银联网页支付-PHP源码-php.cn

Home

php教程

PHP源码

银联网页支付

PHP中文网

May 26, 2016 am 08:19 AM

银联WAP支付功能，仅限消费功能。

http://www.360us.net/article/25.html

<?php
namespace common\services;

class UnionPay
{
	/**
	 * 支付配置
	 * @var array
	 */
	public $config = [];
	
	/**
	 * 支付参数，提交到银联对应接口的所有参数
	 * @var array
	 */
	public $params = [];
	
	/**
	 * 自动提交表单模板
	 * @var string
	 */
	private $formTemplate = <<<&#39;HTML&#39;
<!DOCTYPE HTML>
<html>
<head>
    <meta charset="utf-8">
	<title>支付</title>
</head>
<body>
	<p style="text-align:center">跳转中...</p>
	<form id="pay_form" name="pay_form" action="%s" method="post">
		%s
	</form>
    <script type="text/javascript">
	    document.onreadystatechange = function(){
            if(document.readyState == "complete") {
                document.pay_form.submit();
            }
        };
	</script>
</body>
</html>
HTML;
	
	/**
	 * 构建自动提交HTML表单
	 * @return string
	 */
	public function createPostForm()
	{
	    $this->params[&#39;signature&#39;] = $this->sign();
	    $input = &#39;&#39;;
	    foreach($this->params as $key => $item) {
	    	$input .= "\t\t<input type=\"hidden\" name=\"{$key}\" value=\"{$item}\">\n";
	    }
	    
	    return sprintf($this->formTemplate, $this->config[&#39;frontUrl&#39;], $input);
	}
	
	/**
	 * 验证签名
	 * 验签规则：
	 * 除signature域之外的所有项目都必须参加验签
	 * 根据key值按照字典排序，然后用&拼接key=value形式待验签字符串；
	 * 然后对待验签字符串使用sha1算法做摘要；
	 * 用银联公钥对摘要和签名信息做验签操作
	 * 
	 * @throws \Exception
	 * @return bool
	 */
	public function verifySign()
	{
		$publicKey = $this->getVerifyPublicKey();
		$verifyArr = $this->filterBeforSign();
		ksort($verifyArr);
		$verifyStr = $this->arrayToString($verifyArr);
		$verifySha1 = sha1($verifyStr);
		$signature = base64_decode($this->params[&#39;signature&#39;]);
		$result = openssl_verify($verifySha1, $signature, $publicKey);
		if($result === -1) {
			throw new \Exception(&#39;Verify Error:&#39;.openssl_error_string());
		}
		
		return $result === 1 ? true : false;
	}
	
	/**
	 * 取签名证书ID(SN)
	 * @return string
	 */
	public function getSignCertId()
	{
		return $this->getCertIdPfx($this->config[&#39;signCertPath&#39;]);
	}	
	
	/**
	 * 签名数据
	 * 签名规则:
	 * 除signature域之外的所有项目都必须参加签名
	 * 根据key值按照字典排序，然后用&拼接key=value形式待签名字符串；
	 * 然后对待签名字符串使用sha1算法做摘要；
	 * 用银联颁发的私钥对摘要做RSA签名操作
	 * 签名结果用base64编码后放在signature域
	 * 
	 * @throws \InvalidArgumentException
	 * @return multitype|string
	 */
	private function sign() {
		$signData = $this->filterBeforSign();
		ksort($signData);
		$signQueryString = $this->arrayToString($signData);
		
		if($this->params[&#39;signMethod&#39;] == 01) {
			//签名之前先用sha1处理
			//echo $signQueryString;exit;
			$datasha1 = sha1($signQueryString);
			$signed = $this->rsaSign($datasha1);
		} else {
			throw new \InvalidArgumentException(&#39;Nonsupport Sign Method&#39;);
		}
				
		return $signed;
		
	}
	
	/**
	 * 数组转换成字符串
	 * @param array $arr
	 * @return string
	 */
	private function arrayToString($arr)
	{
		$str = &#39;&#39;;
		foreach($arr as $key => $value) {
			$str .= $key.&#39;=&#39;.$value.&#39;&&#39;;
		}
		return substr($str, 0, strlen($str) - 1);
	}
	
	/**
	 * 过滤待签名数据
	 * signature域不参加签名
	 * 
	 * @return array
	 */
	private function filterBeforSign()
	{
		$tmp = $this->params;
		unset($tmp[&#39;signature&#39;]);
		return $tmp;
	}
	
	/**
	 * RSA签名数据，并base64编码
	 * @param string $data 待签名数据
	 * @return mixed
	 */
	private function rsaSign($data)
	{
		$privatekey = $this->getSignPrivateKey();
		$result = openssl_sign($data, $signature, $privatekey);
		if($result) {
			return base64_encode($signature);
		}
		return false;
	}
	
	/**
	 * 取.pfx格式证书ID(SN)
	 * @return string
	 */
	private function getCertIdPfx($path)
	{
		$pkcs12certdata = file_get_contents($path);
		openssl_pkcs12_read($pkcs12certdata, $certs, $this->config[&#39;signCertPwd&#39;]);
		$x509data = $certs[&#39;cert&#39;];
		openssl_x509_read($x509data);
		$certdata = openssl_x509_parse($x509data);
		return $certdata[&#39;serialNumber&#39;];
	}
	
	/**
	 * 取.cer格式证书ID(SN)
	 * @return string
	 */
	private function getCertIdCer($path)
	{
		$x509data = file_get_contents($path);
		openssl_x509_read($x509data);
		$certdata = openssl_x509_parse($x509data);
		return $certdata[&#39;serialNumber&#39;];
	}
	
