yunzerwebsite/pay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hero920103
2025-11-28 10:08:12 +08:00
commit 09a14bf0a3
1088 changed files with 145132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/chinaums/chinaums_plugin.php
+451
View File
@@ -0,0 +1,451 @@
<?php
class chinaums_plugin
{
static public $info = [
'name' => 'chinaums', //支付插件英文名称，需和目录名称一致，不能有重复
'showname' => '银联商务', //支付插件显示名称
'author' => '银联商务', //支付插件作者
'link' => 'https://open.chinaums.com/', //支付插件作者链接
'types' => ['alipay','wxpay','bank'], //支付插件支持的支付方式，可选的有alipay,qqpay,wxpay,bank
'inputs' => [ //支付插件要求传入的参数以及参数显示名称，可选的有appid,appkey,appsecret,appurl,appmchid
'appid' => [
'name' => 'AppId',
'type' => 'input',
'note' => '',
],
'appkey' => [
'name' => 'AppKey',
'type' => 'input',
'note' => '',
],
'appmchid' => [
'name' => '商户号mid',
'type' => 'input',
'note' => '',
],
'appurl' => [
'name' => '终端号tid',
'type' => 'input',
'note' => '',
],
'appsecret' => [
'name' => '通讯密钥',
'type' => 'input',
'note' => '',
],
'msgsrcid' => [
'name' => '来源编号',
'type' => 'input',
'note' => '4位来源编号',
],
'appswitch' => [
'name' => '环境选择',
'type' => 'select',
'options' => [0=>'生产环境',1=>'测试环境'],
],
],
'select_alipay' => [
'1' => '扫码支付',
'2' => 'H5支付',
//'3' => 'APP支付',
],
'select_wxpay' => [
'1' => '扫码支付',
'2' => 'H5支付',
'3' => 'H5转小程序支付',
//'4' => 'APP支付',
],
'select' => null,
'note' => '', //支付密钥填写说明
'bindwxmp' => false, //是否支持绑定微信公众号
'bindwxa' => false, //是否支持绑定微信小程序
];
static public function submit(){
global $siteurl, $channel, $order, $sitename;
if($order['typename']=='alipay'){
if(in_array('2',$channel['apptype']) && checkmobile()){
$code_url = self::h5pay('alipay');
return ['type'=>'jump','url'=>$code_url];
}else{
return ['type'=>'jump','url'=>'/pay/alipay/'.TRADE_NO.'/'];
}
}elseif($order['typename']=='wxpay'){
if(in_array('2',$channel['apptype']) && checkmobile()){
$code_url = self::h5pay('wxpay');
return ['type'=>'jump','url'=>$code_url];
}elseif(in_array('3',$channel['apptype']) && checkmobile()){
$code_url = self::h5pay('wxminipay');
return ['type'=>'jump','url'=>$code_url];
}elseif(in_array('4',$channel['apptype']) && checkmobile() && strpos($_SERVER['HTTP_USER_AGENT'], 'iPhone OS')!==false){
return ['type'=>'jump','url'=>'/pay/wxapppay/'.TRADE_NO.'/'];
}else{
return ['type'=>'jump','url'=>'/pay/wxpay/'.TRADE_NO.'/'];
}
}elseif($order['typename']=='bank'){
return ['type'=>'jump','url'=>'/pay/bank/'.TRADE_NO.'/'];
}
}
static public function mapi(){
global $siteurl, $channel, $order, $conf, $device, $mdevice;
if($order['typename']=='alipay'){
if(in_array('2',$channel['apptype']) && $device=='mobile'){
$code_url = self::h5pay('alipay');
return ['type'=>'jump','url'=>$code_url];
}else{
return self::alipay();
}
}elseif($order['typename']=='wxpay'){
if(in_array('2',$channel['apptype']) && $device=='mobile'){
$code_url = self::h5pay('wxpay');
return ['type'=>'jump','url'=>$code_url];
}elseif(in_array('3',$channel['apptype']) && $device=='mobile'){
$code_url = self::h5pay('wxminipay');
return ['type'=>'jump','url'=>$code_url];
}else{
return self::wxpay();
}
}elseif($order['typename']=='bank'){
return self::bank();
}
}
//扫码下单
static private function qrcode(){
global $channel, $order, $ordername, $conf, $clientip, $siteurl;
require(PAY_ROOT."inc/Build.class.php");
$client = new ChinaumsBuild($channel['appid'], $channel['appkey'], $channel['appswitch'] == 1);
$path = '/v1/netpay/bills/get-qrcode';
$time = time();
$param = [
'msgId' => md5(uniqid(mt_rand(), true)),
'requestTimestamp' => date('Y-m-d H:i:s', $time),
'mid' => $channel['appmchid'],
'tid' => $channel['appurl'],
'instMid' => 'QRPAYDEFAULT',
'billNo' => $channel['msgsrcid'].TRADE_NO,
'billDate' => date('Y-m-d', $time),
'billDesc' => $ordername,
'totalAmount' => intval(round($order['realmoney']*100)),
'notifyUrl' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'returnUrl' => $siteurl.'pay/return/'.TRADE_NO.'/',
