<?php
class Index{
// 首先获取小程序如下配置
private $wxpayconf = [
'appid' => 'wx0ad699db1a9ff6d3', // 小程序appid
'mch_id' => 1513841901, // 小程序商户号
'key' => 'qwer122asdauiyfue1nm65qa12dds1r1', // key 获取设置路径：微信商户平台(pay.weixin.qq.com)-->账户设置-->API安全-->密钥设置，支付API秘钥
//'appsecret' => 'd624aca96d0349eec924cde1baec36cb', // 小程序 APPSecret，这里暂时用不到
'order_url' => 'https://api.mch.weixin.qq.com/pay/unifiedorder', //统一下单接口地址
'orderquery_url' => 'https://api.mch.weixin.qq.com/pay/orderquery',//查询订单接口地址
'closeorder_url' => 'https://api.mch.weixin.qq.com/pay/closeorder',//关闭订单接口地址
'refund_url' => 'https://api.mch.weixin.qq.com/secapi/pay/refund',//申请退款接口地址
'refundquery_url' => 'https://api.mch.weixin.qq.com/pay/refundquery'//查询退款接口地址
];
/*
* 1.预支付 通过微信 https://api.mch.weixin.qq.com/pay/unifiedorder 接口进行预支付，详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_1&index=1
* 2.通过预支付返回的prepay_id 进行重新组建数据，组建成功后返回给前端，前端进行弹框支付 ,重新组建数据详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=7_7&index=3
* 3.notify_url 地址就是回调地址，在前端支付成功后，微信会往这个地址发送支付成功订单的相关信息，小程序这个地址不允许有参数，在这个地址中处理微信发送的支付成功订单信息
*/
// 统一下单
function index() {
//这里是封装支付接口给服务商，所以一些商品信息需要获取
$openid = $_POST ['openid'];
$notify_url = $_POST ['notify_url']; // 支付成功后回调地址，类似 http://www.gaoqingsong.com/index.php 这样后面不能有参数，这里因为封装接口给别人用，所以对方需要提供一个回调接口，将微信回调的xml信息返回给对方
$body = $_POST ['body']; //商品描述
$out_trade_no = $_POST ['out_trade_no']; // 订单号
$total_fee = $_POST ['total_fee']; // 订单总金额，单位为分
$userIP = $_POST ['userIP'];
// 远程终端ip
$userIP = !empty($userIP) ? $userIP : $_SERVER ['REMOTE_ADDR'];
//获取随机字符串
$nonce_str = $this->getNonceStr ();
$sign ['appid'] = $this->wxpayconf ['appid'];
$sign ['mch_id'] = $this->wxpayconf ['mch_id'];
$sign ['nonce_str'] = $nonce_str;
$sign ['body'] = !empty($body) ? $body : '集妆箱商品';
$sign ['out_trade_no'] = $out_trade_no;
$sign ['total_fee'] = $total_fee;
$sign ['spbill_create_ip'] = $userIP; // 终端客户端ip
$sign ['trade_type'] = 'JSAPI'; // 小程序支付值固定：JSAPI
$sign ['openid'] = $openid;
$sign ['notify_url'] = 'https://xcxoauth.beauty-box.cn/index/index/payres';//$notify_url;//先将客户的$notify_url保存在订单表数据中（代码中未写），微信回调先调用内部的payres方法，payres记录相关信息后，再找到对应订单数据中的$notify_url将微信的xml信息回调给客户;
$sign ['sign'] = $this->getSign ( $sign, $this->wxpayconf ['key'] );
// 微信统一下单接口
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
// 提交订单数据，预支付
$xml_result = $this->postXmlCurl ( $xmlData, $this->wxpayconf ['order_url'] );
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//如果预支付提交订单没问题，则组织相关信息返回给前端，进行支付方，支付成功后，微信会往回调页 $notify_url 发送订单信息
if ($wx_result ['return_code'] == 'SUCCESS' && $wx_result ['result_code'] == 'SUCCESS') {
$prepay_id = $wx_result ['prepay_id'];
$return ['appId'] = $this->wxpayconf ['appid'];
$return ['timeStamp'] = ( string ) time ();
$return ['nonceStr'] = $nonce_str;
$return ['package'] = 'prepay_id=' . $prepay_id;
$return ['signType'] = 'MD5';
$return ['paySign'] = $this->getSign ( $return, $this->wxpayconf ['key'] );
echo json_encode ( $return );
} else {
if ($wx_result ['return_code'] == 'FAIL') {
$info ['return_msg'] = $wx_result ['return_msg'];
}
if ($wx_result ['return_code'] == 'SUCCESS' && $wx_result ['result_code'] == 'FAIL') {
$info ['err_code'] = $wx_result ['err_code'];
