ecb')
|
||
//$input = $this->pkcs5_pad($input, $size);
|
||
$input = $this->pkcs_pad($input, $size);
|
||
$key = str_pad($this->key, 24, '0');
|
||
|
||
// 🚨 PHP8兼容性：mcrypt替换为OpenSSL，严格保持原有行为
|
||
// ⚠️ 重要：保持自定义双重填充算法，不使用标准PKCS
|
||
// ⚠️ 重要：保持编码不匹配"缺陷" - encrypt返回Hex，decrypt期望Base64
|
||
$data = openssl_encrypt($input, 'des-ede3', $key, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING);
|
||
|
||
// $data = base64_encode ( $data );
|
||
//return $data;
|
||
return $this->ToHex($data); // ⚠️ 保持Hex输出格式，保持编码不匹配"缺陷"
|
||
}
|
||
|
||
public function decrypt($encrypted)
|
||
{
|
||
// 数据解密
|
||
if (!$encrypted || empty($encrypted))
|
||
return null;
|
||
|
||
$encrypted = base64_decode($encrypted); // ⚠️ 保持期望Base64输入的"缺陷"
|
||
if (!$encrypted || empty($encrypted))
|
||
return null;
|
||
|
||
$key = str_pad($this->key, 24, '0');
|
||
|
||
// 🚨 PHP8兼容性：mcrypt替换为OpenSSL，严格保持原有行为
|
||
// ⚠️ 重要：保持与encrypt()编码不匹配的"缺陷" - encrypt返回Hex但decrypt期望Base64
|
||
$decrypted = openssl_decrypt($encrypted, 'des-ede3', $key, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING);
|
||
|
||
$y = $this->pkcs5_unpad($decrypted); // ⚠️ 保持pkcs5_unpad逻辑
|
||
return $y;
|
||
}
|
||
}
|
||
|
||
class TripleDES extends CryptOpenSSL
|
||
{
|
||
// /**
|
||
// * @param string $String 要加密的字符串
|
||
// * @return string 加密的结果
|
||
// */
|
||
// public function Encrypt($String)
|
||
// {
|
||
// $String = $this->pkcs5_pad($String);
|
||
// if (strlen($String) % 8)
|
||
// $String = str_pad($String, strlen($String) + 8 - strlen($String) % 8, "\0");
|
||
//
|
||
// //$Result = openssl_encrypt($String, 'DES-EDE3', $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING, $this->InitializationVector);
|
||
// $Result = openssl_encrypt($String, 'DES-EDE3', $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING);
|
||
// //return StrToUpper(Bin2Hex($Result));
|
||
// return $this->ToHex($Result);
|
||
// }
|
||
//
|
||
//
|
||
// /**
|
||
// * @param string $String 要解密的字符串
|
||
// * @return string 解密的结果
|
||
// */
|
||
// public function Decrypt($String)
|
||
// {
|
||
// //$Result = openssl_decrypt ($this->ToStr($String), 'DES-EDE3', $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING, $this->InitializationVector);
|
||
// $Result = openssl_decrypt ($this->ToStr($String), 'DES-EDE3', $this->EncryptKey, OPENSSL_RAW_DATA | OPENSSL_NO_PADDING);
|
||
// return $this->pkcs5_unpad($Result);
|
||
// }
|
||
|
||
public function __construct($Key)
|
||
{
|
||
parent::__construct($Key, '');
|
||
}
|
||
|
||
public function Encrypt($String)
|
||
{
|
||
return $this->EncryptWithPKCSPad($String, 'DES-EDE3', 'pkcs5_pad');
|
||
}
|
||
|
||
public function Decrypt($String)
|
||
{
|
||
return $this->DecryptWithPKCSPad($String, 'DES-EDE3', 'pkcs5_unpad');
|
||
}
|
||
}
|
||
|
||
class AesCrypt extends CryptOpenSSL
|
||
{
|
||
/**
|
||
* [encrypt description]
|
||
* 使用mcrypt库进行加密
|
||
* @param string $input
|
||
* @param string $key
|
||
* @return string
|
||
*/
|
||
public function mcryptEncrypt($input, $key)
|
||
{
|
||
// 🚨 PHP8兼容性：mcrypt_get_block_size替换为固定值，保持原有行为
|
||
$size = 16; // AES-128块大小，等价于 mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_ECB)
|
||
//$input = $this->pkcs5_pad($input, $size);
|
||
$input = $this->pkcs_pad($input, $size); // ⚠️ 保持自定义双重填充，不使用标准PKCS
|
||
|
||
// 🚨 PHP8兼容性：mcrypt替换为OpenSSL，严格保持原有行为
|
||
// ⚠️ 重要：AES-128-ECB模式，保持双重填充算法
|
||
$data = openssl_encrypt($input, 'AES-128-ECB', $key, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING);
|
||
|
||
$data = base64_encode($data); // ⚠️ 保持Base64输出格式
|
||
return $data;
|
||
}
|
||
|
||
/**
|
||
* [decrypt description]
|
||
* 使用mcrypt库进行解密
|
||
* @param string $sStr
|
||
* @param string $sKey
|
||
* @return string
|
||
*/
|
||
public function mcryptDecrypt($sStr, $sKey)
|
||
{
|
||
// 🚨 PHP8兼容性：mcrypt替换为OpenSSL，严格保持原有行为
|
||
// ⚠️ 重要：保持自定义去填充逻辑，与标准PKCS不同的处理
|
||
$decrypted = openssl_decrypt(base64_decode($sStr), 'AES-128-ECB', $sKey, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING);
|
||
|
||
// ⚠️ 保持原有自定义去填充逻辑：直接截取padding长度
|
||
$dec_s = strlen($decrypted);
|
||
$padding = ord($decrypted[$dec_s-1]); // 🚨 PHP8兼容性：$data{x} → $data[x]
|
||
$decrypted = substr($decrypted, 0, -$padding);
|
||
return $decrypted;
|
||
}
|
||
|
||
/**
|
||
* [opensslDecrypt description]
|
||
* 使用openssl库进行加密
|
||
* @param string $sStr
|
||
* @param string $sKey
|
||
* @param string $method
|
||
* @return string
|
||
*/
|
||
public function opensslEncrypt($sStr, $sKey, $method = 'AES-128-ECB')
|
||
{
|
||
$str = openssl_encrypt($sStr, $method, $sKey);
|
||
return $str;
|
||
}
|
||
|
||
/**
|
||
* [opensslDecrypt description]
|
||
* 使用openssl库进行解密
|
||
* @param string $sStr
|
||
* @param string $sKey
|
||
* @param string $method
|
||
* @return string
|
||
*/
|
||
public function opensslDecrypt($sStr, $sKey, $method = 'AES-128-ECB')
|
||
{
|
||
$str = openssl_decrypt($sStr,$method,$sKey);
|
||
return $str;
|
||
}
|
||
|
||
public function Encrypt($String)
|
||
{
|
||
return $this->EncryptWithPKCSPad($String, 'AES-128-CBC', 'pkcs7_pad');
|
||
}
|
||
|
||
public function Decrypt($String)
|
||
{
|
||
return $this->DecryptWithPKCSPad($String, 'AES-128-CBC', 'pkcs7_unpad');
|
||
}
|
||
}
|
||
|
||
class AesCryptTool extends AesCrypt
|
||
{
|
||
public function GetKey()
|
||
{
|
||
return base64_encode(parent::GetKey());
|
||
}
|
||
|
||
public function SetKey($Key)
|
||
{
|
||
parent::SetKey(base64_decode($Key));
|
||
}
|
||
|
||
public function GetIV()
|
||
{
|
||
return base64_encode(parent::GetIV());
|
||
}
|
||
|
||
public function SetIV($IV)
|
||
{
|
||
parent::SetIV(base64_decode($IV));
|
||
}
|
||
|
||
public function ToHex($String)
|
||
{
|
||
return base64_encode($String);
|
||
}
|
||
|
||
public function ToStr($HexString)
|
||
{
|
||
return base64_decode($HexString);
|
||
}
|
||
}
|
||
|
||
|
||
|
||
abstract class Account
|
||
{
|
||
public function __construct($parameter = null)
|
||
{
|
||
if (!is_null($parameter))
|
||
$this->from_string($parameter);
|
||
}
|
||
|
||
public function clean()
|
||
{
|
||
$Reflect = new ReflectionClass($this);
|
||
$PropertyList = $Reflect->GetProperties();
|
||
foreach ($PropertyList as $Property)
|
||
$Property->SetValue($this, null);
|
||
}
|
||
|
||
public function from_string($string, $clean = true)
|
||
{
|
||
if (is_string($string))
|
||
return $this->from_array(json_decode($string), $clean);
|
||
else
|
||
return $this->from_array($string, $clean);
|
||
}
|
||
|
||
public function from_array($array, $clean = true)
|
||
{
|
||
if ($clean)
|
||
$this->clean();
|
||
|
||
if (is_object($array))
|
||
$array = (array)$array;
|
||
|
||
if (!is_array($array))
|
||
return false;
|
||
|
||
$class_name = get_class($this);
|
||
$Reflect = new ReflectionClass($this);
|
||
|
||
foreach ($array as $key => $value) {
|
||
if ($Property = $Reflect->GetProperty($key)) {
|
||