'clientIp' => $clientip,
];
if($order['profits']>0){
self::handleProfits($param);
}
return \lib\Payment::lockPayData(TRADE_NO, function() use($client, $path, $param, $time) {
$result = $client->request($path, $param, $time);
if(isset($result['errCode']) && $result['errCode']=='SUCCESS'){
return $result['billQRCode'];
}elseif(isset($result['errMsg'])){
throw new Exception($result['errMsg']);
}elseif(isset($result['errInfo'])){
throw new Exception($result['errInfo']);
}else{
throw new Exception('返回数据解析失败');
}
});
}
static private function h5pay($pay_type){
global $channel, $order, $ordername, $conf, $clientip, $siteurl;
require(PAY_ROOT."inc/Build.class.php");
$client = new ChinaumsBuild($channel['appid'], $channel['appkey'], $channel['appswitch'] == 1);
if($pay_type == 'alipay'){
$path = '/v1/netpay/trade/h5-pay';
}elseif($pay_type == 'wxpay'){
$path = '/v1/netpay/wxpay/h5-pay';
}elseif($pay_type == 'wxminipay'){
$path = '/v1/netpay/wxpay/h5-to-minipay';
}
$time = time();
$param = [
'msgId' => md5(uniqid(mt_rand(), true)),
'requestTimestamp' => date('Y-m-d H:i:s', $time),
'mid' => $channel['appmchid'],
'tid' => $channel['appurl'],
'instMid' => 'H5DEFAULT',
'merOrderId' => $channel['msgsrcid'].TRADE_NO,
'orderDesc' => $ordername,
'totalAmount' => intval(round($order['realmoney']*100)),
'notifyUrl' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'returnUrl' => $siteurl.'pay/return/'.TRADE_NO.'/',
'clientIp' => $clientip,
];
if($pay_type == 'wxpay'){
$param['sceneType'] = 'AND_WAP';
$param['merAppName'] = $conf['sitename'];
$param['merAppId'] = $siteurl;
}
if($order['profits']>0){
self::handleProfits($param);
}
$url = $client->requestGet($path, $param, $time);
\lib\Payment::updateOrderCombine(TRADE_NO);
return $url;
}
//APP支付(跳转小程序)
static private function apppay($pay_type, $sub_app_id = null){
global $channel, $order, $ordername, $conf, $clientip, $siteurl;
require(PAY_ROOT."inc/Build.class.php");
$client = new ChinaumsBuild($channel['appid'], $channel['appkey'], $channel['appswitch'] == 1);
if($pay_type == 'alipay'){
$path = '/v1/netpay/trade/app-pre-order';
}elseif($pay_type == 'wxpay'){
$path = '/v1/netpay/wx/app-pre-order';
}elseif($pay_type == 'bank'){
$path = '/v1/netpay/uac/app-order';
}
$time = time();
$param = [
'msgId' => md5(uniqid(mt_rand(), true)),
'requestTimestamp' => date('Y-m-d H:i:s', $time),
'mid' => $channel['appmchid'],
'tid' => $channel['appurl'],
'instMid' => 'APPDEFAULT',
'merOrderId' => $channel['msgsrcid'].TRADE_NO,
'orderDesc' => $ordername,
'totalAmount' => intval(round($order['realmoney']*100)),
'notifyUrl' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'clientIp' => $clientip,
];
if($sub_app_id){
$param['subAppId'] = $sub_app_id;
}
if($order['profits']>0){
self::handleProfits($param);
}
return \lib\Payment::lockPayData(TRADE_NO, function() use($client, $path, $param, $time) {
$result = $client->request($path, $param, $time);
if(isset($result['errCode']) && $result['errCode']=='SUCCESS'){
return $result['appPayRequest'];
}elseif(isset($result['errMsg'])){
throw new Exception($result['errMsg']);
}elseif(isset($result['errInfo'])){
throw new Exception($result['errInfo']);
}else{
throw new Exception('返回数据解析失败');
}
});
}
static private function handleProfits(&$param){
global $order, $channel;
$psreceiver = \lib\ProfitSharing\CommUtil::getReceiver($order['profits']);
if($psreceiver){
$psmoney = intval(round(floor($order['realmoney'] * $psreceiver['rate'])));
$param['divisionFlag'] = true;
$param['platformAmount'] = $param['totalAmount'] - $psmoney;
$param['subOrders'] = [
[
'mid' => $psreceiver['account'],
'merOrderId' => $channel['msgsrcid'].TRADE_NO.'1',
'totalAmount' => $psmoney
]
];
}
}
//支付宝扫码支付
static public function alipay(){
global $mdevice;
try{
$code_url = self::qrcode();
}catch(Exception $ex){
return ['type'=>'error','msg'=>'支付宝支付下单失败！'.$ex->getMessage()];
}