$info ['err_code_des'] = $wx_result ['err_code_des'];
}
echo json_encode ( $info );
}
}
//支付结果回调方法
public function payres(){
//记录日志
$log_filename = "log/payres.txt";
$log_content = ' ================ 访问接口 payres ================= 时间 : ' . date("Y-m-d H:i:s");
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
//获取微信回调post传回的xml数据
$xml_result = file_get_contents('php://input');
$log_content = "\n\r\n\r=====接收到的xml数据 : " . $xml_result . " ======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//订单表数据对象，这里假设本地有订单表，字段名和微信订单参数名一致，保存下单时的订单数据
//这里模型框架用 thinkPHP5
$this->order_model = new OrderModel ();
if ($wx_result ['return_code'] == 'SUCCESS') {
//先获取下订单数据
$where = array();
$where['out_trade_no'] = $wx_result['out_trade_no'];
$where['nonce_str'] = $wx_result['nonce_str'];
//$where['sign'] = $wx_result['sign'];
$where['total_fee'] = $wx_result['total_fee'];
$order = $this->order_model->where($where)->find();
//订单信息
$log_content = "\n\r\n\r=====查询本地的对应订单信息 : " . json_encode($order) . " ======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
//如果订单存在并且为未支付状态，订单表字段 pay_status 支付状态，1成功，默认0待支付
if(!empty($order['id']) && $order['pay_status'] != 1){
//支付成功后保存数据，并往供应商提供的回调页面传微信回调信息
$data = array();
$data['id'] = $order['id'];
$data['time_end'] = !empty($wx_result['time_end'])?$wx_result['time_end']:null;
$data['openid'] = !empty($wx_result['openid'])?$wx_result['openid']:null;
$data['bank_type'] = !empty($wx_result['bank_type'])?$wx_result['bank_type']:null;
$data['cash_fee'] = !empty($wx_result['cash_fee'])?$wx_result['cash_fee']:null;
$data['transaction_id'] = !empty($wx_result['transaction_id'])?$wx_result['transaction_id']:null;
$data['return_code'] = !empty($wx_result['return_code'])?$wx_result['return_code']:null;
$data['result_code'] = !empty($wx_result['result_code'])?$wx_result['result_code']:null;
$data['notify_str'] = $xml_result;
$data['notify_time'] = date("Y-m-d H:i:s");
if($wx_result ['result_code'] == 'SUCCESS'){
$data['pay_status'] = 1;
}
//支付成功后保存的数据
$log_content = "\n\r\n\r=====支付成功后保存的数据 : " . json_encode($data) . " ======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
//保存支付数据
if($this->order_model->save($data, $data['id']) !== false){
/*
//如果是封装支付接口，则还需把微信返回的xml数据传给接口使用者
//给第三方返回信息
$this->postXmlCurl ( $xml_result, $order ['notify_url'] );
//保存成功后回传客户端的url
$log_content = "\n\r\n\r=====保存成功后回传客户端的url : " . $order ['notify_url'] . " ======================================================\n\r";
$log_content .= "\n\r\n\r=====保存成功后回传客户端的xml : " . $xml_result . " ======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
*/
//给微信返回信息
$sign ['return_code'] = 'SUCCESS';
$sign ['return_msg'] = 'OK';
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
$log_content = "\n\r\n\r=====返回给微信端 xml : " . $xmlData . " ======================================================\n\r";
$log_content .= "\n\r\n\r===== payres 接口结束======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
echo $xmlData;exit;
}
}
}
$log_content = "\n\r\n\r===== payres 接口结束======================================================\n\r";
file_put_contents ( $log_filename, $log_content, FILE_APPEND );
}
