支付
思路,前端请求后端准备好的参数(用openid,course_id请求行 签名等信息),去支付,后端在回调地址方法里,写支付成功后的业务逻辑
https://blog.csdn.net/ufo00001/article/details/75712479
alipy_log="/data/web/web/Public/notify_url.log";
//证书路径
//$this->sslcert_path = './xxxx/cert/apiclient_cert.pem';
//$this->sslkey_path = './xxxx/cert/apiclient_key.pem';
$this->sslcert_path = '/data/web/web/xxxx/example/cert/apiclient_cert.pem';
$this->sslkey_path = '/data/web/web/xxxx/example/cert/apiclient_key.pem';
$this->productModel =D('Product');
$this->orderModel = D('Order');
}
//发起拼团时,去支付。(实战课程拼团)
public function unifiedOrder2() {
$config = array('appid'=>"wxxxxxxxxxxxxxxxxx",'grant_type'=>"authorization_code",'appsecret'=>"41b0xxxxxxxxxxxxxxxxx",'mchid'=>'1xxxxxx401','key' => 'ece3c7b6bxxxxxx960d40a','sslcert_path'=>'./cert/apiclient_cert.pem','sslkey_path'=>'./cert/apiclient_key.pem','company'=>'xxx公司');
$unifiedOrder = new \UnifiedOrder_pub($config);
// 接收参数
$data = I('post.','','strip_tags');
$openid = $data['openid'];
$total_fee = $data['price'];
/*$key = $data['key'];
$total_fee = $data['price'];
// 获取用户的openid
$where['session_id'] = $key;
$oid = M('session2') ->field('session_value') -> where($where) -> find();*/
//设置统一支付接口参数
$pay_type = 'HR实战课程';
$out_trade_no = ordersn();
$unifiedOrder->setParameter("body","HR实战课程");//商品描述
$unifiedOrder->setParameter("out_trade_no",$out_trade_no);//商户订单号
$unifiedOrder->setParameter("total_fee",($total_fee * 100));//总金额
$unifiedOrder->setParameter("product_id",($total_fee * 100));//总金额
$unifiedOrder->setParameter("notify_url", 'http://www.xxxx.com/index.php/Home/Smallwx/notify');//通知地址 #测试
$unifiedOrder->setParameter("trade_type","JSAPI");//交易类型
$unifiedOrder->setParameter("time_start",date("YmdHis"));
$unifiedOrder->setParameter("time_expire",date("YmdHis",time()+600));
$unifiedOrder->setParameter("openid",$openid);
//将组合数据再次签名
$prepayId = $unifiedOrder -> getPrepayId();
$params = array();
$params['appId'] = "wxxxxxxxxxxxxxxxxx";
$params['timeStamp'] = ''.time();
$params['nonceStr'] = md5(uniqid(mt_rand(),true));
$params['nonceStr'] = $unifiedOrder -> createNoncestr();
$params['package'] = 'prepay_id='.$prepayId;
$params['signType'] = 'MD5';
$sign = $unifiedOrder -> getSign($params);
$params['paySign'] = $sign;
// 返回支付参数
$this -> ajaxReturn($params);
}
回调
/**
* 〈微信异步通知页面〉
* @return[返回类型说明]
*/
public function notify()
{
//使用通用通知接口
$notify = new \Notify_pub();
//存储微信的回调
$xml = $GLOBALS['HTTP_RAW_POST_DATA'];
$notify->saveData($xml);
//将xml转为array
//验证签名,并回应微信。
//对后台通知交互时,如果微信收到商户的应答不是成功或超时,微信认为通知失败,
//微信会通过一定的策略(如30分钟共8次)定期重新发起通知,
//尽可能提高通知的成功率,但微信不保证通知最终能成功。
if($notify->checkSign() == FALSE){
$notify->setReturnParameter("return_code","FAIL");//返回状态码
$notify->setReturnParameter("return_msg","签名失败");//返回信息
}else{
$notify->setReturnParameter("return_code","SUCCESS");//设置返回码
}
$returnXml = $notify->returnXml();
//echo $returnXml;
//==商户根据实际情况设置相应的处理流程,此处仅作举例=======
//以log文件形式记录回调信息
// $log_ = new Log_();
//$log_name= "/data/web/web/Public/notify_url.log";//log文件路径
//$this->log_result($log_name,"【接收到的notify通知】:\n".$xml."\n");
