php支付寶手機網頁支付類實例

來源地址： http://www.hongkevip.com/bianchengzhishi/PHP/36437.html

 

 

<?php

$alipayConfig = array(
        'key' => 'xxxxx',  //買賣安全校驗碼,用於簽名的32位密鑰
        'transport' => 'https',         //音訊驗證地址運用拜訪方式
        'seller_email' => 'xxxx', //賣家支付寶帳號，即收款帳戶
        'service' => 'create_direct_pay_by_user', //接口稱號
        'partner' => 'xxxxx', //協做者省份ID
        '_input_charset' => 'utf-8', //參數編碼字符集
        'sign_type' => 'MD5', //簽名方式，，不參加簽名,目前只能是MD5
        //如下兩個參數沒用
        'notify_url' => '', //效勞器異步通知頁面途徑
        'return_url' => '', //頁面跳轉通知頁面途徑
);


//2. 運用辦法：
//代碼以下:
//受權接口央求參數
$sum = 0.01; //測試用金額
$orderNo = '000001';
$req_data = '<direct_trade_create_req><subject>充值</subject>';
$req_data .= '<out_trade_no>'.$orderNo.'</out_trade_no>';
$req_data .= '<total_fee>'.$sum.'</total_fee>';
$req_data .= '<call_back_url>http://bingbingxiaowu.com/test.php</call_back_url>';
$req_data .= '<notify_url>http://bingbingxiaowu.com/test.php</notify_url>';
$req_data .= '<seller_account_name>'.$alipayConfig['seller_email'].'</seller_account_name>';
$req_data .= '</direct_trade_create_req>';
$params = array(
    'service' => 'alipay.wap.trade.create.direct',
    'format' => 'xml',
    'v' => '2.0',
    'partner' => $alipayConfig['partner'], //協做者省份ID
    'req_id' => date('Ymdhis'),
    'sec_id' => $alipayConfig['sign_type'],
    'req_data' => $req_data,
);
 
$alipay = new Alipay();
$alipay->key = $alipayConfig['key'];
$alipay->alipay_config = $params;
$url = $alipay->buildPageUrl();
header("location:$url");
//$this->redirect($url);

//3. 配置示例：
//代碼以下:
//支付寶相關配置



/**
 * 支付寶手機網頁支付
 *
 * @example
 *     創立支付央求
 *     $params = []; //支付寶文檔中所需的所有參數
 *     $alipay = new Alipay();
 *     $alipay->key = ''; //買賣安全校驗碼
 *     $this->alipay->alipay_config = $params;
 *     $alipay->buildRequest();
 *    
 *     驗證異步通知
 *     $this->alipay->key = ''; //買賣安全校驗碼
 *     $this->alipay->alipay_config = $data; //支付寶異步通知參數
 *     $this->alipay->verifyNotify();
 *
 * @package Alipay
 * @author Dyllen
 * @since Version 0.2
 */
class Alipay {
    /**
     * 買賣安全校驗碼
     *
     * @access public
     * @var string
     */
    public $key;
    
    /**
     * 央求參數配置，支付寶接口文檔中所需的參數
     *
     * @access public
     * @var array
     */
    public $alipay_config=array();
    
    /**
     * HTTPS證書，用於cURL
     * 默許和本類文件同級目錄的cacert.pem文件
     *
     * @access public
     * @var string
     */
    public $credential;
    
    public $notify_data = null;
    
    /**
     * 支付寶即時到帳網關地址
     */
    const ALIPAY_GATEWAY = 'https://mapi.alipay.com/gateway.do?';
    
    /**
     * HTTPS方式音訊驗證地址
     */
    const HTTPS_VERIFY_URL = 'https://mapi.alipay.com/gateway.do?service=notify_verify&';
    
    /**
     * HTTP方式音訊驗證地址
     */
    const HTTP_VERIFY_URL = 'http://notify.alipay.com/trade/notify_query.do?';
    
    /**
     * 移動網頁支付網關
     * @var string
     */
    const ALIPAY_PAGE_GATEWAY = 'http://wappaygw.alipay.com/service/rest.htm?';
    
    
    /**
     * 創立支付包即時到帳央求url
     *
     * @access public
     * @return void
     */
    public function buildRequest() {
        $this->alipay_config['sign'] = $this->signData();
        return self::ALIPAY_GATEWAY . $this->createQueryString('', true);       
    }
    
    /**
     * 創立支付寶手機網頁支付連接
     * @return string
     */
    public function buildPageUrl()
    {
        $this->alipay_config['sign'] = $this->signData();
        $url = self::ALIPAY_PAGE_GATEWAY. $this->createQueryString('');
        
