mirror of
https://gitee.com/zongzhige/shopxo.git
synced 2024-12-04 21:09:43 +08:00
630 lines
22 KiB
PHP
Executable File
630 lines
22 KiB
PHP
Executable File
<?php
|
||
// +----------------------------------------------------------------------
|
||
// | ShopXO 国内领先企业级B2C免费开源电商系统
|
||
// +----------------------------------------------------------------------
|
||
// | Copyright (c) 2011~2019 http://shopxo.net All rights reserved.
|
||
// +----------------------------------------------------------------------
|
||
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
|
||
// +----------------------------------------------------------------------
|
||
// | Author: Devil
|
||
// +----------------------------------------------------------------------
|
||
namespace payment;
|
||
|
||
/**
|
||
* 微信支付
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2018-09-19
|
||
* @desc description
|
||
*/
|
||
class Weixin
|
||
{
|
||
// 插件配置参数
|
||
private $config;
|
||
private $weixin_web_openid;
|
||
|
||
/**
|
||
* 构造方法
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2018-09-17
|
||
* @desc description
|
||
* @param [array] $params [输入参数（支付配置参数）]
|
||
*/
|
||
public function __construct($params = [])
|
||
{
|
||
$this->config = $params;
|
||
$this->config['secret'] = 'fc480bd4a543c0340f90093db8f3fc6b';
|
||
}
|
||
|
||
/**
|
||
* 配置信息
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2018-09-19
|
||
* @desc description
|
||
*/
|
||
public function Config()
|
||
{
|
||
// 基础信息
|
||
$base = [
|
||
'name' => '微信', // 插件名称
|
||
'version' => '0.0.1', // 插件版本
|
||
'apply_version' => '不限', // 适用系统版本描述
|
||
'apply_terminal'=> ['pc', 'h5', 'weixin'], // 适用终端 默认全部 ['pc', 'h5', 'app', 'alipay', 'weixin', 'baidu']
|
||
'desc' => '适用微信web/h5(非微信环境)/小程序，即时到帐支付方式，买家的交易资金直接打入卖家账户，快速回笼交易资金。 <a href="https://pay.weixin.qq.com/" target="_blank">立即申请</a>', // 插件描述（支持html）
|
||
'author' => 'Devil', // 开发者
|
||
'author_url' => 'http://shopxo.net/', // 开发者主页
|
||
];
|
||
|
||
// 配置信息
|
||
$element = [
|
||
[
|
||
'element' => 'input',
|
||
'type' => 'text',
|
||
'default' => '',
|
||
'name' => 'appid',
|
||
'placeholder' => '公众号ID',
|
||
'title' => '公众号ID (用于web/h5)',
|
||
'is_required' => 0,
|
||
'message' => '请填写微信分配的公众号ID',
|
||
],
|
||
[
|
||
'element' => 'input',
|
||
'type' => 'text',
|
||
'default' => '',
|
||
'name' => 'mini_appid',
|
||
'placeholder' => '小程序ID',
|
||
'title' => '小程序ID',
|
||
'is_required' => 0,
|
||
'message' => '请填写微信分配的小程序ID',
|
||
],
|
||
[
|
||
'element' => 'input',
|
||
'type' => 'text',
|
||
'default' => '',
|
||
'name' => 'mch_id',
|
||
'placeholder' => '微信支付商户号',
|
||
'title' => '微信支付商户号',
|
||
'is_required' => 0,
|
||
'message' => '请填写微信支付分配的商户号',
|
||
],
|
||
[
|
||
'element' => 'input',
|
||
'type' => 'text',
|
||
'default' => '',
|
||
'name' => 'key',
|
||
'placeholder' => '密钥',
|
||
'title' => '密钥',
|
||
'is_required' => 0,
|
||
'message' => '请填写密钥',
|
||
],
|
||
[
|
||
'element' => 'select',
|
||
'title' => '异步通知协议',
|
||
'message' => '请选择协议类型',
|
||
'name' => 'agreement',
|
||
'is_multiple' => 0,
|
||
'element_data' => [
|
||
['value'=>1, 'name'=>'默认当前http协议'],
|
||
['value'=>2, 'name'=>'强制https转http协议'],
|
||
],
|
||
],
|
||
];
|
||
|
||
return [
|
||
'base' => $base,
|
||
'element' => $element,
|
||
];
|
||
}
|
||
|
||
/**
|
||
* 支付入口
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2018-09-19
|
||
* @desc description
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
public function Pay($params = [])
|
||
{
|
||
// 参数
|
||
if(empty($params))
|
||
{
|
||
return DataReturn('参数不能为空', -1);
|
||
}
|
||
|
||
// 配置信息
|
||
if(empty($this->config))
|
||
{
|
||
return DataReturn('支付缺少配置', -1);
|
||
}
|
||
|
||
// 微信中打开
|
||
if(!empty($_SERVER['HTTP_USER_AGENT']) && stripos($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger') !== false)