log_into_txt($this->alipy_log,"【接收到的notify通知】:\n".$xml."\n");
if($notify->checkSign() == TRUE)
{
if ($notify->data["return_code"] == "FAIL") {
//此处应该更新一下订单状态,商户自行增删操作
//$this->log_result($log_name,"【通信出错】:\n".$xml."\n");
log_into_txt($this->alipy_log,"【通信出错】:\n".$xml."\n");
$this->error("1");
}
elseif($notify->data["result_code"] == "FAIL"){
//此处应该更新一下订单状态,商户自行增删操作
log_into_txt($this->alipy_log,"【业务出错】:\n".$xml."\n");
$this->error("失败2");
}else{
}
}
}
退款
//拼团未成功时,退款
public function OrderRefund(){ //$user_id,$out_trade_no,$transaction_id,$out_refund_no,$total_fee,$refund_fee,$refund_desc,$targetType='HR实战拼团'
//接收参数
$out_trade_no = 'HA167943625999159084';
$out_refund_no = 'HA167943625999159084';
$transaction_id = '4200000193201810169207759790';
$total_fee = 0.01*100;//单位分//订单金额
$refund_fee = 0.01*100;//单位分//退款金额
$refund_desc = '正常退款';
$user_id = I('user_id',107208);
$targetType='HR实战拼团';
//调用退款接口
$result = $this->refundWeChat($out_trade_no,$transaction_id,$out_refund_no,$total_fee,$refund_fee,$refund_desc,$targetType);
//返回结果判断
$res2 = 0;
if($result['return_code'] == 'SUCCESS' && $result['result_code'] == 'SUCCESS'){//退款成功
log_into_txt($this->alipy_log,"【退款成功】:\n");
$insert_data['status'] = 'success';
$res2 = 1;
//修改订单状态
$res = $this->orderModel->updateOrderInfo($out_trade_no,['operation_state'=>6]);
if($res === false){
log_into_txt($this->alipy_log,"【product_order表,订单状态修改失败】:\n");
$insert_data['status'] = 'failed';
}
}else{
log_into_txt($this->alipy_log,"【退款失败】:\n");
$insert_data['status'] = 'failed';
}
//返回数据保存至,order_refund,表
$insert_data['userId'] = $user_id;
$insert_data['reundType'] = 'weChat';
$insert_data['targetType'] = $targetType;
$insert_data['expectedAmount'] = $refund_fee/100;
$insert_data['actualAmount'] = $result['refund_fee']/100;
$insert_data['createdTime'] = time();
$insert_data['returnCode'] = $result['return_code'];
$insert_data['returnMsg'] = $result['return_msg'];
$insert_data['returnSubcode'] = $result['err_code'];
$insert_data['returnSubmsg'] = $result['err_code_des'];
$insert_data['out_trade_no'] = $out_trade_no;
$insert_data['trade_no'] = $result['transaction_id'];
$insert_data['buyer_logon_id'] = $result['appid'];
$insert_data['buyer_user_id'] = $result['mch_id'];
$insert_data['fund_change'] = $result['refund_fee'];
$insert_data['gmt_refund_pay'] = date('Y-m-d H:i:s');
$insert_data['sign'] = $result['sign'];
log_into_txt($this->alipy_log,"【order_refund表数据】:".json_encode($insert_data)."\n");
$res1 = M('order_refund')->data($insert_data)->add();
log_into_txt($this->alipy_log,"【order_refund表数据入库结果】:{$res1}\n",'foot');
return $res2;
}
public function initWeChat($notify_type=''){
//回调地址
$notify_url = "http://www.xxxx.com/index.php/Smallwx/notify";
//统一初始化
$appid = "wxxxxxxxxxxxxxxxxx";//C('app_wechat_config.appid');
$mch_id = "1xxxxxxxxx";//C('app_wechat_config.mch_id');
$key = "exxxxxxxxxxxxxxxxxxxxxx";//C('app_wechat_config.key');
$wechatAppPay = new \Home\Controller\WechatAppPay($appid, $mch_id, $notify_url, $key);
return $wechatAppPay;
}