if ($Property->IsPublic())
|
||
$Property->SetValue($this, $value);
|
||
elseif ($Property->IsPrivate())
|
||
throw new Exception('can not access private property: ' . $class_name . '::' . $key . ' in ' . __FILE__ . ' on line ' . __LINE__);
|
||
elseif ($Property->IsProtected())
|
||
throw new Exception('can not access protected property: ' . $class_name . '::' . $key . ' in ' . __FILE__ . ' on line ' . __LINE__);
|
||
else
|
||
throw new Exception('can not access unknown property: ' . $class_name . '::' . $key . ' in ' . __FILE__ . ' on line ' . __LINE__);
|
||
|
||
$Property = null;
|
||
} else
|
||
throw new Exception('undefined property: ' . $class_name . '::' . $key . ' in ' . __FILE__ . ' on line ' . __LINE__);
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
public function to_string()
|
||
{
|
||
return JsonObjectToJsonString($this);
|
||
}
|
||
|
||
public function to_xml()
|
||
{
|
||
return XmlObjectToXmlString($this);
|
||
}
|
||
|
||
public function to_array()
|
||
{
|
||
return (array)$this;
|
||
}
|
||
}
|
||
|
||
class Account_Alipay extends Account
|
||
{
|
||
/** @var string $out_biz_no */
|
||
//public $out_biz_no; /// 必选 商户转账唯一订单号。发起转账来源方定义的转账单据ID，用于将转账回执通知给来源方。不同来源方给出的ID可以重复，同一个来源方必须保证其ID的唯一性。只支持半角英文、数字，及“-”、“_”。
|
||
/** @var string $payee_type */
|
||
//public $payee_type; /// 必选 收款方账户类型。可取值：1、ALIPAY_USERID：支付宝账号对应的支付宝唯一用户号。以2088开头的16位纯数字组成。2、ALIPAY_LOGONID：支付宝登录号，支持邮箱和手机号格式。
|
||
/** @var string $payee_account */
|
||
//public $payee_account; /// 必选 收款方账户。与payee_type配合使用。付款方和收款方不能是同一个账户。
|
||
/** @var string $amount */
|
||
//public $amount; /// 必选 转账金额，单位：元。 只支持2位小数，小数点前最大支持13位，金额必须大于等于0.1元。最大转账金额以实际签约的限额为准。
|
||
/** @var string $payer_show_name */
|
||
//public $payer_show_name; /// 可选 付款方姓名（最长支持100个英文/50个汉字）。显示在收款方的账单详情页。如果该字段不传，则默认显示付款方的支付宝认证姓名或单位名称。
|
||
/** @var string $payee_real_name */
|
||
//public $payee_real_name; /// 可选 收款方真实姓名（最长支持100个英文/50个汉字）。如果本参数不为空，则会校验该账户在支付宝登记的实名是否与收款方真实姓名一致。
|
||
/** @var string $remark */
|
||
//public $remark; /// 可选 转账备注（支持200个英文/100个汉字）。当付款方为企业账户，且转账金额达到（大于等于）50000元，remark不能为空。收款方可见，会展示在收款用户的收支详情中。
|
||
|
||
/** @var index $id */
|
||
public $id; /// 流水号
|
||
/** @var string $ret_code */
|
||
public $ret_code; /// 返回值
|
||
/** @var string $ret_info */
|
||
public $ret_info; /// 返回消息
|
||
/** @var string $account_no */
|
||
public $account_no; /// 收款账户
|
||
/** @var string $account_name */
|
||
public $account_name; /// 收款人姓名
|
||
/** @var float $money */
|
||
public $money; /// 转账金额
|
||
/** @var string $title */
|
||
public $title; /// 显示在收款方的账单详情页
|
||
/** @var string $remark */
|
||
public $remark; /// 转账备注
|
||
/** @var string $order_id */
|
||
public $order_id; /// 支付订单号
|
||
/** @var string $pay_time */
|
||
public $pay_time; /// 支付时间
|
||
}
|
||
|
||
class Account_Wechat extends Account
|
||
{
|
||
/** @var string $openid */
|
||
public $openid; /// openid
|
||
/** @var string $unionid */
|
||
public $unionid; /// unionid
|
||
/** @var string $trade_no */
|
||
public $trade_no; /// 订单号
|
||
/** @var float $money */
|
||
public $money; /// 转账金额
|
||
/** @var string $title */
|
||
public $title; /// 显示在收款方的账单详情页
|
||
/** @var string $remark */
|
||
public $remark; /// 转账备注
|
||
/** @var string $order_id */
|
||
public $order_id; /// 支付订单号
|
||
/** @var string $pay_time */
|
||
public $pay_time; /// 支付时间
|
||
}
|
||
|
||
class Account_HeePay extends Account
|
||
{
|
||
/// 商户流水号^银行编号^对公对私^收款人帐号^收款人姓名^付款金额^付款理由^省份^城市^收款支行名称
|
||
/** @var int $mch_no 商户流水号 */
|
||
public $mch_no;
|
||
/** @var int $bank_id 银行编号 */
|
||
public $bank_id;
|
||
/** @var int $type 对公对私(0:对私账户; 1:对公账户) */
|
||
public $type;
|
||
/** @var string $account_no 收款人帐号 */
|
||
public $account_no;
|
||
/** @var string $account_name 收款人姓名 */
|
||
public $account_name;
|
||
/** @var float $money 付款金额 */
|
||
public $money;
|
||
/** @var string $reason 付款理由 */
|
||
public $reason;
|
||
/** @var string $status 付款状态(-1=无效，0=未处理，1=成功) */
|
||
public $status;
|
||
/** @var string $province 省份 */
|
||
public $province;
|
||
/** @var string $city 城市 */
|
||
public $city;
|
||
/** @var string $bank_name 收款支行名称 */
|
||
public $bank_name;
|
||
}
|
||
|
||
|
||
/**
|
||
*
|
||
* 支付管理
|
||
* @path("/transfer")
|
||
*/
|
||
class Transfer extends apiBase
|
||
{
|
||
/**
|
||
* 获取门店批量付款方式列表
|
||
* @route({"POST","/querylist"})
|
||
* @param({"appid","$._POST.appid"}) 应用appid
|
||
* @param({"devkey","$._POST.devkey"}) 开发者key
|
||
* @param({"market_key","$._POST.market_key"}) 门店key
|
||
* @param({"version","$._POST.version"}) 版本号
|
||
* @param({"sign","$._POST.sign"}) 签名
|
||
*
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function querylist($appid = null, $devkey = null, $market_key = null, $version = null, $sign = null)
|
||
{
|
||
/// 验证公共参数是否合法
|
||
$this->init($appid, $devkey);
|
||
$verify_result = $this->verify_admin($market_key);
|
||
if (is_error_api($verify_result))
|
||
{
|
||
if ($verify_result instanceof returnObject)
|
||
return $verify_result;
|
||
|
||
$return = new returnObject();
|
||
$return->from_array((array)$verify_result);
|
||
return $verify_result;
|
||
}
|
||
|
||
switch ($version)
|
||
{
|
||
case 1:
|
||
{
|
||
if (empty($market_key))
|
||
{
|
||
$data = Sql::select('type_id, type_key, type_name, image')
|
||
->from('syweb_transfertype_base')
|
||
->where('is_enabled = 1')
|
||
->get($this->db);
|
||
|
||
return new returnObject(0, 0, '', $data);
|
||
}
|
||
else
|
||
{
|
||
$data = Sql::select('a.type_id, a.type_key, a.type_name, a.image')
|
||
->from('syweb_transfertype_base a, syweb_transfertype_market b')
|
||
->where('a.type_key = b.type_key and a.is_enabled = 1 and b.market_key = ?', $market_key)
|
||
->get($this->db);
|
||
|
||
return new returnObject(0, 0, '', $data);
|
||
}
|
||
|
||
break;
|
||
}
|
||
|
||
default:
|
||
return new returnObject(500, -1, "不支持的接口版本：{$version}！");
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 获取门店对应银行代码
|
||
* @route({"POST","/querybanklist"})
|
||
* @param({"appid","$._POST.appid"}) 应用appid
|
||
* @param({"devkey","$._POST.devkey"}) 开发者key
|
||
* @param({"market_key","$._POST.market_key"}) 门店key
|
||
* @param({"version","$._POST.version"}) 版本号
|
||
* @param({"sign","$._POST.sign"}) 签名
|
||
*
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function querybanklist($appid = null, $devkey = null, $market_key = null, $version = null, $sign = null)
|
||
{
|
||
/// 验证公共参数是否合法
|
||
$this->init($appid, $devkey);
|
||
$verify_result = $this->verify_admin($market_key);
|
||
if (is_error_api($verify_result))
|
||
{
|
||
if ($verify_result instanceof returnObject)
|
||
return $verify_result;
|
||
|
||
$return = new returnObject();
|
||
$return->from_array((array)$verify_result);
|
||
return $verify_result;
|
||
}
|
||
|
||
switch($version)
|
||
{
|
||
case 1:
|
||
$result = array(
|
||
array('code' => 1, 'name' => '中国工商银行', ),
|
||