//查询订单，详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_2
public function orderquery(){
$out_trade_no = $_POST ['out_trade_no']; // 商户订单号
//获取随机字符串
$nonce_str = $this->getNonceStr ();
$sign ['appid'] = $this->wxpayconf ['appid'];
$sign ['mch_id'] = $this->wxpayconf ['mch_id'];
$sign ['out_trade_no'] = $out_trade_no;
$sign ['nonce_str'] = $nonce_str;
$sign ['sign'] = $this->getSign ( $sign, $this->wxpayconf ['key'] );
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
// 提交查询订单数据
$xml_result = $this->postXmlCurl ( $xmlData, $this->wxpayconf ['orderquery_url'] );
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//从查询订单起，返回结果不需要再签名，直接将结果返回，判断逻辑由调用端操作
//返回结果详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_2 返回结果
echo json_encode ($wx_result);
exit;
}
//关闭订单，详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_3
public function closeorder(){
$out_trade_no = $_POST ['out_trade_no']; // 商户订单号
//获取随机字符串
$nonce_str = $this->getNonceStr ();
$sign ['appid'] = $this->wxpayconf ['appid'];
$sign ['mch_id'] = $this->wxpayconf ['mch_id'];
$sign ['out_trade_no'] = $out_trade_no;
$sign ['nonce_str'] = $nonce_str;
$sign ['sign'] = $this->getSign ( $sign, $this->wxpayconf ['key'] );
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
// 提交查询订单数据
$xml_result = $this->postXmlCurl ( $xmlData, $this->wxpayconf ['closeorder_url'] );
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//返回结果详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_3 返回结果
echo json_encode ($wx_result);
exit;
}
//申请退款，详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_4
//退款需用到证书，在 postXmlCurl 方法中用到的证书在，微信商户平台(pay.weixin.qq.com)-->账户设置-->API安全-->证书下载 。证书文件有四个，这里用三个，详见 postXmlCurl 方法中证书调用
function refund(){
$out_trade_no = $_POST ['out_trade_no']; // 订单号
$out_refund_no = $_POST ['out_refund_no']; // 商户退款单号
$total_fee = $_POST ['total_fee']; // 订单总金额，单位为分
$refund_fee = $_POST ['refund_fee']; // 退款金额，单位为分
$notify_url = $_POST ['notify_url'];//退款结果通知url
//获取随机字符串
$nonce_str = $this->getNonceStr ();
$sign ['appid'] = $this->wxpayconf ['appid'];
$sign ['mch_id'] = $this->wxpayconf ['mch_id'];
$sign ['nonce_str'] = $nonce_str;
$sign ['out_trade_no'] = $out_trade_no;
$sign ['out_refund_no'] = $out_refund_no;
$sign ['total_fee'] = $total_fee;
$sign ['refund_fee'] = $refund_fee;
$sign ['notify_url'] = $notify_url;
$sign ['sign'] = $this->getSign ( $sign, $this->wxpayconf ['key'] );
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
// 提交退款申请
$xml_result = $this->postXmlCurl ( $xmlData, $this->wxpayconf ['refund_url'], true );
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//返回结果详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_4 返回结果
echo json_encode ($wx_result);
exit;
}
//退款查询，详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_5
function refundquery(){
$out_refund_no = $_POST ['out_refund_no']; // 商户退款单号
//获取随机字符串
$nonce_str = $this->getNonceStr ();
$sign ['appid'] = $this->wxpayconf ['appid'];
$sign ['mch_id'] = $this->wxpayconf ['mch_id'];
$sign ['nonce_str'] = $nonce_str;
$sign ['out_refund_no'] = $out_refund_no;
$sign ['sign'] = $this->getSign ( $sign, $this->wxpayconf ['key'] );
// 先将数组换成XML格式
$xmlData = $this->arrayToXml ( $sign );