//微信-统一退款
public function refundWeChat($out_trade_no,$transaction_id,$out_refund_no='',$total_fee,$refund_fee,$refund_desc='正常退款',$targetType=''){
//初始化微信支付工具类
$wechatAppPay = $this->initWeChat();
$params['out_trade_no'] = $out_trade_no;//商户系统内部订单号
$params['transaction_id'] = $transaction_id;//微信生成的订单号
$params['out_refund_no'] = $out_refund_no;//商户系统内部的退款单号
$params['total_fee'] = $total_fee; //订单金额 只能为整数 单位为分
$params['refund_fee'] = $refund_fee;//退款金额
$params['refund_desc'] = $refund_desc;//商品描述
$params['refund_account'] = 'REFUND_SOURCE_UNSETTLED_FUNDS';//退款资金来源,未结算资金退款,默认
// $params['refund_account'] = 'REFUND_SOURCE_RECHARGE_FUNDS';//退款资金来源,可用余额退款
$params['sslcert_path'] = $this->sslcert_path;//证书pem格式.apiclient_cert.pem
$params['sslkey_path'] = $this->sslkey_path;//证书密钥pem格式,apiclient_key.pem
log_into_txt($this->alipy_log,"【发起微信退款申请】:\n",'head');
log_into_txt($this->alipy_log,"【申请来源】:{$targetType}\n");
log_into_txt($this->alipy_log,"【微信退款请求参数】:".json_encode($params)."\n");
$result = $wechatAppPay->refundOrder($params);
log_into_txt($this->alipy_log,"【微信返回结果】:".json_encode($result)."\n");
//验签
$res=$wechatAppPay->checkSign($result);
if($res){
log_into_txt($this->alipy_log,"【验签成功】:\n");
return $result;
}else{
log_into_txt($this->alipy_log,"【验签失败】:\n");
return false;
}
}
退款时用到的类
//填写微信分配的公众账号ID
* 'mch_id' => //填写微信支付分配的商户号
* 'notify_url'=> //填写微信支付结果回调地址
* 'key' => //填写微信商户支付密钥
* );
* 统一下单方法
* $WechatAppPay = new wechatAppPay($options);
* $params['body'] = '商品描述'; //商品描述
* $params['out_trade_no'] = '1217752501201407'; //自定义的订单号,不能重复
* $params['total_fee'] = '100'; //订单金额 只能为整数 单位为分
* $params['trade_type'] = 'APP'; //交易类型 JSAPI | NATIVE |APP | WAP
* $wechatAppPay->unifiedOrder( $params );
*/
class WechatAppPay
{
//接口API URL前缀
const API_URL_PREFIX = 'https://api.mch.weixin.qq.com';
//下单地址URL
const UNIFIEDORDER_URL = "/pay/unifiedorder";
//查询订单URL
const ORDERQUERY_URL = "/pay/orderquery";
//关闭订单URL
const CLOSEORDER_URL = "/pay/closeorder";
//退款订单URL
const REFUNDORDER_URL = "/secapi/pay/refund";
//公众账号ID
private $appid;
//商户号
private $mch_id;
//随机字符串
private $nonce_str;
//签名
private $sign;
//商品描述
private $body;
//商户订单号
private $out_trade_no;
//支付总金额
private $total_fee;
//终端IP
private $spbill_create_ip;
//支付结果回调通知地址
private $notify_url;
//交易类型
private $trade_type;
//支付密钥
private $key;
//证书路径
private $SSLCERT_PATH;
private $SSLKEY_PATH;
//所有参数
private $params = array();
public function __construct($appid, $mch_id, $notify_url, $key)
{
$this->appid = $appid;
$this->mch_id = $mch_id;
$this->notify_url = $notify_url;
$this->key = $key;
}
/**
* 下单方法
* @param $params 下单参数
*/
public function unifiedOrder( $params ){
$this->body = $params['body'];
$this->out_trade_no = $params['out_trade_no'];
$this->total_fee = $params['total_fee'];
$this->trade_type = $params['trade_type'];
$this->params['openid'] = $params['openid'];
$this->nonce_str = $this->genRandomString();
$this->spbill_create_ip = $params['spbill_create_ip'] ? $params['spbill_create_ip'] :$_SERVER['REMOTE_ADDR'];
$this->params['appid'] = $this->appid;