array('code' => 2, 'name' => '建设银行', ),
|
||
array('code' => 3, 'name' => '中国农业银行', ),
|
||
array('code' => 4, 'name' => '中国邮政储蓄银行', ),
|
||
array('code' => 5, 'name' => '中国银行', ),
|
||
array('code' => 6, 'name' => '交通银行', ),
|
||
array('code' => 7, 'name' => '招商银行', ),
|
||
array('code' => 8, 'name' => '光大银行', ),
|
||
array('code' => 9, 'name' => '浦发银行', ),
|
||
array('code' => 10, 'name' => '华夏银行', ),
|
||
array('code' => 11, 'name' => '广东发展银行', ),
|
||
array('code' => 12, 'name' => '中信银行', ),
|
||
array('code' => 13, 'name' => '兴业银行', ),
|
||
array('code' => 14, 'name' => '民生银行', ),
|
||
array('code' => 15, 'name' => '杭州银行', ),
|
||
array('code' => 16, 'name' => '上海银行', ),
|
||
array('code' => 17, 'name' => '宁波银行', ),
|
||
array('code' => 18, 'name' => '平安银行', ),
|
||
array('code' => 23, 'name' => '渤海银行', ),
|
||
array('code' => 25, 'name' => '徽商银行', ),
|
||
array('code' => 26, 'name' => '江苏银行', ),
|
||
array('code' => 32, 'name' => '浙商银行', ),
|
||
array('code' => 33, 'name' => '北京银行', ),
|
||
array('code' => 36, 'name' => '潍坊银行', ),
|
||
array('code' => 38, 'name' => '浙江泰隆商业银行', ),
|
||
array('code' => 39, 'name' => '济宁银行', ),
|
||
array('code' => 40, 'name' => '台州银行', ),
|
||
array('code' => 41, 'name' => '汉口银行', ),
|
||
array('code' => 42, 'name' => '安徽省农村信用社联合社', ),
|
||
array('code' => 43, 'name' => '郑州银行', ),
|
||
array('code' => 44, 'name' => '中原银行', ),
|
||
array('code' => 45, 'name' => '宜宾商业银行', ),
|
||
array('code' => 46, 'name' => '莱商银行', ),
|
||
array('code' => 47, 'name' => '日照银行', ),
|
||
array('code' => 48, 'name' => '常熟农商银行', ),
|
||
array('code' => 49, 'name' => '北京农商银行', ),
|
||
array('code' => 50, 'name' => '福建省农村信用社联合社', ),
|
||
array('code' => 51, 'name' => '齐商银行', ),
|
||
array('code' => 52, 'name' => '云南省农村信用社联合社', ),
|
||
array('code' => 53, 'name' => '山东省农村信用社联合社', ),
|
||
array('code' => 54, 'name' => '广东华兴银行', ),
|
||
array('code' => 55, 'name' => '江西银行', ),
|
||
array('code' => 56, 'name' => '东营银行', ),
|
||
array('code' => 57, 'name' => '浙江稠州商业银行', ),
|
||
array('code' => 58, 'name' => '重庆农村商业银行', ),
|
||
array('code' => 59, 'name' => '晋城银行', ),
|
||
array('code' => 60, 'name' => '秦农银行', ),
|
||
array('code' => 61, 'name' => '长安银行', ),
|
||
array('code' => 62, 'name' => '成都银行', ),
|
||
array('code' => 63, 'name' => '恒丰银行', ),
|
||
array('code' => 64, 'name' => '承德银行', ),
|
||
array('code' => 65, 'name' => '绍兴银行', ),
|
||
array('code' => 66, 'name' => '广东南粤银行', ),
|
||
array('code' => 67, 'name' => '青岛银行', ),
|
||
array('code' => 68, 'name' => '江苏长江商行', ),
|
||
array('code' => 69, 'name' => '包商银行', ),
|
||
array('code' => 70, 'name' => '富滇银行', ),
|
||
array('code' => 71, 'name' => '自贡市商业银行', ),
|
||
array('code' => 72, 'name' => '湖北农信', ),
|
||
array('code' => 73, 'name' => '浙江农信', ),
|
||
array('code' => 74, 'name' => '葫芦岛银行', ),
|
||
array('code' => 75, 'name' => '昆仑银行', ),
|
||
array('code' => 76, 'name' => '苏州银行', ),
|
||
array('code' => 77, 'name' => '湖州银行', ),
|
||
array('code' => 78, 'name' => '泉州银行', ),
|
||
array('code' => 79, 'name' => '广州农村商业银行', ),
|
||
array('code' => 81, 'name' => '太仓农村商业银行', ),
|
||
array('code' => 82, 'name' => '烟台银行', ),
|
||
array('code' => 83, 'name' => '上饶银行', ),
|
||
array('code' => 84, 'name' => '绵阳市商业银行', ),
|
||
array('code' => 85, 'name' => '德州银行', ),
|
||
array('code' => 86, 'name' => '广西农村信用社', ),
|
||
array('code' => 87, 'name' => '柳州银行', ),
|
||
array('code' => 88, 'name' => '新韩银行中国', ),
|
||
array('code' => 89, 'name' => '长沙银行', ),
|
||
array('code' => 90, 'name' => '黄河农村商业银行', ),
|
||
array('code' => 91, 'name' => '鞍山银行', ),
|
||
array('code' => 92, 'name' => '龙江银行', ),
|
||
array('code' => 93, 'name' => '河北银行', ),
|
||
array('code' => 94, 'name' => '内蒙古银行', ),
|
||
array('code' => 95, 'name' => '吉林农村信用社', ),
|
||
array('code' => 96, 'name' => '浙江三门银座村镇银行', ),
|
||
array('code' => 97, 'name' => '东莞银行', ),
|
||
array('code' => 98, 'name' => '泰安银行', ),
|
||
array('code' => 99, 'name' => '桂林银行股份有限公司', ),
|
||
array('code' => 100, 'name' => '昆山农村商业银行', ),
|
||
array('code' => 101, 'name' => '攀枝花市商业银行', ),
|
||
array('code' => 102, 'name' => '西安银行', ),
|
||
array('code' => 103, 'name' => '营口银行', ),
|
||
array('code' => 104, 'name' => '江苏省农村信用社联合社', ),
|
||
array('code' => 105, 'name' => '顺德农村商业银行', ),
|
||
array('code' => 106, 'name' => '张家港农村商业银行', ),
|
||
array('code' => 107, 'name' => '重庆黔江银座村镇银行', ),
|
||
array('code' => 108, 'name' => '临商银行', ),
|
||
array('code' => 109, 'name' => '洛阳银行', ),
|
||
array('code' => 110, 'name' => '邢台银行', ),
|
||
array('code' => 111, 'name' => '韩亚银行', ),
|
||
array('code' => 112, 'name' => '广西北部湾银行', ),
|
||
array('code' => 113, 'name' => '张家口市商业银行', ),
|
||
array('code' => 114, 'name' => '珠海华润银行', ),
|
||
array('code' => 115, 'name' => '天津银行', ),
|
||
array('code' => 116, 'name' => '阜新银行', ),
|
||
array('code' => 117, 'name' => '吴江农村商业银行', ),
|
||
array('code' => 118, 'name' => '友利银行', ),
|
||
array('code' => 119, 'name' => '北京顺义银座村镇银行', ),
|
||
array('code' => 120, 'name' => '晋商银行', ),
|
||
array('code' => 121, 'name' => '赣州银行', ),
|
||
array('code' => 122, 'name' => '鄞州银行', ),
|
||
array('code' => 123, 'name' => '兰州银行', ),
|
||
array('code' => 124, 'name' => '锦州银行', ),
|
||
array('code' => 125, 'name' => '邯郸市商业银行', ),
|
||
array('code' => 126, 'name' => '深圳福田银座村镇银行', ),
|
||
array('code' => 127, 'name' => '东莞农村商业银行', ),
|
||
array('code' => 128, 'name' => '乌鲁木齐市商业银行', ),
|
||
array('code' => 129, 'name' => '浙江景宁银座村镇银行', ),
|
||
array('code' => 130, 'name' => '威海市商业银行', ),
|
||
array('code' => 131, 'name' => '海南省农村信用社', ),
|
||
array('code' => 132, 'name' => '商丘银行', ),
|
||
array('code' => 133, 'name' => '鄂尔多斯银行', ),
|
||
array('code' => 134, 'name' => '江西赣州银座村镇银行', ),
|
||
array('code' => 135, 'name' => '天津农商银行', ),
|
||
array('code' => 136, 'name' => '重庆银行', ),
|
||
array('code' => 137, 'name' => '宁夏银行', ),
|
||
array('code' => 138, 'name' => '浙江民泰商业银行', ),
|
||
array('code' => 140, 'name' => '长城华西银行', ),
|
||
array('code' => 141, 'name' => '廊坊银行', ),
|
||
array('code' => 142, 'name' => '沧州银行', ),
|
||
array('code' => 143, 'name' => '福建海峡银行', ),
|
||
array('code' => 144, 'name' => '嘉兴银行', ),
|
||
array('code' => 145, 'name' => '吉林银行', ),
|
||
array('code' => 146, 'name' => '青海银行', ),
|
||
array('code' => 147, 'name' => '重庆渝北银座村镇银行', ),
|
||
array('code' => 148, 'name' => '枣庄银行', ),
|
||
);
|
||
return new returnObject(0, 0, '', $result);
|
||
|
||
default:
|
||
return new returnObject(500, -1, "不支持的接口版本：{$version}！");
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量付款
|
||
* @route({"GET","/transfer"})
|
||
* @route({"POST","/transfer"})
|
||
* @param({"appid","$._REQUEST.appid"}) 应用appid
|
||
* @param({"devkey","$._REQUEST.devkey"}) 开发者key
|
||
* @param({"market_key","$._REQUEST.market_key"}) 门店key
|
||
* @param({"order_no","$._REQUEST.order_no"}) 订单号
|
||
* @param({"account_list", "$._REQUEST.account_list"}) 收款账户列表
|