if(checkalipay() || $mdevice=='alipay'){
return ['type'=>'jump','url'=>$code_url];
}else{
return ['type'=>'qrcode','page'=>'alipay_qrcode','url'=>$code_url];
}
}
//支付宝APP支付
static public function alipayapp(){
global $channel, $method;
try{
$result = self::apppay('alipay');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'支付宝支付下单失败！'.$ex->getMessage()];
}
if($method == 'app'){
return ['type'=>'app','data'=>$result];
}
}
//微信扫码支付
static public function wxpay(){
global $channel, $device, $mdevice;
try{
$code_url = self::qrcode();
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败！'.$ex->getMessage()];
}
if(checkwechat() || $mdevice=='wechat'){
return ['type'=>'jump','url'=>$code_url];
} elseif (checkmobile() || $device=='mobile') {
return ['type'=>'qrcode','page'=>'wxpay_wap','url'=>$code_url];
} else {
return ['type'=>'qrcode','page'=>'wxpay_qrcode','url'=>$code_url];
}
}
//微信APP支付
static public function wxapppay(){
global $channel, $method;
$wxinfo = \lib\Channel::getWeixin($channel['appwxmp']);
if(!$wxinfo) return ['type'=>'error','msg'=>'支付通道绑定的微信公众号不存在'];
try{
$result = self::apppay('wxpay', $wxinfo['appid']);
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败！'.$ex->getMessage()];
}
if($method == 'app'){
return ['type'=>'app','data'=>$result];
}
$param = [
'nonceStr' => $result['noncestr'],
'package' => $result['package'],
'partnerId' => $result['partnerid'],
'prepayId' => $result['prepayid'],
'timeStamp' => $result['timestamp'],
'sign' => $result['sign'],
];
$code_url = 'weixin://app/'.$result['appid'].'/pay/?'.http_build_query($param);
return ['type'=>'qrcode','page'=>'wxpay_h5','url'=>$code_url];
}
//云闪付扫码支付
static public function bank(){
try{
$code_url = self::qrcode();
}catch(Exception $ex){
return ['type'=>'error','msg'=>'云闪付下单失败！'.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'bank_qrcode','url'=>$code_url];
}
//异步回调
static public function notify(){
global $channel, $order;
require(PAY_ROOT."inc/Build.class.php");
$client = new ChinaumsBuild($channel['appid'], $channel['appkey'], $channel['appswitch'] == 1);
$verifyResult = $client->verify($_POST, $channel['appsecret']);
if($verifyResult){
if($_POST['instMid'] == 'H5DEFAULT'){
if($_POST['status'] == 'TRADE_SUCCESS'){
$out_trade_no = substr($_POST['merOrderId'],4);
$trade_no = $_POST['merOrderId'];
$money = $_POST['totalAmount'];
$buyer = $_POST['buyerId'];
$bill_trade_no = $_POST['targetOrderId'];
if($out_trade_no == TRADE_NO && $money==strval($order['realmoney']*100)){
processNotify($order, $trade_no, $buyer, $bill_trade_no);
}
return ['type'=>'html','data'=>'SUCCESS'];
}else{
return ['type'=>'html','data'=>'FAILED'];
}
}else{
if($_POST['billStatus'] == 'PAID'){
$out_trade_no = substr($_POST['billNo'],4);
$billPayment = json_decode($_POST['billPayment'], true);
$trade_no = $_POST['billNo'];
$money = $_POST['totalAmount'];
$buyer = $billPayment['buyerId'];
$bill_trade_no = $billPayment['targetOrderId'];
if($out_trade_no == TRADE_NO && $money==strval($order['realmoney']*100)){
processNotify($order, $trade_no, $buyer, $bill_trade_no);
}
return ['type'=>'html','data'=>'SUCCESS'];
}else{
return ['type'=>'html','data'=>'FAILED'];
}
}
}
return ['type'=>'html','data'=>'FAILED'];
}
//支付返回页面
static public function return(){
return ['type'=>'page','page'=>'return'];
}
//退款
static public function refund($order){
global $channel, $conf;
if(empty($order))exit();
require(PAY_ROOT."inc/Build.class.php");
$client = new ChinaumsBuild($channel['appid'], $channel['appkey'], $channel['appswitch'] == 1);
if($order['combine'] == 1){ //H5支付退款
$path = '/v1/netpay/refund';
$time = time();
$param = [
'msgId' => md5(uniqid(mt_rand(), true)),
'requestTimestamp' => date('Y-m-d H:i:s', $time),
'mid' => $channel['appmchid'],
'tid' => $channel['appurl'],
'instMid' => 'H5DEFAULT',
'merOrderId' => $order['api_trade_no'],
'billDate' => date('Y-m-d', strtotime($order['addtime'])),