        $response = $this->getHttpResponseGET($url);
        $res = $this->parseResponse(trim($response));
        //從新組合支付央求參數
        $this->alipay_config['service'] = 'alipay.wap.auth.authAndExecute';
        $this->alipay_config['req_data'] = '<auth_and_execute_req><request_token>'.$res['request_token'].'</request_token></auth_and_execute_req>';
        
        $this->alipay_config['sign'] = $this->signData();
        return self::ALIPAY_PAGE_GATEWAY. $this->createQueryString('', true);
    }
    
    /**
     * 驗證支付寶異步通知參數合法性
     *
     * @access public
     * @return boolean
     */
    public function verifyNotify() {
        $param_tmp = $this->filter(); //過濾待簽名數據
        if(!isset($this->alipay_config['notify_data'])) {
            return false;
        }
        $this->notify_data = $this->xmlToArray($this->alipay_config['notify_data']);
        $this->alipay_config['notify_id'] = $this->notify_data['notify_id'];
        $responseTxt = 'true';
        if( !empty( $this->alipay_config['notify_id'] ) ) {
            $responseTxt = $this->getResponse();
        }
        unset($this->alipay_config['notify_id']);
        $txt = 'service=';
        $txt .= $this->alipay_config['service'];
        $txt .= '&v='.$this->alipay_config['v'];
        $txt .= '&sec_id='.$this->alipay_config['sec_id'];
        $txt .= '¬ify_data='.$this->alipay_config['notify_data'];
        $txt .= $this->key;     
        $sign = md5($txt);
 
        if ( preg_match("/true$/i",$responseTxt) && ($sign == $this->alipay_config['sign']) ) {
            return true;
        } else {
            return false;
        }
    }
    
    /**
     * 解析受權接口前往
     * @param string $content 受權接口前往的文本數據
     * @throws \Exception
     * @return array
     */
    private function parseResponse($content) {
        parse_str($content, $arr);
        $data = isset($arr['res_data']) ? $arr['res_data'] : $arr['res_error'];
        $res_data = simplexml_load_string($data);
        if(strlen($res_data->request_token) == 0 || strlen($res_data->msg) > 0) {
            throw new \Exception('code:'.$res_data->code.','.$res_data->msg);
        }
        $arr['request_token'] = $res_data->request_token->__toString();
        return $arr;
    }
    
    /**
     * simpleXML對象轉成數組
     * @param string $xml
     * @return multitype:NULL
     */
    private function xmlToArray($xml)
    {
        $xml_obj = simplexml_load_string($xml, 'SimpleXMLIterator');
        $arr = array();
        $xml_obj->rewind(); //指針指向第一個元素
        while (1) {
            if( ! is_object($xml_obj->current()) )
            {
                break;
            }
            $arr[$xml_obj->key()] = $xml_obj->current()->__toString();
            $xml_obj->next(); //指向下一個元素
        }
        return $arr;
    }
    
    /**
     * 簽名數據
     * 簽名規則:
     *     sign和sign_type不參加簽名，需求去掉
     *     對參數數組依據鍵名按照字母順序升序排序
     *     排序完成以後鍵值對用&字符銜接，組成URL的查詢字符串方式待簽名字符串，待簽名數據不需用url encoding
     *     MD5簽名：私鑰拼接到待簽名字符串的前面，而後用md5對字符串運算，失掉32位簽名結果
     *    
     * @return string 已簽名數據
     */
    private function signData() {
        $param_tmp = $this->getSignString(); //待簽名字符串
        
        if( !isset($this->key) ) {
            return FALSE;
        }
        
        $sign = '';
        
        //簽名數據
        switch ($this->alipay_config['sec_id']) {
            case '001': //rsa
                $sign = $this->rsaSign($param_tmp);
                break;
            case 'DES':
                break;
            default:
                $sign = $this->md5Sign($param_tmp);
        }
        
        return $sign;
    }
    
    /**
     * MD5加密字符串
     *
     * @access private
     * @param string $data 待加密字符串
     * @return string
     */
    private function md5Sign( $data ) {
        return md5($data . $this->key);
    }
    
    /**
     * RSA 加密字符串
     *
     * @param string $data 待加密字符串
     * @return string
     */
    private function rsaSign( $data ) {
        return false;
    }
    
    /**
     * 取得待簽名數據
     *
     * @access private
     * @return string
     */
    private function getSignString() {
        $param_tmp = $this->filter(); //過濾待簽名數據
        
        //排序
        ksort($param_tmp);
        reset($param_tmp);
        
        //創立查詢字符串方式的待簽名數據
        return $this->createQueryString($param_tmp);
    }
    
    /**
     * 過濾待簽名數據，去掉sing、sing_type及空值
     *
     * @access private
     * @return array
     */
    private function filter() {
        $para_filter = array();
        foreach($this->alipay_config as $key => $value){
            if($key == "sign" || $key == "sign_type" || empty($value)) continue;
            else $para_filter[$key] = $value;
        }
        return $para_filter;
    }
    