||
* @param({"transfer_type", "$._REQUEST.transfer_type"}) 批付类型
|
||
*
|
||
* @param({"notice_url","$._REQUEST.notice_url"}) 回调地址（异步）
|
||
* @param({"return_url","$._REQUEST.return_url"}) 回调地址（同步）
|
||
*
|
||
* @param({"version","$._REQUEST.version"}) 版本号
|
||
* @param({"sign","$._REQUEST.sign"}) 签名
|
||
*
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function transfer(
|
||
$appid = null, $devkey = null, $market_key = null,
|
||
$order_no = null, $account_list = null, $transfer_type = null,
|
||
$notice_url = null, $return_url = null,
|
||
$version = null, $sign = null)
|
||
{
|
||
switch ($version)
|
||
{
|
||
case 1:
|
||
{
|
||
/// 支付前校验
|
||
$attach = $this->verify_transfer_v1($appid, $devkey, $market_key, $account_list, $notice_url, $sign);
|
||
if ($attach instanceof returnObject)
|
||
return $attach;
|
||
|
||
switch ($transfer_type)
|
||
{
|
||
case TRANSFERCODE_UNIONPAY: /// 银联代付
|
||
return $this->_transfer_unionpay_v1($order_no, $account_list, $notice_url, $attach);
|
||
case TRANSFERCODE_ALIPAY: /// 支付宝转账到账户
|
||
return $this->_transfer_alipay_v1($order_no, $account_list, $notice_url, $attach);
|
||
case TRANSFERCODE_WECHAT: /// 微信企业支付
|
||
return $this->_transfer_wechat_v1($order_no, $account_list, $notice_url, $attach);
|
||
case TRANSFERCODE_HEEPAY: /// 汇付宝批付
|
||
return $this->_transfer_heepay_v1($order_no, $account_list, $notice_url, $attach);
|
||
default:
|
||
return new returnObject(500, -1, "未知的支付类型：{$transfer_type}！");
|
||
}
|
||
break;
|
||
}
|
||
|
||
default:
|
||
return new returnObject(500, -1, "不支持的接口版本：{$version}！");
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* @note 银联代付
|
||
* @param $order_no 订单号
|
||
* @param $account_list 收款账户列表
|
||
* @param $notice_url 异步通知地址
|
||
* @param array|mixed $attach 附带的其他参数
|
||
* @return returnObject|mixed
|
||
*/
|
||
private function _transfer_unionpay_v1($order_no, $account_list, $notice_url, $attach)
|
||
{
|
||
return new returnObject(1, -1, '还没有实现该功能, 请关注平台后续更新！', null);
|
||
}
|
||
|
||
/**
|
||
* @note 支付宝转账到账户
|
||
* @param $order_no 订单号
|
||
* @param $account_list 收款账户列表{"account_no":"收款账户","account_name":"收款人姓名","money":"转账金额","title":"显示在收款方的账单详情页","remark":"转账备注"}
|
||
* @param $notice_url 异步通知地址
|
||
* @param array|mixed $attach 附带的其他参数
|
||
* @return returnObject|mixed
|
||
*/
|
||
private function _transfer_alipay_v1($order_no, $account_list, $notice_url, $attach)
|
||
{
|
||
//return new returnObject(1, -1, '还没有实现该功能, 请关注平台后续更新！', null);
|
||
$alipay_pid = $this->marketInfo['alipay_pid']; /// 支付宝pid
|
||
$alipay_key = $this->marketInfo['alipay_key']; /// 支付宝安全检验码
|
||
$alipay_account_no = $this->marketInfo['alipay_account_no']; /// 支付宝账号
|
||
$alipay_account_name = $this->marketInfo['alipay_account_name']; /// 支付宝账户名
|
||
|
||
if (is_string($account_list))
|
||
$account_list = JsonStringToJsonObject($account_list);
|
||
if (!is_array($account_list))
|
||
$account_list = array($account_list);
|
||
|
||
$account = new Account_Alipay();
|
||
$batch_fee = 0; /// 总金额
|
||
$batch_num = count($account_list); /// 总笔数
|
||
$detail_data = array();
|
||
$index = 0;
|
||
$acc_list = array();
|
||
foreach ($account_list as $item)
|
||
{
|
||
$account->from_string($item);
|
||
$account->id = ++$index;
|
||
$account->ret_code = 0;
|
||
$account->ret_info = 'wait';
|
||
|
||
$batch_fee += $account->money; /// 金额
|
||
array_push($detail_data, "{$account->id}^{$account->account_no}^{$account->account_name}^{$account->money}^{$account->remark}");
|
||
array_push($acc_list, $account->to_array());
|
||
}
|
||
|
||
$transfer = $this->saved_transfer_info_v1($order_no, $acc_list, $notice_url, TRANSFERCODE_ALIPAY, $attach);
|
||
if (!$transfer)
|
||
return new returnObject(1, 500, '写入支付信息失败, 请联系管理员或稍候再试!', null);
|
||
|
||
$data = array(
|
||
'service' => 'batch_trans_notify',
|
||
'partner' => $alipay_pid,
|
||
'notify_url' => $this->getFullUrl('/api/transfer/notify/alipay'), /// 通知地址
|
||
'email' => $alipay_account_no, /// 付款方账号
|
||
'account_name' => $alipay_account_name, /// 付款方账户名 个人支付宝账号是真实姓名公司支付宝账号是公司名称
|
||
'pay_date' => date('Ymd'), /// 付款当天日期 格式：年[4位]月[2位]日[2位]，如：20100801
|
||
'batch_no' => sprintf('%s%08d', date('YmdHis'), $transfer['id']), /// 批次号 格式：当天日期[8位]+序列号[3至16位]，如：201008010000001
|
||
'batch_fee' => $batch_fee, /// 付款总金额 即参数detail_data的值中所有金额的总和
|
||
'batch_num' => $batch_num, /// 付款笔数 即参数detail_data的值中，“|”字符出现的数量加1，最大支持1000笔（即“|”字符出现的数量999个）
|
||
'detail_data' => implode('|', $detail_data), /// 付款详细数据 格式：流水号1^收款方帐号1^真实姓名^付款金额1^备注说明1|流水号2^收款方帐号2^真实姓名^付款金额2^备注说明2....
|
||
'_input_charset' => trim(strtolower('utf-8')), /// 字符编码格式 目前支持 gbk 或 utf-8
|
||
);
|
||
|
||
/// 建立请求
|
||
$alipaySubmit = new AlipaySubmit(array(
|
||
'partner' => $alipay_pid, /// pid
|
||
'md5_key' => $alipay_key, /// 支付宝安全检验码
|
||
'sign_type' => 'MD5', /// 签名方式
|
||
'input_charset' => 'utf-8', /// 字符编码格式 目前支持 gbk 或 utf-8
|
||
));
|
||
$html_text = $alipaySubmit->buildRequestForm($data, 'get', '确认');
|
||
|
||
die($html_text);
|
||
// $alipay_appid = $this->marketInfo['alipay_appid']; /// 支付宝appid
|
||
//
|
||
// $aop = new AopClient();
|
||
// $aop->gatewayUrl = 'https://openapi.alipay.com/gateway.do';
|
||
// $aop->appId = $alipay_appid; /// 支付宝分配给开发者的应用ID
|
||
// ///$aop->rsaPrivateKey = '请填写开发者私钥去头去尾去回车，一行字符串'; /// 证书私钥
|
||
// $aop->rsaPrivateKeyFilePath = dirname(dirname(__DIR__)) . '/payment/alipay/key/' . $alipay_appid . '/rsa_private_key.pem'; /// 商户私钥文件名
|
||
// ///$aop->alipayrsaPublicKey = '请填写支付宝公钥，一行字符串'; /// 证书公钥
|
||
// $aop->alipayPublicKey = dirname(dirname(__DIR__)) . '/payment/alipay/key/' . $alipay_appid . '/alipay_rsa_public_key.pem'; /// 支付宝公钥文件名
|
||
// $aop->apiVersion = '1.0'; /// 版本
|
||
// $aop->signType = 'RSA2'; /// 商户生成签名字符串所使用的签名算法类型，目前支持RSA2和RSA，推荐使用RSA2
|
||
// $aop->postCharset = 'GBK'; /// 请求使用的编码格式，如utf-8,gbk,gb2312等
|
||
// $aop->format = 'json'; /// 仅支持JSON
|
||
//
|
||
// if (is_string($account_list))
|
||
// $account_list = JsonStringToJsonObject($account_list);
|
||
//
|
||
// $account = new Account_Alipay();
|
||
// $list = array();
|
||
// $success = 0;
|
||
// $failed = 0;
|
||
// foreach ($account_list as $item)
|
||
// {
|
||
// $account->from_string($item);
|
||
// $biz_content = array(
|
||
// 'out_biz_no' => md5(date('YmdHis') . $alipay_appid . random(8, 1)), /// 必选 商户转账唯一订单号。发起转账来源方定义的转账单据ID，用于将转账回执通知给来源方。不同来源方给出的ID可以重复，同一个来源方必须保证其ID的唯一性。只支持半角英文、数字，及“-”、“_”。
|
||
// 'payee_type' => 'ALIPAY_LOGONID', /// 必选 收款方账户类型。可取值：1、ALIPAY_USERID：支付宝账号对应的支付宝唯一用户号。以2088开头的16位纯数字组成。2、ALIPAY_LOGONID：支付宝登录号，支持邮箱和手机号格式。
|
||
// 'payee_account' => $account->account_no, /// 必选 收款方账户。与payee_type配合使用。付款方和收款方不能是同一个账户。
|
||
// 'amount' => $account->money, /// 必选 转账金额，单位：元。 只支持2位小数，小数点前最大支持13位，金额必须大于等于0.1元。最大转账金额以实际签约的限额为准。
|
||
// 'payer_show_name' => $account->title, /// 可选 付款方姓名（最长支持100个英文/50个汉字）。显示在收款方的账单详情页。如果该字段不传，则默认显示付款方的支付宝认证姓名或单位名称。