	/**
	 * 取签名证书私钥
	 * @return resource
	 */
	private function getSignPrivateKey()
	{
		$pkcs12 = file_get_contents($this->config[&#39;signCertPath&#39;]);
		openssl_pkcs12_read($pkcs12, $certs, $this->config[&#39;signCertPwd&#39;]);
		return $certs[&#39;pkey&#39;];
	}
	
	/**
	 * 取验证签名证书
	 * @throws \InvalidArgumentException
	 * @return string
	 */
	private function getVerifyPublicKey()
	{
		//先判断配置的验签证书是否银联返回指定的证书是否一致
		if($this->getCertIdCer($this->config[&#39;verifyCertPath&#39;]) != $this->params[&#39;certId&#39;]) {
			throw new \InvalidArgumentException(&#39;Verify sign cert is incorrect&#39;);
		}
		return file_get_contents($this->config[&#39;verifyCertPath&#39;]);		
	}
}

2. [代码]配置示例

   //银联支付设置
	&#39;unionpay&#39; => [
		//测试环境参数
	    &#39;frontUrl&#39; => &#39;https://101.231.204.80:5000/gateway/api/frontTransReq.do&#39;, //前台交易请求地址
	    //&#39;singleQueryUrl&#39; => &#39;https://101.231.204.80:5000/gateway/api/queryTrans.do&#39;, //单笔查询请求地址
	    &#39;signCertPath&#39; => __DIR__.&#39;/../keys/unionpay/test/sign/700000000000001_acp.pfx&#39;, //签名证书路径
	    &#39;signCertPwd&#39; => &#39;000000&#39;, //签名证书密码
	    &#39;verifyCertPath&#39; => __DIR__.&#39;/../keys/unionpay/test/verify/verify_sign_acp.cer&#39;, //验签证书路径
	    &#39;merId&#39; => &#39;xxxxxxx&#39;,
	    
		//正式环境参数
		//&#39;frontUrl&#39; => &#39;https://101.231.204.80:5000/gateway/api/frontTransReq.do&#39;, //前台交易请求地址
		//&#39;singleQueryUrl&#39; => &#39;https://101.231.204.80:5000/gateway/api/queryTrans.do&#39;, //单笔查询请求地址
		//&#39;signCertPath&#39; => __DIR__.&#39;/../keys/unionpay/test/sign/PM_700000000000001_acp.pfx&#39;, //签名证书路径
		//&#39;signCertPwd&#39; => &#39;000000&#39;, //签名证书密码
		//&#39;verifyCertPath&#39; => __DIR__.&#39;/../keys/unionpay/test/verify/verify_sign_acp.cer&#39;, //验签证书路径
	    //&#39;merId&#39; => &#39;xxxxxxxxx&#39;, //商户代码
	],

3. [代码]支付示例

$unionPay = new UnionPay();
$unionPay->config = Yii::$app->params[&#39;unionpay&#39;];//上面的配置
		
$unionPay->params = [
	&#39;version&#39; => &#39;5.0.0&#39;, //版本号
	&#39;encoding&#39; => &#39;UTF-8&#39;, //编码方式
	&#39;certId&#39; => $unionPay->getSignCertId(), //证书ID
	&#39;signature&#39; => &#39;&#39;, //签名
	&#39;signMethod&#39; => &#39;01&#39;, //签名方式
	&#39;txnType&#39; => &#39;01&#39;, //交易类型
	&#39;txnSubType&#39; => &#39;01&#39;, //交易子类
	&#39;bizType&#39; => &#39;000201&#39;, //产品类型
	&#39;channelType&#39; => &#39;08&#39;,//渠道类型
	&#39;frontUrl&#39; => Url::toRoute([&#39;payment/unionpayreturn&#39;], true), //前台通知地址
	&#39;backUrl&#39; => Url::toRoute([&#39;payment/unionpaynotify&#39;], true), //后台通知地址
	//&#39;frontFailUrl&#39; => Url::toRoute([&#39;payment/unionpayfail&#39;], true), //失败交易前台跳转地址
	&#39;accessType&#39; => &#39;0&#39;, //接入类型
	&#39;merId&#39; => Yii::$app->params[&#39;unionpay&#39;][&#39;merId&#39;], //商户代码
	&#39;orderId&#39; => $orderNo, //商户订单号
	&#39;txnTime&#39; => date(&#39;YmdHis&#39;), //订单发送时间
	&#39;txnAmt&#39; => $sum * 100, //交易金额，单位分
	&#39;currencyCode&#39; => &#39;156&#39;, //交易币种
];
		
$html = $unionPay->createPostForm();

4. [代码]异步通知示例

$unionPay = new UnionPay();
$unionPay->config = Yii::$app->params[&#39;unionpay&#39;];
		
$unionPay->params = Yii::$app->request->post(); //银联提交的参数
if(empty($unionPay->params)) {
    return &#39;fail!&#39;;
}
if($unionPay->verifySign() && $unionPay->params[&#39;respCode&#39;] == &#39;00&#39;) {
    //.......
}

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress images for free

Clothoff.io

AI clothes remover

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)

2 weeks agoBy尊渡假赌尊渡假赌尊渡假赌

Hello Kitty Island Adventure: How To Get Giant Seeds

1 months agoBy尊渡假赌尊渡假赌尊渡假赌

How Long Does It Take To Beat Split Fiction?

4 weeks agoByDDD

R.E.P.O. Save File Location: Where Is It & How to Protect It?

4 weeks agoByDDD

Two Point Museum: All Exhibits And Where To Find Them

1 months agoBy尊渡假赌尊渡假赌尊渡假赌

Hot Tools

MinGW - Minimalist GNU for Windows

This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

DVWA

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software

SecLists

SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.