// 提交退款申请
$xml_result = $this->postXmlCurl ( $xmlData, $this->wxpayconf ['refundquery_url']);
// 将返回信息从XML还原回数组
$wx_result = $this->xmlToArray ( $xml_result );
//返回结果详见 https://pay.weixin.qq.com/wiki/doc/api/wxa/wxa_api.php?chapter=9_5 返回结果
echo json_encode ($wx_result);
exit;
}
// 签名方法
function getSign($params, $key1) {
// 签名步骤一：按字典序排序数组参数
ksort ( $params );
$singstring = '';
foreach ( $params as $key => $value ) {
$singstring .= '&' . $key . '=' . $value;
}
$string = $singstring . "&key=" . $key1;
// 签名步骤三：MD5加密
$string = ltrim ( $string, '&' );
$string = md5 ( $string );
// 签名步骤四：所有字符转为大写
$result = strtoupper ( $string );
return $result;
}
// 数组转xml
function arrayToXml($arr, $is_array = false) {
if (! $is_array) {
$xml = '<xml>';
}
foreach ( $arr as $key => $val ) {
if (is_array ( $val )) {
$xml .= "<" . $key . ">" . $this->arrayToXml ( $val, true ) . "</" . $key . ">";
} else {
$xml .= "<" . $key . ">" . $val . "</" . $key . ">";
}
}
if (! $is_array) {
$xml .= "</xml>";
}
return $xml;
}
// 数组转xml，备用，第一个不好用，用这个
protected function arrayToXml_bak($arr) {
$xml = "<xml>";
foreach ( $arr as $key => $val ) {
if (is_numeric ( $val )) {
$xml .= "<" . $key . ">" . $val . "</" . $key . ">";
} else {
$xml .= "<" . $key . "><![CDATA[" . $val . "]]></" . $key . ">";
}
}
$xml .= "</xml>";
return $xml;
}
// XML 转数组
protected function xmlToArray($xml) {
$array_data = json_decode ( json_encode ( simplexml_load_string ( $xml, 'SimpleXMLElement', LIBXML_NOCDATA ) ), true );
return $array_data;
}
// 发送xml请求方法，$verifyhost是否验证主机证书，退款时需要验证
private static function postXmlCurl($xml, $url, $verifyhost = false, $second = 30) {
$ch = curl_init ();
curl_setopt ( $ch, CURLOPT_URL, $url );
curl_setopt ( $ch, CURLOPT_HEADER, FALSE );
curl_setopt ( $ch, CURLOPT_RETURNTRANSFER, TRUE );
// 是否需要证书验证，支付时不需要，退款时需要验证证书
if($verifyhost == true){
curl_setopt( $ch, CURLOPT_SSL_VERIFYPEER, TRUE);//证书检查
curl_setopt( $ch, CURLOPT_SSLCERTTYPE, 'pem');
curl_setopt( $ch, CURLOPT_SSLCERT, '/var/www/html/xcxoauth.beauty-box.cn/public/cert/apiclient_cert.pem');
curl_setopt( $ch, CURLOPT_SSLCERTTYPE, 'pem');
curl_setopt( $ch, CURLOPT_SSLKEY, '/var/www/html/xcxoauth.beauty-box.cn/public/cert/apiclient_key.pem');
//curl_setopt( $ch, CURLOPT_SSLCERTTYPE, 'pem');
curl_setopt( $ch, CURLOPT_CAINFO, '/var/www/html/xcxoauth.beauty-box.cn/public/cert/rootca.pem');
}else{
curl_setopt ( $ch, CURLOPT_SSL_VERIFYPEER, FALSE );
curl_setopt ( $ch, CURLOPT_SSL_VERIFYHOST, FALSE );
}
// post提交方式
curl_setopt ( $ch, CURLOPT_POST, TRUE );
curl_setopt ( $ch, CURLOPT_POSTFIELDS, $xml );
curl_setopt ( $ch, CURLOPT_CONNECTTIMEOUT, 20 );
// 设置超时
curl_setopt ( $ch, CURLOPT_TIMEOUT, $second );
set_time_limit ( 0 );
// 运行curl
$data = curl_exec ( $ch );
// 返回结果
if ($data) {
curl_close ( $ch );
return $data;
} else {
$error = curl_errno ( $ch );
curl_close ( $ch );
throw new WxPayException ( "curl出错，错误码:$error" );
}
}
/*
* 生成随机字符串方法
*/
protected function getNonceStr($length = 32) {
$chars = "abcdefghijklmnopqrstuvwxyz0123456789";
$str = "";
for($i = 0; $i < $length; $i ++) {
$str .= substr ( $chars, mt_rand ( 0, strlen ( $chars ) - 1 ), 1 );
}
return $str;
}
}
浙公网安备 33010602011771号