'refundOrderId' => $channel['msgsrcid'].$order['refund_no'],
'refundAmount' => $order['refundmoney']*100,
];
}else{
$path = '/v1/netpay/bills/refund';
$time = time();
$param = [
'msgId' => md5(uniqid(mt_rand(), true)),
'requestTimestamp' => date('Y-m-d H:i:s', $time),
'mid' => $channel['appmchid'],
'tid' => $channel['appurl'],
'instMid' => 'QRPAYDEFAULT',
'billNo' => $order['api_trade_no'],
'billDate' => date('Y-m-d', strtotime($order['addtime'])),
'refundOrderId' => $channel['msgsrcid'].$order['refund_no'],
'refundAmount' => $order['refundmoney']*100,
];
}
$result = $client->request($path, $param, $time);
if(isset($result['errCode']) && $result['errCode']=='SUCCESS'){
return ['code'=>0, 'trade_no'=>$result['billNo'], 'refund_fee'=>round($result['refundAmount']/100, 2)];
}else{
return ['code'=>-1, 'msg'=>$result['errMsg']?$result['errMsg']:'返回数据解析失败'];
}
}
}
plugins/chinaums/inc/Build.class.php
+121
View File
@@ -0,0 +1,121 @@
<?php
class ChinaumsBuild
{
private $appid;
private $appkey;
// 网关地址（生产环境）
private $gateway = 'https://api-mop.chinaums.com';
// 网关地址（测试环境）
private $gateway_test = 'https://test-api-open.chinaums.com';
public function __construct($appid, $appkey, $istest = false){
$this->appid = $appid;
$this->appkey = $appkey;
if($istest){
$this->gateway = $this->gateway_test;
}
}
// 发起支付
public function request($path, $params, $time){
$url = $this->gateway.$path;
$json = json_encode($params);
$authorization = $this->getOpenBodySig($json, $time);
$response = $this->httpPost($url, $json, $authorization);
$arr = json_decode($response, true);
return $arr;
}
// 发起支付GET
public function requestGet($path, $params, $time){
$url = $this->gateway.$path;
$json = json_encode($params);
$query = [
'authorization' => 'OPEN-FORM-PARAM',
'appId' => $this->appid,
'timestamp' => date('YmdHis', $time),
'nonce' => md5(uniqid(mt_rand(), true)),
'content' => $json
];
$query['signature'] = $this->getSignature($query['timestamp'], $query['nonce'], $query['content']);
return $url . '?' . http_build_query($query);
}
// 获取Authorization
private function getOpenBodySig($body, $time){
$timestamp = date('YmdHis', $time);
$nonce = md5(uniqid(mt_rand(), true));
$signature = $this->getSignature($timestamp, $nonce, $body);
$authorization = 'OPEN-BODY-SIG AppId="'.$this->appid.'", Timestamp="'.$timestamp.'", Nonce="'.$nonce.'", Signature="'.$signature.'"';
return $authorization;
}
// 获取Signature
private function getSignature($timestamp, $nonce, $body){
$hash = hash('sha256', $body);
$str = $this->appid.$timestamp.$nonce.$hash;
$hash = hash_hmac('sha256', $str, $this->appkey, true);
$signature = base64_encode($hash);
return $signature;
}
// 发送请求
private function httpPost($url, $json, $authorization)
{
$ch = curl_init();
$httpheader[] = "Accept: */*";
$httpheader[] = "Accept-Language: zh-CN,zh;q=0.8";
$httpheader[] = "Content-Type: application/json; charset=utf-8";
$httpheader[] = "Connection: close";
$httpheader[] = "Authorization: ".$authorization;
curl_setopt($ch, CURLOPT_HTTPHEADER, $httpheader);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $json);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
$data = curl_exec($ch);
$errno = curl_errno($ch);
if ($errno) {
$msg = 'curl errInfo: ' . curl_error($ch) . ' curl errNo: ' . $errno;
throw new \Exception($msg);
}
curl_close($ch);
return $data;
}
// 回调签名验证
public function verify($params, $key){
$sign = $this->getSign($params, $key, $params['signType']);
if($sign === $params['sign']){
return true;
}
return false;
}
// 计算签名
private function getSign($params, $key, $signType){
ksort($params);
$signstr = '';
foreach($params as $k => $v){
if($k != "sign" && $v!=''){
$signstr .= $k.'='.$v.'&';
}
}
$signstr = substr($signstr, 0, -1);
$signstr = $signstr.$key;
if($signType == 'SHA256'){
$sign = strtoupper(hash('sha256', $signstr));
}else{
$sign = strtoupper(md5($signstr));
}
return $sign;
}
}