$this->params['mch_id'] = $this->mch_id;
$this->params['nonce_str'] = $this->nonce_str;
$this->params['body'] = $this->body;
$this->params['out_trade_no'] = $this->out_trade_no;
$this->params['total_fee'] = $this->total_fee;
$this->params['spbill_create_ip'] = $this->spbill_create_ip;
$this->params['notify_url'] = $this->notify_url;
$this->params['trade_type'] = $this->trade_type;
//获取签名数据
$this->sign = $this->MakeSign( $this->params );
$this->params['sign'] = $this->sign;
$xml = $this->data_to_xml($this->params);
$response = $this->postXmlCurl($xml, self::API_URL_PREFIX.self::UNIFIEDORDER_URL);
if( !$response ){
return false;
}
$result = $this->xml_to_data( $response );
if( !empty($result['result_code']) && !empty($result['err_code']) ){
$result['err_msg'] = $this->error_code( $result['err_code'] );
}
return $result;
}
/**
* 查询订单信息
* @param $out_trade_no 订单号
* @return array
*/
public function orderQuery( $out_trade_no ){
$this->params['appid'] = $this->appid;
$this->params['mch_id'] = $this->mch_id;
$this->params['nonce_str'] = $this->genRandomString();
$this->params['out_trade_no'] = $out_trade_no;
//获取签名数据
$this->sign = $this->MakeSign( $this->params );
$this->params['sign'] = $this->sign;
$xml = $this->data_to_xml($this->params);
$response = $this->postXmlCurl($xml, self::API_URL_PREFIX.self::ORDERQUERY_URL);
if( !$response ){
return false;
}
$result = $this->xml_to_data( $response );
if( !empty($result['result_code']) && !empty($result['err_code']) ){
$result['err_msg'] = $this->error_code( $result['err_code'] );
}
return $result;
}
/**
* 关闭订单
* @param $out_trade_no 订单号
* @return array
*/
public function closeOrder( $out_trade_no ){
$this->params['appid'] = $this->appid;
$this->params['mch_id'] = $this->mch_id;
$this->params['nonce_str'] = $this->genRandomString();
$this->params['out_trade_no'] = $out_trade_no;
//获取签名数据
$this->sign = $this->MakeSign( $this->params );
$this->params['sign'] = $this->sign;
$xml = $this->data_to_xml($this->params);
$response = $this->postXmlCurl($xml, self::API_URL_PREFIX.self::CLOSEORDER_URL);
if( !$response ){
return false;
}
$result = $this->xml_to_data( $response );
return $result;
}
/**
* 退款订单
* @param $out_trade_no 订单号
* @return array
*/
public function refundOrder( $params ){
//证书
$this->SSLCERT_PATH = $params['sslcert_path'];
$this->SSLKEY_PATH = $params['sslkey_path'];
//请求参数
$this->params['appid'] = $this->appid;
$this->params['mch_id'] = $this->mch_id;
$this->params['nonce_str'] = $this->genRandomString();
$this->params['out_trade_no'] = $params['out_trade_no'];//商户系统内部订单号
$this->params['out_refund_no'] = $params['out_refund_no'];//商户系统内部的退款单号
$this->params['total_fee'] = $params['total_fee'];//订单总金额,单位为分,只能为整数
$this->params['refund_fee'] = $params['refund_fee'];//退款总金额,单位为分,只能为整数
$this->params['refund_desc'] = $params['refund_desc'];//退款原因
$this->params['refund_account']= $params['refund_account'];//退款资金来源
//获取签名数据
$this->sign = $this->MakeSign( $this->params );
$this->params['sign'] = $this->sign;
$xml = $this->data_to_xml($this->params);