|
||
// 'payee_real_name' => $account->account_name, /// 可选 收款方真实姓名（最长支持100个英文/50个汉字）。如果本参数不为空，则会校验该账户在支付宝登记的实名是否与收款方真实姓名一致。
|
||
// 'remark' => $account->remark, /// 可选 转账备注（支持200个英文/100个汉字）。当付款方为企业账户，且转账金额达到（大于等于）50000元，remark不能为空。收款方可见，会展示在收款用户的收支详情中。
|
||
// );
|
||
//
|
||
// $request = new AlipayFundTransToaccountTransferRequest();
|
||
// $request->setBizContent(JsonObjectToJsonString($biz_content));
|
||
// $result = $aop->execute($request);
|
||
// $responseNode = str_replace(".", "_", $request->getApiMethodName()) . "_response";
|
||
// $resultCode = $result->$responseNode->code;
|
||
// if (!empty($resultCode) && $resultCode == 10000) {
|
||
// //echo "成功";
|
||
// $account->ret_code = 0;
|
||
// $account->ret_info = NOTIFYSTATUS_SUCCESS;
|
||
// $account->order_id = $result->$responseNode->order_id;
|
||
// $account->pay_time = $result->$responseNode->pay_date;
|
||
// $success++;
|
||
// } else {
|
||
// //echo "失败";
|
||
// $account->ret_code = $result->$responseNode->code;
|
||
// $account->ret_info = $result->$responseNode->msg;
|
||
// $failed++;
|
||
// }
|
||
//
|
||
// array_push($list, $account);
|
||
// }
|
||
//
|
||
// Sql::update('syweb_core_transferinfo')
|
||
// ->setArgs(array('status' => TRANSFERSTATUS_SUCCESS, 'account_list' => JsonObjectToJsonString($list), ))
|
||
// ->whereArgs(array('id' => $transfer['id']))
|
||
// ->exec($this->db);
|
||
//
|
||
// /// 发送回调通知
|
||
// $this->send_order_notice();
|
||
// return new returnObject(0, 0, "批量支付完成！成功{$success}笔，失败{$failed}笔！");
|
||
}
|
||
|
||
/**
|
||
* 作用：使用证书，以post方式提交xml到对应的接口url
|
||
*/
|
||
function curl_post_ssl($url, $vars, $second=30)
|
||
{
|
||
$ch = curl_init();
|
||
//超时时间
|
||
curl_setopt($ch,CURLOPT_TIMEOUT,$second);
|
||
curl_setopt($ch,CURLOPT_RETURNTRANSFER, 1);
|
||
|
||
curl_setopt($ch,CURLOPT_URL,$url);
|
||
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,false);
|
||
curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,false);
|
||
|
||
//以下两种方式需选择一种
|
||
/******* 此处必须为文件服务器根目录绝对路径 不可使用变量代替*********/
|
||
curl_setopt($ch,CURLOPT_SSLCERT,"/home/lizi/addons/grow/template/mobile/cash/apiclient_cert.pem");
|
||
curl_setopt($ch,CURLOPT_SSLKEY,"/home/lizi/addons/grow/template/mobile/cash/apiclient_key.pem");
|
||
|
||
|
||
curl_setopt($ch,CURLOPT_POST, 1);
|
||
curl_setopt($ch,CURLOPT_POSTFIELDS,$vars);
|
||
|
||
$data = curl_exec($ch);
|
||
if ($data) {
|
||
curl_close($ch);
|
||
return $data;
|
||
} else {
|
||
$error = curl_errno($ch);
|
||
echo "call faild, errorCode:$error\n";
|
||
curl_close($ch);
|
||
return false;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* @note 微信企业付款
|
||
* @param $order_no 订单号
|
||
* @param $account_list 收款账户列表 {"openid":"收款openid","unionid":"收款unionid","trade_no":"订单号","money":"转账金额","title":"显示在收款方的账单详情页","remark":"转账备注"}
|
||
* @param $notice_url 异步通知地址
|
||
* @param array|mixed $attach 附带的其他参数
|
||
* @return returnObject|mixed
|
||
*/
|
||
private function _transfer_wechat_v1($order_no, $account_list, $notice_url, $attach)
|
||
{
|
||
//return new returnObject(1, -1, '还没有实现该功能, 请关注平台后续更新！', null);
|
||
$weixin_appid = $this->marketInfo['weixin_appid']; /// 微信appid
|
||
$weixin_secret_appid = $this->marketInfo['weixin_secret_appid']; /// 微信secretid
|
||
$weixin_mchid = $this->marketInfo['weixin_mchid']; /// 微信商户号
|
||
$weixin_paykey = $this->marketInfo['weixin_paykey']; /// 微信支付key
|
||
|
||
if (is_string($account_list))
|
||
$account_list = JsonStringToJsonObject($account_list);
|
||
if (!is_array($account_list))
|
||
$account_list = array($account_list);
|
||
|
||
$account = new Account_Wechat();
|
||
$index = 0;
|
||
$acc_list = [];
|
||
foreach ($account_list as $item)
|
||
{
|
||
$account->from_string($item);
|
||
$account->id = ++$index;
|
||
$account->ret_code = 0;
|
||
$account->ret_info = 'wait';
|
||
array_push($acc_list, $account->to_array());
|
||
}
|
||
$transfer = $this->saved_transfer_info_v1($order_no, $acc_list, $notice_url, TRANSFERCODE_WECHAT, $attach);
|
||
if (!$transfer)
|
||
return new returnObject(1, 500, '写入支付信息失败, 请联系管理员或稍候再试!', null);
|
||
|
||
/// 微信付款到个人的接口
|
||
$url = 'https://api.mch.weixin.qq.com/mmpaymkttransfers/promotion/transfers';
|
||
for ($index = 0; $index < count($acc_list); $index++)
|
||
{
|
||
$acc_list[$index]['order_id'] = md5(time() . rand(100000, 999999)); /// 商户订单号
|
||
|
||
$data = [
|
||
'mch_appid' => $weixin_appid, /// 公众账号appid
|
||
'mchid' => $weixin_mchid, /// 商户号 微信支付平台账号
|
||
///'device_info' => '', /// 设备号
|
||
'nonce_str' => md5(time() . rand(1000, 9999)), /// 随机字符串
|
||
'partner_trade_no' => $acc_list[$index]['order_id'], /// 商户订单号
|
||
'openid' => $acc_list[$index]['openid'], /// 商户appid下，某用户的openid
|
||
'check_name' => 'NO_CHECK', /// 校验用户姓名选项 NO_CHECK：不校验真实姓名；FORCE_CHECK：强校验真实姓名
|
||
///'re_user_name' => '', /// 收款用户真实姓名。如果check_name设置为FORCE_CHECK，则必填用户真实姓名
|
||
'amount' => intval(floatval($acc_list[$index]['money']) * 100), /// 企业付款金额，单位为分
|
||
'desc' => $acc_list[$index]['title'], /// 企业付款操作说明信息。必填。
|
||
'spbill_create_ip' => GetClientAddress(), /// Ip地址，该IP同在商户平台设置的IP白名单中的IP没有关联，该IP可传用户端或者服务端的IP。
|
||
];
|
||
/// 签名
|
||
$data['sign'] = mb_strtoupper(SignParameter($data, $weixin_paykey), USEDCHARSET);
|
||
/// 转成xml字符串
|
||
$xml = XmlObjectToXmlString($data);
|
||
|
||
|
||
/// 发送请求
|
||
$ch = curl_init();
|
||
/// 超时时间
|
||
curl_setopt($ch, CURLOPT_TIMEOUT, 30);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
|
||
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
|
||
|
||
//以下两种方式需选择一种
|
||
/******* 此处必须为文件服务器根目录绝对路径 不可使用变量代替*********/
|
||
curl_setopt($ch, CURLOPT_SSLCERT, sprintf(dirname(dirname(__DIR__)) . '\\payment\\wechat\\cert\\%s\\apiclient_cert.pem', $weixin_mchid));
|
||
curl_setopt($ch, CURLOPT_SSLKEY, sprintf(dirname(dirname(__DIR__)) . '\\payment\\wechat\\cert\\%s\\apiclient_key.pem', $weixin_mchid));
|
||
|
||
curl_setopt($ch, CURLOPT_POST, 1);
|
||
curl_setopt($ch, CURLOPT_POSTFIELDS, $xml);
|
||
|
||
$result = curl_exec($ch);
|
||
if ($result) {
|
||
curl_close($ch);
|
||
} else {
|
||
$errno = curl_errno($ch);
|
||
$errmsg = curl_error($ch);
|
||
curl_close($ch);
|
||
|
||
return new returnObject(1, $errno, $errmsg);
|
||
}
|
||
|
||
$obj = XmlStringToXmlObject($result);
|
||
|
||
if (0 != strcasecmp(strval(@$obj->return_code), 'SUCCESS')) {
|
||
$acc_list[$index]['ret_code'] = strval(@$obj->return_code);
|
||
$acc_list[$index]['ret_info'] = empty(strval(@$obj->return_msg)) ? '企业付款请求失败' : strval(@$obj->return_msg);
|
||
} elseif (0 != strcasecmp(strval(@$obj->result_code), 'SUCCESS')) {
|
||
$acc_list[$index]['ret_code'] = strval(@$obj->result_code);
|
||
$acc_list[$index]['ret_info'] = empty(strval(@$obj->err_code_des)) ? '企业付款请求失败' : strval(@$obj->err_code_des);
|
||
} else {
|
||
$acc_list[$index]['transaction_id'] = strval(@$obj->payment_no); /// 微信的订单号
|
||