|
||
{
|
||
$input = input();
|
||
if(empty($input['code']))
|
||
{
|
||
return $this->GetUserOpenId($params);
|
||
} else {
|
||
$ret = $this->Callback($input);
|
||
$this->weixin_web_openid = $ret['data']['openid'];
|
||
}
|
||
}
|
||
|
||
// 获取支付参数
|
||
$ret = $this->GetPayParams($params);
|
||
if($ret['code'] != 0)
|
||
{
|
||
return $ret;
|
||
}
|
||
|
||
// xml
|
||
$xml = $this->ArrayToXml($ret['data']);
|
||
$result = $this->XmlToArray($this->HttpRequest('https://api.mch.weixin.qq.com/pay/unifiedorder', $xml));
|
||
if(!empty($result['return_code']) && $result['return_code'] == 'SUCCESS' && !empty($result['prepay_id']))
|
||
{
|
||
return $this->PayHandleReturn($ret['data'], $result, $params);
|
||
}
|
||
$msg = empty($result['return_msg']) ? '支付异常' : $result['return_msg'];
|
||
if(!empty($result['err_code_des']))
|
||
{
|
||
$msg .= '-'.$result['err_code_des'];
|
||
}
|
||
return DataReturn($msg, -1);
|
||
}
|
||
|
||
/**
|
||
* 支付返回处理
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-08
|
||
* @desc description
|
||
* @param [array] $pay_params [支付参数]
|
||
* @param [array] $data [支付返回数据]
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
private function PayHandleReturn($pay_params = [], $data = [], $params = [])
|
||
{
|
||
$redirect_url = empty($params['order_id']) ? '' : urlencode(MyUrl('index/order/detail', ['id'=>$params['order_id']]));
|
||
$result = DataReturn('支付接口异常', -1);
|
||
switch($pay_params['trade_type'])
|
||
{
|
||
// web支付
|
||
case 'NATIVE' :
|
||
if(empty($params['ajax_url']))
|
||
{
|
||
return DataReturn('支付状态校验地址不能为空', -50);
|
||
}
|
||
$pay_params = [
|
||
'url' => urlencode(base64_encode($data['code_url'])),
|
||
'order_no' => $params['order_no'],
|
||
'name' => urlencode('微信支付'),
|
||
'msg' => urlencode('打开微信APP扫一扫进行支付'),
|
||
'ajax_url' => urlencode($params['ajax_url']),
|
||
];
|
||
$url = MyUrl('index/pay/qrcode', $pay_params);
|
||
$result = DataReturn('success', 0, $url);
|
||
break;
|
||
|
||
// h5支付
|
||
case 'MWEB' :
|
||
if(!empty($params['order_id']))
|
||
{
|
||
$data['mweb_url'] .= '&redirect_url='.$redirect_url;
|
||
}
|
||
$result = DataReturn('success', 0, $data['mweb_url']);
|
||
break;
|
||
|
||
// 微信中/小程序支付
|
||
case 'JSAPI' :
|
||
$pay_data = array(
|
||
'appId' => $pay_params['appid'],
|
||
'package' => 'prepay_id='.$data['prepay_id'],
|
||
'nonceStr' => md5(time().rand()),
|
||
'signType' => $pay_params['sign_type'],
|
||
'timeStamp' => (string) time(),
|
||
);
|
||
$pay_data['paySign'] = $this->GetSign($pay_data);
|
||
|
||
// 微信中
|
||
if(!empty($_SERVER['HTTP_USER_AGENT']) && stripos($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger') !== false)
|
||
{
|
||
$this->PayHtml($pay_data, $redirect_url);
|
||
} else {
|
||
$result = DataReturn('success', 0, $pay_data);
|
||
}
|
||
break;
|
||
|
||
// APP支付
|
||
case 'APP' :
|
||
$result = DataReturn('APP支付暂未开放', -1);
|
||
break;
|
||
}
|
||
return $result;
|
||
}
|
||
|
||
/**
|
||
* 支付代码
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2019-05-25T00:07:52+0800
|
||
* @param [array] $pay_data [支付信息]
|
||
* @param [string] $redirect_url [成功后的url]
|
||
*/
|
||
private function PayHtml($pay_data, $redirect_url)
|
||
{
|
||
exit('<html>
|
||
<head>
|
||
<meta http-equiv="content-type" content="text/html;charset=utf-8"/>
|
||
<title>微信安全支付</title>
|
||
<script type="text/javascript">
|
||
function onBridgeReady()
|
||
{
|
||
WeixinJSBridge.invoke(
|
||
\'getBrandWCPayRequest\', {
|
||
"appId":"'.$pay_data['appId'].'",
|
||
"timeStamp":"'.$pay_data['timeStamp'].'",
|
||
"nonceStr":"'.$pay_data['nonceStr'].'",
|
||
"package":"'.$pay_data['package'].'",
|
||
"signType":"'.$pay_data['signType'].'",
|
||
"paySign":"'.$pay_data['paySign'].'"