$response = $this->postXmlCurl($xml, self::API_URL_PREFIX.self::REFUNDORDER_URL,true);
if( !$response ){
return false;
}
$result = $this->xml_to_data( $response );
return $result;
}
/**
*
* 获取支付结果通知数据
* return array
*/
public function getNotifyData(){
//获取通知的数据
$xml = $GLOBALS['HTTP_RAW_POST_DATA'];
$data = array();
if( empty($xml) ){
return false;
}
$data = $this->xml_to_data( $xml );
if( !empty($data['return_code']) ){
if( $data['return_code'] == 'FAIL' ){
return false;
}
}
return $data;
}
/**
* 接收通知成功后应答输出XML数据
* @param string $xml
*/
public function replyNotify(){
$data['return_code'] = 'SUCCESS';
$data['return_msg'] = 'OK';
$xml = $this->data_to_xml( $data );
echo $xml;
die();
}
/**
* 生成APP端支付参数
* @param $prepayid 预支付id
*/
public function getAppPayParams( $prepayid ){
$data['appid'] = $this->appid;
$data['mch_id'] = $this->mch_id;
$data['prepayId'] = $prepayid;
$data['package'] = 'Sign=WXPay';
$data['nonce_str'] = $this->genRandomString();
$data['timestamp'] = time();
$data['sign'] = $this->MakeSign( $data );
$data['key'] = '5413A29BD915E1BCF870292FB4EC7852';
return $data;
}
/**
* 生成签名
* @return 签名
*/
public function MakeSign( $params ){
//签名步骤一:按字典序排序数组参数
ksort($params);
$string = $this->ToUrlParams($params);
//签名步骤二:在string后加入KEY
$string = $string . "&key=".$this->key;
//签名步骤三:MD5加密
$string = md5($string);
//签名步骤四:所有字符转为大写
$result = strtoupper($string);
return $result;
}
/**
* [checkSign 回调函数验签]
* @param [type] $tmpData [返回的数据,数组]
* @param string $xml [返回的数据,xml]
* @return [type] [description]
*/
public function checkSign($tmpData,$xml='')
{
if($xml){
$tmpData = $this->xml_to_data($xml);
}
$online_sign=$tmpData['sign'];//远程接收的签名
unset($tmpData['sign']);
$off_sign = $this->MakeSign($tmpData);//本地签名
if ($online_sign == $off_sign) {
return 1;
}
return 0;
}
/**
* [returnXml 输出返回结果]
* @param [type] $tmpData [返回的数据]
* @return [type] [description]
*/
public function returnXml($tmpData){
header('Content-Type:application/json; charset=utf-8');
header("Access-Control-Allow-Origin:*" );/*星号表示所有的域都可以接受,*/
header("Access-Control-Allow-Methods:POST,GET" );
header('Access-Control-Allow-Headers:origin, x-requested-with,x-requested_with, content-type, accept');
$xml=$this->data_to_xml($tmpData);
echo $xml;
exit();
}
/**
* 将参数拼接为url: key=value&key=value
* @param $params
* @return string
*/
public function ToUrlParams( $params ){
$string = '';
if( !empty($params) ){
$array = array();
foreach( $params as $key => $value ){
//校验空值
if(!$this->checkEmpty($value)){
$array[] = $key.'='.$value;
}
}
$string = implode("&",$array);
}
return $string;
}
/**
* 校验$value是否非空
* if not set ,return true;
* if is null , return true;
**/
protected function checkEmpty($value) {
if (!isset($value))
return true;
if ($value === null)
return true;
if (trim($value) === "")
return true;
if ($value === [])
return true;
return false;
}
/**
* 输出xml字符
* @param $params 参数名称
* return string 返回组装的xml
**/
public function data_to_xml( $params ){
if(!is_array($params)|| count($params) <= 0)
{
return false;
}
$xml = "";