$acc_list[$index]['pay_time'] = strval(@$obj->payment_time); /// 支付时间
|
||
$acc_list[$index]['ret_code'] = 1;
|
||
$acc_list[$index]['ret_info'] = 'success';
|
||
}
|
||
}
|
||
|
||
Sql::update('syweb_core_transferinfo')
|
||
->setArgs(array(
|
||
'status' => TRANSFERSTATUS_SUCCESS,
|
||
'account_list' => JsonObjectToJsonString($acc_list),
|
||
'transfer_time' => time(),
|
||
))
|
||
->whereArgs(array('id' => $transfer['id']))
|
||
->exec($this->db);
|
||
return new returnObject(0, 0, '批量付款成功！', $acc_list);
|
||
}
|
||
|
||
/**
|
||
* @note 汇付宝批量付款
|
||
* @param $order_no 订单号
|
||
* @param $account_list 收款账户列表{"mch_no":"商户流水号","bank_id":"银行编号","type":"对公对私","account_no":"收款人帐号","account_name":"收款人姓名","money":"付款金额","reason":"付款理由","province":"省份","city":"城市","bank_name":"收款支行名称"}
|
||
* @param $notice_url 异步通知地址
|
||
* @param array|mixed $attach 附带的其他参数
|
||
* @return returnObject|mixed
|
||
*/
|
||
private function _transfer_heepay_v1($order_no, $account_list, $notice_url, $attach)
|
||
{
|
||
if (is_string($account_list))
|
||
$account_list = JsonStringToJsonObject($account_list);
|
||
if (!is_array($account_list))
|
||
$account_list = array($account_list);
|
||
|
||
$total_money = 0;
|
||
$detail_list = array();
|
||
$account = new Account_HeePay();
|
||
$index = 0;
|
||
$acc_list = array();
|
||
foreach ($account_list as $item)
|
||
{
|
||
$index++;
|
||
$account->from_string($item);
|
||
|
||
/// 转账总金额
|
||
$total_money += $account->money;
|
||
/// 流水号
|
||
if (empty($account->mch_no)) $account->mch_no = $index;
|
||
/// 收款格式：商户流水号^银行编号^对公对私^收款人帐号^收款人姓名^付款金额^付款理由^省份^城市^收款支行名称
|
||
array_push($detail_list, "{$account->mch_no}^{$account->bank_id}^{$account->type}^{$account->account_no}^{$account->account_name}^{$account->money}^{$account->reason}^{$account->province}^{$account->city}^{$account->bank_name}");
|
||
array_push($acc_list, $account);
|
||
}
|
||
|
||
$transfer = $this->saved_transfer_info_v1($order_no, $acc_list, $notice_url, TRANSFERCODE_HEEPAY, $attach);
|
||
if (!$transfer)
|
||
return new returnObject(1, 500, '写入支付信息失败, 请联系管理员或稍候再试!', null);
|
||
|
||
$url_small = 'https://Pay.heepay.com/API/PayTransit/PayTransferWithSmallAll.aspx'; /// 小额正式交易地址
|
||
$url_large = 'https://Pay.heepay.com/API/PayTransit/PayTransferWithLargeWork.aspx'; /// 大额正式交易地址
|
||
|
||
$transfer_key = $this->marketInfo['heepay_transferkey']; /// 转账key
|
||
$detail_data_key = $this->marketInfo['heepay_3deskey']; /// 账户数据的3des加密key
|
||
|
||
$version = 3; /// 当前接口版本号3
|
||
$agent_id = $this->marketInfo['heepay_mchid']; /// 商户内码，例如1664502
|
||
$batch_no = $transfer['out_trade_no']; /// 批量付款订单号（要保证唯一）。最大长度50个字符，最小长度10个字符
|
||
$batch_amt = $total_money; /// 付款总金额不可为空，单位：元，小数点后保留两位。
|
||
$batch_num = count($account_list); /// 该次付款总笔数，付给多少人的数目，“单笔数据集”里面的数据总笔数
|
||
$detail_data = implode('|', $detail_list); /// 批付到银行帐户格式:“商户流水号^银行编号^对公对私^收款人帐号^收款人姓名^付款金额^付款理由^省份^城市^收款支行名称”来组织数据，每条整数据间用“竖线”符号分隔，商户流水号长度最长20字符。省市格式请严格按照4省市查询接口中的说明填写。注：整理好信息之后，需要对此数据进行3DES加密，具体加密方式参考：接口规则-参数规定10 3DES加密机制,银行编号和对公对私对应数值请在 接口规则-参数规定8和9
|
||
$notify_url = $this->getFullUrl('/api/transfer/notify/heepay'); /// 支付后返回的商户处理页面，URL参数是以http://或https://开头的完整URL地址(后台处理)，提交的url地址必须外网能访问到，否则无法通知商户。
|
||
$ext_param1 = $transfer['id']; /// 商户自定义原样返回，最大长度50个字符
|
||
//$sign = ''; /// MD5签名结果
|
||
|
||
/// 组织签名
|
||
$sign = "agent_id={$agent_id}&batch_amt={$batch_amt}&batch_no={$batch_no}&batch_num={$batch_num}&detail_data={$detail_data}&ext_param1={$ext_param1}&key={$transfer_key}¬ify_url={$notify_url}&version={$version}";
|
||
/// 获取sign密钥
|
||
$sign = md5(strtolower($sign));
|
||
|
||
/// 初始化一个对象
|
||
if (function_exists('openssl_encrypt'))
|
||
$des = new TripleDES($detail_data_key);
|
||
else
|
||
{
|
||
$des = new Crypt3Des();
|
||
$des->key = $detail_data_key;
|
||
}
|
||
|
||
$detail_data = iconv("utf-8", "gbk//IGNORE", $detail_data);
|
||
$detail_data_des = $des->Encrypt($detail_data);
|
||
|
||
$url = $total_money < 50000 ? $url_small : $url_large;
|
||
$data = array(
|
||
'agent_id' => $agent_id,
|
||
'batch_amt' => $batch_amt,
|
||
'batch_no' => $batch_no,
|
||
'batch_num' => $batch_num,
|
||
'detail_data' => $detail_data_des,
|
||
'ext_param1' => $ext_param1,
|
||
'notify_url' => $notify_url,
|
||
'sign' => $sign,
|
||
'version' => $version,
|
||
);
|
||
|
||
$result = Characet(SendPost($url, $data));
|
||
$result = XmlStringToXmlObject($result);
|
||
if (is_object($result))
|
||
{
|
||
$result = (array)$result;
|
||
|
||
if ('0000' == $result['ret_code'])
|
||
return new returnObject(0, 0, '批量付款成功！', null);
|
||
else
|
||
return new returnObject(1, $result['ret_code'], $result['ret_msg'], null);
|
||
}
|
||
else
|
||
return new returnObject(1, 500, $result, null);
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量付款回调通知
|
||
* @route({"GET","/notify/unionapy"})
|
||
* @route({"POST","/notify/unionapy"})
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function notify_unionpay()
|
||
{
|
||
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量付款回调通知
|
||
* @route({"GET","/notify/alipay"})
|
||
* @route({"POST","/notify/alipay"})
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function notify_alipay()
|
||
{
|
||
try {
|
||
/// notify_time 通知的发送时间。 格式yyyy-MM-dd HH:mm:ss。
|
||
/// notify_type 通知的类型。 batch_trans_notify
|
||
/// notify_id 支付宝通知校验ID，商户可以用这个流水号询问支付宝该条通知的合法性。
|
||
/// sign_type 签名方式 DSA、RSA、MD5三个值可选，必须大写。
|
||
/// sign 签名 请参见本文档“附录：签名与验签”。
|
||
/// batch_no 转账批次号。
|
||
/// pay_user_id 付款的支付宝账号对应的支付宝唯一用户号。以2088开头的16位纯数字组成。
|
||
/// pay_user_name 付款账号姓名。
|
||
/// pay_account_no 付款账号。
|
||
/// success_details 批量付款中成功付款的信息。格式为：流水号^收款方账号^收款账号姓名^付款金额^成功标识(S)^成功原因(null)^支付宝内部流水号^完成时间。每条记录以“|”间隔。
|
||
/// fail_details 批量付款中未成功付款的信息。格式为：流水号^收款方账号^收款账号姓名^付款金额^失败标识(F)^失败原因^支付宝内部流水号^完成时间。每条记录以“|”间隔。
|
||
|
||
$id = @$_REQUEST['batch_no'];
|
||
if (empty($id))
|
||
die (NOTIFYSTATUS_FAIL);
|
||
|
||
$id = mb_substr($id, 14, mb_strlen($id, USEDCHARSET) - 14, USEDCHARSET);
|
||
if (empty($id))
|
||
die (NOTIFYSTATUS_FAIL);
|
||
$id = intval($id);
|
||
|
||
$transfer = Sql::select('a.id, a.app_key, a.dev_key, a.market_key, b.alipay_pid, b.alipay_key, b.signkey, a.account_list, a.notice_url, a.return_url, a.status, a.notify_status, a.version')
|
||
->from('syweb_core_transferinfo a, syweb_market b')
|
||
->where('a.market_key = b.market_key and a.id = ?', $id)
|
||
->get($this->db, null);
|
||
if (empty($transfer))
|
||
//return new returnObject(1, 10003, '找不到对应的支付信息。');
|
||
die(NOTIFYSTATUS_FAIL);
|
||
else
|
||
$transfer = $transfer[0];
|
||
|
||
$alipay_pid = $transfer['alipay_pid']; /// 支付宝pid
|
||
$alipay_key = $transfer['alipay_key']; /// 支付宝安全检验码
|
||
$version = $transfer['version']; /// 版本号
|
||
switch($version) {
|
||
case 1:
|
||
/// 计算得出通知验证结果
|
||
$notify = new AlipayNotify(array(
|
||
'partner' => $alipay_pid, /// pid
|
||
'md5_key' => $alipay_key, /// 支付宝安全检验码
|
||
'sign_type' => 'MD5', /// 签名方式