|
||
},
|
||
function(res) {
|
||
if(res.err_msg == "get_brand_wcpay_request:ok" )
|
||
{
|
||
Prompt("支付成功", "success");
|
||
} else if(res.err_msg == "get_brand_wcpay_request:cancel")
|
||
{
|
||
Prompt("用户取消");
|
||
} else if(res.err_msg == "get_brand_wcpay_request:fail")
|
||
{
|
||
Prompt("支付失败");
|
||
} else {
|
||
Prompt("支付参数有误");
|
||
}
|
||
});
|
||
}
|
||
if(typeof WeixinJSBridge == "undefined")
|
||
{
|
||
if( document.addEventListener )
|
||
{
|
||
document.addEventListener("WeixinJSBridgeReady", onBridgeReady, false);
|
||
} else if (document.attachEvent)
|
||
{
|
||
document.attachEvent("WeixinJSBridgeReady", onBridgeReady);
|
||
document.attachEvent("onWeixinJSBridgeReady", onBridgeReady);
|
||
}
|
||
} else {
|
||
onBridgeReady();
|
||
}
|
||
</script>
|
||
</head>
|
||
<body>
|
||
</html>');
|
||
}
|
||
|
||
/**
|
||
* 获取支付参数
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-07
|
||
* @desc description
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
private function GetPayParams($params = [])
|
||
{
|
||
$trade_type = empty($params['trade_type']) ? $this->GetTradeType() : $params['trade_type'];
|
||
if(empty($trade_type))
|
||
{
|
||
return DataReturn('支付类型不匹配', -1);
|
||
}
|
||
|
||
// openid
|
||
if(APPLICATION == 'app')
|
||
{
|
||
$openid = isset($params['user']['weixin_openid']) ? $params['user']['weixin_openid'] : '';
|
||
} else {
|
||
$openid = $this->weixin_web_openid;
|
||
}
|
||
|
||
// appid
|
||
$appid = (APPLICATION == 'app') ? $this->config['mini_appid'] : $this->config['appid'];
|
||
|
||
// 异步地址处理
|
||
$notify_url = (__MY_HTTP__ == 'https' && isset($this->config['agreement']) && $this->config['agreement'] == 1) ? 'http'.mb_substr($params['notify_url'], 5, null, 'utf-8') : $params['notify_url'];
|
||
|
||
// 请求参数
|
||
$data = [
|
||
'appid' => $appid,
|
||
'mch_id' => $this->config['mch_id'],
|
||
'body' => $params['site_name'].'-'.$params['name'],
|
||
'nonce_str' => md5(time().rand().$params['order_no']),
|
||
'notify_url' => $notify_url,
|
||
'openid' => ($trade_type == 'JSAPI') ? $openid : '',
|
||
'out_trade_no' => $params['order_no'].GetNumberCode(6),
|
||
'spbill_create_ip' => GetClientIP(),
|
||
'total_fee' => intval($params['total_price']*100),
|
||
'trade_type' => $trade_type,
|
||
'attach' => empty($params['attach']) ? $params['site_name'].'-'.$params['name'] : $params['attach'],
|
||
'sign_type' => 'MD5',
|
||
];
|
||
$data['sign'] = $this->GetSign($data);
|
||
return DataReturn('success', 0, $data);
|
||
}
|
||
|
||
/**
|
||
* 获取支付交易类型
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-08
|
||
* @desc description
|
||
*/
|
||
private function GetTradeType()
|
||
{
|
||
$type_all = [
|
||
'pc' => 'NATIVE',
|
||
'weixin' => 'JSAPI',
|
||
'h5' => 'MWEB',
|
||
'app' => 'APP'
|
||
];
|
||
|
||
// 手机中打开pc版本
|
||
if(APPLICATION_CLIENT_TYPE == 'pc' && IsMobile())
|
||
{
|
||
$type_all['pc'] = $type_all['h5'];
|
||
}
|
||
|
||
// 微信中打开
|
||
if(!empty($_SERVER['HTTP_USER_AGENT']) && stripos($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger') !== false)
|
||
{
|
||