foreach ($params as $key=>$val)
{
if (is_numeric($val)){
$xml.="<".$key.">".$val."".$key.">";
}else{
$xml.="<".$key.">".$key.">";
}
}
$xml.=" ";
return $xml;
}
/**
* 将xml转为array
* @param string $xml
* return array
*/
public function xml_to_data($xml){
if(!$xml){
return false;
}
//将XML转为array
//禁止引用外部xml实体
libxml_disable_entity_loader(true);
$data = json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
return $data;
}
/**
* 获取毫秒级别的时间戳
*/
private static function getMillisecond(){
//获取毫秒的时间戳
$time = explode ( " ", microtime () );
$time = $time[1] . ($time[0] * 1000);
$time2 = explode( ".", $time );
$time = $time2[0];
return $time;
}
/**
* 产生一个指定长度的随机字符串,并返回给用户
* @param type $len 产生字符串的长度
* @return string 随机字符串
*/
public function genRandomString($len = 32) {
$chars = array(
"a", "b", "c", "d", "e", "f", "g", "h", "i", "j", "k",
"l", "m", "n", "o", "p", "q", "r", "s", "t", "u", "v",
"w", "x", "y", "z", "A", "B", "C", "D", "E", "F", "G",
"H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R",
"S", "T", "U", "V", "W", "X", "Y", "Z", "0", "1", "2",
"3", "4", "5", "6", "7", "8", "9"
);
$charsLen = count($chars) - 1;
// 将数组打乱
shuffle($chars);
$output = "";
for ($i = 0; $i < $len; $i++) {
$output .= $chars[mt_rand(0, $charsLen)];
}
return $output;
}
/**
* 以post方式提交xml到对应的接口url
*
* @param string $xml 需要post的xml数据
* @param string $url url
* @param bool $useCert 是否需要证书,默认不需要
* @param int $second url执行超时时间,默认30s
* @throws WxPayException
*/
private function postXmlCurl($xml, $url, $useCert = false, $second = 30){
$ch = curl_init();
//设置超时
curl_setopt($ch,CURLOPT_TIMEOUT,$second);
curl_setopt($ch,CURLOPT_URL,$url);
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,2);
//设置header
curl_setopt($ch, CURLOPT_HEADER, FALSE);
//要求结果为字符串且输出到屏幕上
curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
if($useCert == true){
//设置证书
//使用证书:cert 与 key 分别属于两个.pem文件
curl_setopt($ch,CURLOPT_SSLCERTTYPE,'PEM');
curl_setopt($ch,CURLOPT_SSLCERT, $this->SSLCERT_PATH);
curl_setopt($ch,CURLOPT_SSLKEYTYPE,'PEM');
curl_setopt($ch,CURLOPT_SSLKEY, $this->SSLKEY_PATH);
}
//post提交方式
curl_setopt($ch, CURLOPT_POST, TRUE);
curl_setopt($ch, CURLOPT_POSTFIELDS, $xml);
//运行curl
$data = curl_exec($ch);
//返回结果
if($data){
curl_close($ch);
return $data;
} else {
$error = curl_errno($ch);
curl_close($ch);
return false;
}
}
/**
* 错误代码
* @param $code 服务器输出的错误代码
* return string
*/
public function error_code( $code ){
$errList = array(
'NOAUTH' => '商户未开通此接口权限',
'NOTENOUGH' => '用户帐号余额不足',
'ORDERNOTEXIST' => '订单号不存在',
'ORDERPAID' => '商户订单已支付,无需重复操作',
'ORDERCLOSED' => '当前订单已关闭,无法支付',
'SYSTEMERROR' => '系统错误!系统超时',
'APPID_NOT_EXIST' => '参数中缺少APPID',
'MCHID_NOT_EXIST' => '参数中缺少MCHID',
'APPID_MCHID_NOT_MATCH' => 'appid和mch_id不匹配',
'LACK_PARAMS' => '缺少必要的请求参数',
'OUT_TRADE_NO_USED' => '同一笔交易不能多次提交',
'SIGNERROR' => '参数签名结果不正确',
'XML_FORMAT_ERROR' => 'XML格式错误',
'REQUIRE_POST_METHOD' => '未使用post传递参数 ',
'POST_DATA_EMPTY' => 'post数据不能为空',
'NOT_UTF8' => '未使用指定编码格式',
);
if( array_key_exists( $code , $errList ) ){
return $errList[$code];
}
}
}