|
||
'input_charset' => 'utf-8', /// 字符编码格式 目前支持 gbk 或 utf-8
|
||
));
|
||
|
||
|
||
if ($notify->verifyNotify()) {
|
||
/// 验证成功
|
||
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||
/// 请在这里加上商户的业务逻辑程序代
|
||
/// ——请根据您的业务逻辑来编写程序（以下代码仅作参考）——
|
||
/// 获取支付宝的通知返回参数，可参考技术文档中服务器异步通知参数列表
|
||
/// 批量付款数据中转账成功的详细信息
|
||
$succ_details = $_REQUEST['success_details'];
|
||
/// 批量付款数据中转账失败的详细信息
|
||
$fail_details = $_REQUEST['fail_details'];
|
||
///
|
||
$account_list = json_decode($transfer['account_list']); /// 保存的收款账户列表
|
||
|
||
/// 处理成功的记录
|
||
$succ_list = explode('|', $succ_details);
|
||
foreach($succ_list as $succ_item) {
|
||
/// 流水号^收款方账号^收款账号姓名^付款金额^成功标识(S)^成功原因(null)^支付宝内部流水号^完成时间
|
||
$acc = explode('^', $succ_item);
|
||
|
||
/** @var Account_Alipay $account */
|
||
foreach ($account_list as $account) {
|
||
if ($account->id == $acc[0]) {
|
||
$account->ret_code = 1;
|
||
$account->ret_info = NOTIFYSTATUS_SUCCESS;
|
||
$account->order_id = $acc[6];
|
||
$account->pay_time = $acc[7];
|
||
|
||
break;
|
||
}
|
||
}
|
||
}
|
||
|
||
/// 处理失败的记录
|
||
$fail_list = explode('|', $fail_details);
|
||
foreach($fail_list as $fail_item) {
|
||
/// 流水号^收款方账号^收款账号姓名^付款金额^失败标识(F)^失败原因^支付宝内部流水号^完成时间
|
||
$acc = explode('^', $fail_item);
|
||
|
||
/** @var Account_Alipay $account */
|
||
foreach ($account_list as $account) {
|
||
if ($account->id == $acc[0]) {
|
||
$account->ret_code = -1;
|
||
$account->ret_info = $acc[5];
|
||
$account->order_id = $acc[6];
|
||
$account->pay_time = $acc[7];
|
||
|
||
break;
|
||
}
|
||
}
|
||
}
|
||
|
||
Sql::update('syweb_core_transferinfo')
|
||
->setArgs(array(
|
||
'status' => TRANSFERSTATUS_SUCCESS,
|
||
'account_list' => JsonObjectToJsonString($account_list),
|
||
'transaction_id' => @$_REQUEST['batch_no'],
|
||
'transfer_time' => time(),
|
||
))
|
||
->whereArgs(array('id' => $id))
|
||
->exec($this->db);
|
||
|
||
/// 发送回调通知
|
||
$this->send_order_notice();
|
||
|
||
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||
die(NOTIFYSTATUS_SUCCESS);
|
||
} else {
|
||
/// 验证失败
|
||
die(NOTIFYSTATUS_FAIL);
|
||
}
|
||
|
||
default:
|
||
///return new returnObject(500, -1, "不支持的接口版本：{$version}！");
|
||
die(NOTIFYSTATUS_FAIL);
|
||
}
|
||
} catch (Exception $e) {
|
||
die(NOTIFYSTATUS_FAIL);
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量付款回调通知
|
||
* @route({"GET","/notify/wechat"})
|
||
* @route({"POST","/notify/wechat"})
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function notify_wechat()
|
||
{
|
||
|
||
}
|
||
|
||
|
||
/**
|
||
* 批量付款回调通知
|
||
* @route({"GET","/notify/heepay"})
|
||
* @route({"POST","/notify/heepay"})
|
||
* @throws({"phprs\util\exceptions\Forbidden","res", "403 Forbidden",{"error":"Forbidden"}}) cookie不可用
|
||
* @return string|returnObject|mixed
|
||
*/
|
||
public function notify_heepay()
|
||
{
|
||
try {
|
||
$ret_code = $_REQUEST['ret_code']; /// 返回码值0000 表示查询成功，其他详见附录
|
||
$ret_msg = $_REQUEST['ret_msg']; /// 返回码信息提示
|
||
$agent_id = $_REQUEST['agent_id']; /// 商户编号 如1234567
|
||
$hy_bill_no = $_REQUEST['hy_bill_no']; /// 汇付宝交易号(订单号)
|
||
$status = $_REQUEST['status']; /// -1=无效，0=未处理，1=成功
|
||
$batch_no = $_REQUEST['batch_no']; /// 商户系统内部的订单号
|
||
$batch_amt = $_REQUEST['batch_amt']; /// 成功付款金额
|
||
$batch_num = $_REQUEST['batch_num']; /// 成功付款数量
|
||
$detail_data = $_REQUEST['detail_data']; /// 付款明细，单笔数据集里面按照“商户流水号^收款人帐号^收款人姓名^付款金额^付款状态”来组织数据，每条整数据间用“竖线”符号分隔，付款状态S表示付款成功，状态F代表失败
|
||
$ext_param1 = intval($_REQUEST['ext_param1']); /// 商家数据包，原样返回
|
||
$sign = $_REQUEST['sign']; /// MD5签名结果
|
||
|
||
$transfer = Sql::select('a.id, a.app_key, a.dev_key, a.market_key, b.heepay_transferkey, b.heepay_3deskey, b.signkey, a.account_list, a.notice_url, a.return_url, a.status, a.notify_status, a.version')
|
||
->from('syweb_core_transferinfo a, syweb_market b')
|
||
->where('a.market_key = b.market_key and a.id = ?', $ext_param1)
|
||
->get($this->db, null);
|
||
if (empty($transfer))
|
||
//return new returnObject(1, 10003, '找不到对应的支付信息。');
|
||
die(NOTIFYSTATUS_FAIL);
|
||
else
|
||
$transfer = $transfer[0];
|
||
|
||
$version = intval($transfer['version']); /// 版本号
|
||
$transfer_key = $transfer['heepay_transferkey']; /// 批付秘钥
|
||
//$detail_data_key = $transfer['heepay_3deskey']; /// 账户数据的3des加密key
|
||
$acc_list = json_decode($transfer['account_list']); /// 保存的收款账户列表
|
||
//$notice_url = $transfer['notice_url']; /// 异步回调地址
|
||
//$return_url = $transfer['return_url']; /// 同步回调地址
|
||
//$transfer_status = $transfer['status']; /// 批付状态
|
||
//$notify_status = $transfer['notify_status']; /// 通知状态
|
||
switch ($version) {
|
||
case 1:
|
||
/// 组织签名
|
||
$str = "ret_code={$ret_code}&ret_msg={$ret_msg}&agent_id={$agent_id}&hy_bill_no={$hy_bill_no}&status={$status}&batch_no={$batch_no}&batch_amt={$batch_amt}&batch_num={$batch_num}&detail_data={$detail_data}&ext_param1={$ext_param1}&key={$transfer_key}";
|
||
/// 获取sign密钥
|
||
$md5 = md5(strtolower($str));
|
||
if ($sign != $md5)
|
||
//return new returnObject(1, 10004, '签名错误。');
|
||
die(NOTIFYSTATUS_FAIL);
|
||
|
||
if ('0000' != $ret_code)
|
||
return new returnObject(1, $ret_code, $ret_msg);
|
||
|
||
/// 处理收款账户信息
|
||
if (!empty($detail_data)) {
|
||
$account_list = array();
|
||
$account = new Account_HeePay();
|
||
foreach ((array)explode('|', $detail_data) as $item) {
|
||
/// 商户流水号^收款人帐号^收款人姓名^付款金额^付款状态
|
||
$account->from_string($item);
|
||
array_push($account_list, $account);
|
||
|
||
/** @var Account_HeePay $acc */
|
||
foreach ($acc_list as $acc) {
|
||
if ($acc->mch_no == $account->mch_no) {
|
||
$acc->status = $account->status;
|
||
break;
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
|
||
/// 改变订单状态
|
||
if (1 == $status) /// 成功
|
||
{
|
||
Sql::update('syweb_core_transferinfo')
|
||
->setArgs(array(
|
||
'status' => TRANSFERSTATUS_SUCCESS,
|
||
'account_list' => JsonObjectToJsonString($acc_list),
|
||
'transaction_id' => $hy_bill_no,
|
||
'transfer_time' => time(),
|
||
))
|
||
->whereArgs(array('id' => $ext_param1))
|
||
->exec($this->db);
|
||
} elseif (0 == $status) { /// 未处理
|
||
Sql::update('syweb_core_transferinfo')
|
||
->setArgs(array(
|
||
'status' => TRANSFERSTATUS_NORMAL,
|
||
'account_list' => JsonObjectToJsonString($acc_list),
|
||
'transaction_id' => $hy_bill_no,
|
||
'transfer_time' => time(),
|
||
))
|
||
->whereArgs(array('id' => $ext_param1))
|
||
->exec($this->db);
|
||
} elseif (-1 == $status) { /// 无效
|
||
Sql::update('syweb_core_transferinfo')
|
||
->setArgs(array(
|
||
'status' => TRANSFERSTATUS_CANCEL,
|
||
'account_list' => JsonObjectToJsonString($acc_list),
|
||
'transaction_id' => $hy_bill_no,
|
||
'transfer_time' => time(),
|
||
))
|
||
->whereArgs(array('id' => $ext_param1))
|
||
->exec($this->db);
|
||
}
|
||
|
||
/// 发送回调通知
|
||
$this->send_order_notice();
|
||
|
||
return new returnObject(0, 0, '批量支付成功！');
|
||
default:
|
||
