A brief analysis of how to handle WeChat payment notification_PHP tutorial

The implementation of the notification mechanism only has official documentation and no demo code. For those who have never done it before, it will take a lot of time to test.

From what the document says, the structure of the data notified by WeChat each time is relatively complex. It is a multi-segment data. In addition to fetching the POST data, other data must also be fetched.

This first involves a question about the value of php://input and $_POST. Here are a few simple points:

1. When the Content-Type value is application/x-www-form-urlencoded, PHP will fill in the corresponding data of the http request body into the array $_POST, and the data filled in the $_POST array will be urldecoded. ()The result of analysis. (In fact, in addition to the Content-Type, there is also multipart/form-data to indicate that the data is form data, which we will introduce later)
2, php://input data, as long as the Content-Type is not multipart/form-data (This condition will be introduced later). Then the php://input data is consistent with the http entity body part of the data. The length of this partially consistent data is specified by Content-Length.
3. Only when the Content-Type is application/x-www-form-urlencoded and the submission method is the POST method, the $_POST data and the php://input data are "consistent" (with quotes to indicate their formats) Inconsistent, consistent content). Otherwise, they are inconsistent.
4, php://input cannot read $_GET data. This is because the $_GET data is written in the PATH field of the http request header as query_path, rather than in the body part of the http request.

This also helps us understand why the xml_rpc server reads data through file_get_contents(‘php://input’, ‘r’). Instead of reading from $_POST, it is precisely because the data specification of xml_rpc is xml and its Content-Type is text/xml.
5. php://input encounters multipart/form-data, Please check RFC1867 for its description. multipart/form-data also means submitting form data using the POST method. It is also accompanied by file upload, so it will be different from the application/x- www-form-urlencoded data format. It will be passed to the server in a more reasonable and efficient data format. When Content-Type is multipart/form-data, even if there is data in the http request body, php://input is empty. At this time, PHP will not fill in the data into the php://input stream. Therefore, it is certain: php://input cannot be used to read enctype=multipart/form-data data.

6. When Content-Type is application/x-www-form-urlencoded, php://input and $_POST data are "consistent". When it is other Content-Type, php: //Input and $_POST data are inconsistent. Because only when the Content-Type is application/x-www-form-urlencoded or multipart/form-data, PHP will fill in the corresponding part of the body data in the http request packet into $_POST In global variables, PHP ignores other situations. Except for php://input, which is empty when the data type is multipart/form-data, it may not be empty in other situations

The meaning of so many words quoted above is that these two methods must be used to read the data sent from WeChat.

Get $POST first. This is a regular payment notification message, in the form:

<span>array</span><span> (
  </span>'bank_type' => '3006',
  'discount' => '0',
  'fee_type' => '1',
  'input_charset' => 'UTF-8',
  'notify_id' => 'YaNO6cznoNZK0aGb8nJWGgVUWssjt7Ze7gWRaRS0R_5w9oXgGNkRGxReEk0r45yk3I9a2_gzo9IqgqMYbap6bxC2T3p0o-2C',
  'out_trade_no' => '1214284731',
  'partner' => '12xxxxxxxx',
  'product_fee' => '3400',
  'sign' => '545FA0E8B594BBXXXX48XX142F084TY',
  'sign_type' => 'MD5',
  'time_end' => '20130223110224',
  'total_fee' => '3400',
  'trade_mode' => '1',
  'trade_state' => '0',
  'transaction_id' => '12XXX449012014XXX33174005XXX',
  'transport_fee' => '0',<span>
)</span>

Then use file_get_contents('php://input') to read additional information, in the form:

<span><</span><span>xml</span><span>><</span><span>OpenId</span><span>></span><span><![CDATA[</span><span>o0pd3jqHaN7b0tVPDFJPzJEkSCLw</span><span>]]></span><span></</span><span>OpenId</span><span>></span>
<span><</span><span>AppId</span><span>></span><span><![CDATA[</span><span>wxXXX06XX2cXXX88XX</span><span>]]></span><span></</span><span>AppId</span><span>></span>
<span><</span><span>IsSubscribe</span><span>></span>1<span></</span><span>IsSubscribe</span><span>></span>
<span><</span><span>TimeStamp</span><span>></span>1400814743<span></</span><span>TimeStamp</span><span>></span>
<span><</span><span>NonceStr</span><span>></span><span><![CDATA[</span><span>lqxwMsiY9EXRDpms</span><span>]]></span><span></</span><span>NonceStr</span><span>></span>
<span><</span><span>AppSignature</span><span>></span><span><![CDATA[</span><span>c2dxxxe186116b32b06axxxc1a688b671eexxx5e</span><span>]]></span><span></</span><span>AppSignature</span><span>></span>
<span><</span><span>SignMethod</span><span>></span><span><![CDATA[</span><span>sha1</span><span>]]></span><span></</span><span>SignMethod</span><span>></span>
<span></</span><span>xml</span><span>></span>

Finally, do the corresponding business logic processing, which I won’t go into details.

http://www.bkjia.com/PHPjc/775945.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/775945.htmlTechArticleThe implementation of the notification mechanism only has official documents and no demo code. For those who have never done it before, it requires a lot of effort. Time to do the testing. Judging from what the document says, the number of notifications sent by WeChat each time...