$type_all['pc'] = $type_all['weixin'];
|
||
}
|
||
|
||
return isset($type_all[APPLICATION_CLIENT_TYPE]) ? $type_all[APPLICATION_CLIENT_TYPE] : '';
|
||
}
|
||
|
||
/**
|
||
* 支付回调处理
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2018-09-19
|
||
* @desc description
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
public function Respond($params = [])
|
||
{
|
||
$result = empty($GLOBALS['HTTP_RAW_POST_DATA']) ? $this->XmlToArray(file_get_contents('php://input')) : $this->XmlToArray($GLOBALS['HTTP_RAW_POST_DATA']);
|
||
|
||
if(isset($result['result_code']) && $result['result_code'] == 'SUCCESS' && $result['sign'] == $this->GetSign($result))
|
||
{
|
||
return DataReturn('支付成功', 0, $this->ReturnData($result));
|
||
}
|
||
return DataReturn('处理异常错误', -100);
|
||
}
|
||
|
||
/**
|
||
* [ReturnData 返回数据统一格式]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2018-10-06T16:54:24+0800
|
||
* @param [array] $data [返回数据]
|
||
*/
|
||
private function ReturnData($data)
|
||
{
|
||
// 参数处理
|
||
$out_trade_no = substr($data['out_trade_no'], 0, strlen($data['out_trade_no'])-6);
|
||
|
||
// 返回数据固定基础参数
|
||
$data['trade_no'] = $data['transaction_id']; // 支付平台 - 订单号
|
||
$data['buyer_user'] = $data['openid']; // 支付平台 - 用户
|
||
$data['out_trade_no'] = $out_trade_no; // 本系统发起支付的 - 订单号
|
||
$data['subject'] = $data['attach']; // 本系统发起支付的 - 商品名称
|
||
$data['pay_price'] = $data['total_fee']/100; // 本系统发起支付的 - 总价
|
||
return $data;
|
||
}
|
||
|
||
/**
|
||
* 签名生成
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-07
|
||
* @desc description
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
private function GetSign($params = [])
|
||
{
|
||
ksort($params);
|
||
$sign = '';
|
||
foreach($params as $k=>$v)
|
||
{
|
||
if($k != 'sign' && $v != '' && $v != null)
|
||
{
|
||
$sign .= "$k=$v&";
|
||
}
|
||
}
|
||
return strtoupper(md5($sign.'key='.$this->config['key']));
|
||
}
|
||
|
||
/**
|
||
* 数组转xml
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-07
|
||
* @desc description
|
||
* @param [array] $data [数组]
|
||
*/
|
||
private function ArrayToXml($data)
|
||
{
|
||
$xml = '<xml>';
|
||
foreach($data as $k=>$v)
|
||
{
|
||
$xml .= '<'.$k.'>'.$v.'</'.$k.'>';
|
||
}
|
||
$xml .= '</xml>';
|
||
return $xml;
|
||
}
|
||
|
||
/**
|
||
* xml转数组
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-07
|
||
* @desc description
|
||
* @param [string] $xml [xm数据]
|
||
*/
|
||
private function XmlToArray($xml)
|
||
{
|
||
if(!$this->XmlParser($xml)) return '';
|
||
|
||
return json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
|
||
}
|
||
|
||
|
||
/**
|
||
* 判断字符串是否为xml格式
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-01-07
|
||
* @desc description
|
||
* @param [string] $string [字符串]
|
||
*/
|
||
function XmlParser($string)
|
||
{
|
||
$xml_parser = xml_parser_create();
|
||
if(!xml_parse($xml_parser, $string, true))
|
||
{
|
||
xml_parser_free($xml_parser);
|
||
return false;
|
||
} else {
|
||
return (json_decode(json_encode(simplexml_load_string($string)),true));
|
||
}
|
||
}
|
||
|
||
/**
|
||
* [HttpRequest 网络请求]