    /**
     * 用&拼接字符串,構成URL查詢字符串
     *
     * @access private
     * @param array $data
     * @param boolean $is_encode 可否對值作urlencode
     * @return string
     */
    private function createQueryString($data=NULL, $is_encode=false ) {
        $arr = empty($data) ? $this->alipay_config : $data;
        $arg = '';
        foreach( $arr as $key => $value ) {
            if($is_encode) {
                $key = urlencode($key);
                $value = urlencode($value);
            }
            $arg .= $key . '=' . $value . '&';
        }
        $arg = substr($arg, 0, strlen($arg)-1); //去掉最後一個&
        //假設存在本義字符，那麼去掉本義
        if(get_magic_quotes_gpc()) {$arg = stripslashes($arg);}
        
        return $arg;
    }
    
    /**
     * 獲取遠程效勞器ATN結果,驗證前往URL
     *
     * 驗證結果集：
     * invalid命令參數不對 出現這個錯誤，請檢測前往處置中partner和key可否爲空
     * true 前往正確信息
     * false 請檢討防火牆或許是效勞器阻止端口效果以及驗證時間可否超過一分鐘
     *
     * @access private
     * @return 效勞器ATN結果
     */
    private function getResponse() {
        //載入支付配置
        $config = $alipayConfig;
        
        $transport = strtolower(trim($config['transport']));
        $partner = trim($config['partner']);
        $veryfy_url = '';
        if($transport == 'https') {
            $veryfy_url = self::HTTPS_VERIFY_URL;
        }
        else {
            $veryfy_url = self::HTTP_VERIFY_URL;
        }
        $veryfy_url = $veryfy_url."partner=" . $partner . "¬ify_id=" . $this->alipay_config['notify_id'];
        $responseTxt = $this->getHttpResponseGET($veryfy_url);
    
        return $responseTxt;
    }
    
    /**
     * 取證書，用於cURL的央求
     *
     * @access private
     * @return string 證書途徑
     */
    private function getCr() {
        if( ! empty($this->credential) ) {
            return $this->credential;
        }
        return __DIR__ . DIRECTORY_SEPARATOR .'cacert.pem';
    }
    
    /**
     * 遠程獲取數據，POST形式
     * 留意：
     * 1.運用Crul需求修正效勞器中php.ini文件的設置，找到php_curl.dll去掉前面的";"就好了
     * 2.文件夾中cacert.pem是SSL證書請保證其途徑有效，目前默許途徑是：getcwd().'\\cacert.pem'
     *
     * @param $url 指定URL殘缺途徑地址
     * @param $cacert_url 指定之後任務目錄相對途徑
     * @param $para 央求的數據
     * @param $input_charset 編碼格式。默許值：空值
     * return 遠程輸入的數據
     */
    private function getHttpResponsePOST($url, $para, $input_charset = '') {
    
        if (trim($input_charset) != '') {
            $url = $url."_input_charset=".$input_charset;
        }
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);//SSL證書認證
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//嚴厲認證
        curl_setopt($curl, CURLOPT_CAINFO,$this->getCr());//證書地址
        curl_setopt($curl, CURLOPT_HEADER, 0 ); // 過濾HTTP頭
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);// 顯示輸入結果
        curl_setopt($curl, CURLOPT_POST,true); // post傳輸數據
        curl_setopt($curl, CURLOPT_POSTFIELDS,$para);// post傳輸數據
        $responseText = curl_exec($curl);
        //var_dump( curl_error($curl) );//假設執行curl進程中出現異常，可翻開此開關，以便查看異常內容
        curl_close($curl);
    
        return $responseText;
    }
    
    /**
     * 遠程獲取數據，GET形式
     * 留意：
     * 1.運用Crul需求修正效勞器中php.ini文件的設置，找到php_curl.dll去掉前面的";"就好了
     * 2.文件夾中cacert.pem是SSL證書請保證其途徑有效，目前默許途徑是：getcwd().'\\cacert.pem'
     *
     * @param $url 指定URL殘缺途徑地址
     * @param $cacert_url 指定之後任務目錄相對途徑
     * return 遠程輸入的數據
     */
    private function getHttpResponseGET($url) {
        
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_HEADER, 0 ); // 過濾HTTP頭
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);// 顯示輸入結果
//        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);//SSL證書認證
//        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//嚴厲認證
//        curl_setopt($curl, CURLOPT_CAINFO,$this->getCr());//證書地址
        $responseText = curl_exec($curl);
        //var_dump( curl_error($curl) );exit;//假設執行curl進程中出現異常，可翻開此開關，以便查看異常內容
        curl_close($curl);
    
        return $responseText;
    }
}