return new returnObject(500, -1, "不支持的接口版本：{$version}！");
|
||
}
|
||
|
||
} catch(Exception $e) {
|
||
return new returnObject(1, $e->getCode(), $e->getMessage());
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* @note 批付前校验
|
||
* @param string $appid 应用id
|
||
* @param string $devkey 开发者key
|
||
* @param string $market_key 门店key
|
||
* @param string $account_list 收款账户列表
|
||
* @param string $notice_url 异步通知地址
|
||
* @param string $sign 签名
|
||
* @return array|returnObject
|
||
*/
|
||
private function verify_transfer_v1($appid, $devkey, $market_key, $account_list, $notice_url, $sign)
|
||
{
|
||
/// 验证公共参数是否合法
|
||
parent::init($appid, $devkey);
|
||
$verify_result = parent::verify_admin($market_key);
|
||
if (!is_error_api($verify_result))
|
||
{
|
||
/// 校验签名
|
||
$param = $_REQUEST;
|
||
if (isset($param['sign']))
|
||
{
|
||
$raw_sign = $param['sign'];
|
||
unset($param['sign']);
|
||
}
|
||
else
|
||
$raw_sign = $sign;
|
||
$own_sign = SignParameter($param, $this->marketInfo['signkey']);
|
||
|
||
if ($own_sign != $raw_sign)
|
||
return new returnObject(500, -1, '签名错误', null);
|
||
|
||
if (empty($account_list))
|
||
return new returnObject(500, 500, '请指定收款账户！', null);
|
||
|
||
//if (empty($notice_url))
|
||
// return new returnObject(500, 500, '请指定一个支付回调通知页面！', null);
|
||
/*
|
||
$referer_url = $_SERVER['HTTP_REFERER']; /// 当前调用退款的域名
|
||
$local_url = $this->getLocaleUrl(); /// 本地域名
|
||
|
||
/// 转账安全域名
|
||
$transfer_safe_domain = json_decode($this->marketInfo['transfer_safe_domain']);
|
||
$referer_paths = parse_url($referer_url);
|
||
$local_paths = parse_url($local_url);
|
||
|
||
if (!empty($referer_paths) && count($referer_paths) > 0)
|
||
{
|
||
$referer_domain = $referer_paths['host'];
|
||
$local_domain = $local_paths['host'];
|
||
|
||
if (!in_array($referer_domain, $transfer_safe_domain) && $local_domain != $referer_domain)
|
||
return new returnObject(500, 13006, '不是安全的域名。', $referer_domain);
|
||
}
|
||
*/
|
||
/// 获取附加的参数
|
||
$attach = GetAttachParameters(array('appid', 'devkey', 'market_key', 'account_list', 'notice_url', 'return_url', 'transfer_type', 'version', 'sign', ));
|
||
$attach['transfer_time'] = time();
|
||
|
||
return $attach;
|
||
}
|
||
elseif ($verify_result instanceof returnObject)
|
||
{
|
||
return $verify_result;
|
||
}
|
||
else
|
||
{
|
||
$return = new returnObject();
|
||
$return->from_array((array)$verify_result);
|
||
return $verify_result;
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* @note 保存转账信息
|
||
* @param string $order_no 订单号
|
||
* @param string|mixed $account_list 收款账户列表
|
||
* @param string $notice_url 异步回调地址
|
||
// * @param string $return_url 同步回调地址
|
||
* @param int $type 支付方式
|
||
* @param array $attach 支付附加参数
|
||
* @return mixed
|
||
**/
|
||
private function saved_transfer_info_v1($order_no, $account_list, $notice_url, $type, $attach)
|
||
{
|
||
$info = Sql::select('a.status')
|
||
->from('syweb_core_transferinfo a')
|
||
->where('app_key = ? and market_key = ? and order_no = ?', $this->appid, $this->market_key, $order_no)
|
||
->get($this->db, null);
|
||
if (!empty($info))
|
||
$info = $info[0];
|
||
|
||
if (!empty($info) && is_numeric($info['status']))
|
||
{
|
||
switch ($info['status'])
|
||
{
|
||
case TRANSFERSTATUS_SUCCESS:
|
||
echo '订单已成功处理！';
|
||
return false;
|
||
|
||
case TRANSFERSTATUS_CANCEL:
|
||
echo '订单已被撤销！';
|
||
return false;
|
||
|
||
case TRANSFERSTATUS_NORMAL:
|
||
break;
|
||
|
||
default:
|
||
break;
|
||
}
|
||
}
|
||
|
||
if (empty($account_list))
|
||
return null;
|
||
|
||
if (is_array($account_list) || is_object($account_list))
|
||
$account_list = JsonObjectToJsonString($account_list);
|
||
|
||
if (is_array($attach) || is_object($attach))
|
||
$attach = JsonObjectToJsonString($attach);
|
||
|
||
$record = array(
|
||
'app_key' => $this->appid, /// 应用key
|
||
'dev_key' => $this->devkey, /// 开发者key
|
||
'market_key' => $this->market_key, /// 门店key
|
||
'account_list' => $account_list, /// 收款账户列表
|
||
'notice_url' => $notice_url, /// 异步回调地址
|
||
'return_url' => '', /// 同步回调地址
|
||
'type' => $type, /// 支付方式
|
||
'order_no' => $order_no, /// 订单号
|
||
'out_trade_no' => md5(date('YmdHis') . '_' . $this->appid . '_' . $this->market_key . '_' . random(8, 1)), /// 支付唯一ID
|
||
'transaction_id' => null, /// 三方订单号
|
||
'status' => TRANSFERSTATUS_NORMAL, /// 状态
|
||
'attach' => $attach, /// 附加信息
|
||
'create_time' => time(), /// 支付创建时间戳
|
||
'notify_status' => 0, /// 回调状态
|
||
'notify_count' => 0, /// 回调次数
|
||
'version' => 1, /// 版本号
|
||
);
|
||
|
||
$this->db->beginTransaction();
|
||
try {
|
||
$id = Sql::insertInto('syweb_core_transferinfo')->values($record)->exec($this->db)->lastInsertId();
|
||
$this->db->commit();
|
||
|
||
$record['id'] = $id;
|
||
return $record;
|
||
} catch (Exception $Exception) {
|
||
$this->db->rollBack();
|
||
echo $Exception->getMessage();
|
||
return null;
|
||
}
|
||
}
|
||
|
||
|
||
/**
|
||
* @note 批量通知所有没有成功发送回调通知的记录
|
||
* @return returnObject
|
||
*/
|
||
private function send_order_notice()
|
||
{
|
||
$transfer = Sql::select('a.*, b.signkey')
|
||
->from('syweb_core_transferinfo a, syweb_market b')
|
||
->where('a.market_key = b.market_key and a.status = 1 and a.notify_status != 1 and a.notify_count < 10')
|
||
->get($this->db, null);
|
||
if (empty($transfer))
|
||
return true;
|
||
|
||
$succ_list = array();
|
||
$fail_list = array();
|
||
foreach ($transfer as $record)
|
||
{
|
||
$data = array(
|
||
'account_list' => $record['account_list'],
|
||
'order_no' => $record['order_no'],
|
||
'out_trade_no' => $record['out_trade_no'],
|
||
'transaction_id' => $record['transaction_id'],
|
||
'attach' => $record['attach'],
|
||
'version' => $record['version'],
|
||
);
|
||
|
||
$data['sign'] = SignParameter($data, $record['signkey']);
|
||
if (!empty($record['notice_url']))
|
||
$result = SendPost($record['notice_url'], $data);
|
||
else
|
||
$result = NOTIFYSTATUS_SUCCESS;
|
||
if (strcasecmp($result, NOTIFYSTATUS_SUCCESS) == 0)
|
||
array_push($succ_list, $record['id']);
|
||
else
|
||
array_push($fail_list, $record['id']);
|
||
}
|
||
|
||
$time = time();
|
||
|
||
if (!empty($succ_list) && count($succ_list) > 0)
|
||
{
|
||
if (!empty($succ_list = implode(',', $succ_list)))
|
||
$this->db->exec(/** @lang text */"update syweb_core_transferinfo set notify_status = 1, notify_count = notify_count + 1, notify_time = {$time} where id in ({$succ_list})");
|
||
}
|
||
|
||
if (!empty($fail_list) && count($fail_list) > 0)
|
||
{
|
||
if (!empty($fail_list = implode(',', $fail_list)))
|
||
$this->db->exec(/** @lang text */"update syweb_core_transferinfo set notify_status = -1, notify_count = notify_count + 1, notify_time = {$time} where id in ({$fail_list})");
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
|
||
/**
|
||
* @property({"default":"@db"})
|
||
* @var PDO
|
||
*/
|
||
public $db;
|
||
}
|
||
|
||
|