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2017-09-25T09:10:46+0800
|
||
* @param [string] $url [请求url]
|
||
* @param [array] $data [发送数据]
|
||
* @param [boolean] $use_cert [是否需要使用证书]
|
||
* @param [int] $second [超时]
|
||
* @return [mixed] [请求返回数据]
|
||
*/
|
||
private function HttpRequest($url, $data, $use_cert = false, $second = 30)
|
||
{
|
||
$options = array(
|
||
CURLOPT_RETURNTRANSFER => true,
|
||
CURLOPT_HEADER => false,
|
||
CURLOPT_POST => true,
|
||
CURLOPT_SSL_VERIFYPEER => false,
|
||
CURLOPT_SSL_VERIFYHOST => false,
|
||
CURLOPT_POSTFIELDS => $data,
|
||
CURLOPT_TIMEOUT => $second,
|
||
);
|
||
|
||
if($use_cert == true)
|
||
{
|
||
// 退款 取消使用
|
||
//设置证书
|
||
//使用证书：cert 与 key 分别属于两个.pem文件
|
||
// $options[CURLOPT_SSLCERTTYPE] = 'PEM';
|
||
// $options[CURLOPT_SSLCERT] = WEB_ROOT.'cert/wechat_app_apiclient_cert.pem';
|
||
// $options[CURLOPT_SSLKEYTYPE] = 'PEM';
|
||
// $options[CURLOPT_SSLKEY] = WEB_ROOT.'cert/wechat_app_apiclient_key.pem';
|
||
}
|
||
|
||
$ch = curl_init($url);
|
||
curl_setopt_array($ch, $options);
|
||
$result = curl_exec($ch);
|
||
curl_close($ch);
|
||
return $result;
|
||
}
|
||
|
||
/**
|
||
* 授权
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2019-02-07T08:21:54+0800
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
public function GetUserOpenId($params = [])
|
||
{
|
||
// 参数
|
||
$input = input();
|
||
|
||
// 回调地址
|
||
$redirect_uri = urlencode(MyUrl('index/order/pay', ['id'=>$input['id'], 'payment_id'=>$input['payment_id']]));
|
||
|
||
die(MyUrl('index/order/pay', ['id'=>$input['id'], 'payment_id'=>$input['payment_id']]));
|
||
|
||
// 授权code
|
||
$url = 'https://open.weixin.qq.com/connect/oauth2/authorize?appid='.$this->config['appid'].'&redirect_uri='.$redirect_uri.'&response_type=code&scope=snsapi_base&state=callback#wechat_redirect';
|
||
return redirect($url);
|
||
}
|
||
|
||
/**
|
||
* 回调
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @datetime 2019-02-07T08:21:54+0800
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
public function Callback($params = [])
|
||
{
|
||
// 参数校验
|
||
if(empty($params['code']))
|
||
{
|
||
return DataReturn('授权code为空', -1);
|
||
}
|
||
|
||
// 远程获取access_token
|
||
return $this->RemoteAccessToken($params);
|
||
}
|
||
|
||
/**
|
||
* 远程获取access_token
|
||
* @author Devil
|
||
* @blog http://gong.gg/
|
||
* @version 1.0.0
|
||
* @date 2019-05-24
|
||
* @desc description
|
||
* @param [array] $params [输入参数]
|
||
*/
|
||
private function RemoteAccessToken($params = [])
|
||
{
|
||
// 获取access_token
|
||
$url = 'https://api.weixin.qq.com/sns/oauth2/access_token?appid='.$this->config['appid'].'&secret='.$this->config['secret'].'&code='.$params['code'].'&grant_type=authorization_code';
|
||
$data = json_decode(file_get_contents($url), true);
|
||
if(empty($data['access_token']))
|
||
{
|
||
if(empty($data['errmsg']))
|
||
{
|
||
return DataReturn('获取access_token失败', -100);
|
||
} else {
|
||
return DataReturn($data['errmsg'], -100);
|
||
}
|
||
}
|
||
return DataReturn('获取成功', 0, $data);
|
||
}
|
||
}
|
||
?>
|