yunzerwebsite/pay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hero920103
2025-11-28 10:08:12 +08:00
commit 09a14bf0a3
1088 changed files with 145132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/hnapay/cert/hnapay.pem
+6
View File
@@ -0,0 +1,6 @@
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCf21zJo95Uf9KKPLxagqzaT+L0
fvsKuLG5cW5rzzHKwgfe8TkU2/ZnI2T0DowRvz7w98kfKBKxu0q/VV8QV21Ui/Ax
OXdfrbQEQ/QVSXtF8NtCpaXqcSOdNQF9dDNpx/VrDpaarv6xp/4nfbeAlf+t6IdU
kfo8Rz0Ne5fihpsSRwIDAQAB
-----END PUBLIC KEY-----
plugins/hnapay/cert/hnapaypay.pem
+6
View File
@@ -0,0 +1,6 @@
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCSU82GM2kEr/s9mvUmMvZjm/Yq
15nWSHWl+rPemOP0/WGCu7xI96OnK94IA5YMMdmou27Nlk2M8+g29IEOBleAwZkI
8MW9FO8ceFI+l0uyBuisd6GEKPLOB7CQb7XKkis/a9dLqxR+aGiWgkC7/E8dlNUm
JUV53TGrgZ2yiVeyVQIDAQAB
-----END PUBLIC KEY-----
plugins/hnapay/hnapay_plugin.php
+577
View File
@@ -0,0 +1,577 @@
<?php
/***
* https://www.yuque.com/chenyanfei-sjuaz/uhng8q
*/
class hnapay_plugin
{
static public $info = [
'name' => 'hnapay', //支付插件英文名称，需和目录名称一致，不能有重复
'showname' => '新生支付', //支付插件显示名称
'author' => '新生支付', //支付插件作者
'link' => 'https://www.hnapay.com/', //支付插件作者链接
'types' => ['alipay','wxpay','bank'], //支付插件支持的支付方式，可选的有alipay,qqpay,wxpay,bank
'transtypes' => ['bank'], //支付插件支持的转账方式，可选的有alipay,qqpay,wxpay,bank
'inputs' => [ //支付插件要求传入的参数以及参数显示名称，可选的有appid,appkey,appsecret,appurl,appmchid
'appid' => [
'name' => '商户ID',
'type' => 'input',
'note' => '',
],
'appkey' => [
'name' => '新生公钥(新收款密钥)',
'type' => 'textarea',
'note' => '',
],
'appsecret' => [
'name' => '商户私钥(新收款密钥)',
'type' => 'textarea',
'note' => '',
],
'appmchid' => [
'name' => '报备编号',
'type' => 'input',
'note' => '',
],
'appswitch' => [
'name' => '接口类型',
'type' => 'select',
'options' => [0 => '公众号/生活号支付', 1 => '支付宝H5', 2 => '扫码支付'],
],
],
'select' => null,
'note' => '需要使用RSA密钥！<br/>如使用扫码支付，需将<b>收款密钥</b>中的<b>商户私钥</b>上传到/plugins/hnapay/cert/mch.key（或cert/商户ID/mch.key）<br/>如使用付款功能，需将<b>付款密钥</b>中的<b>商户私钥</b>上传到/plugins/hnapay/cert/pay.key（或cert/商户ID/pay.key）', //支付密钥填写说明
'bindwxmp' => true, //是否支持绑定微信公众号
'bindwxa' => true, //是否支持绑定微信小程序
];
static public function submit(){
global $siteurl, $channel, $order, $sitename;
if($order['typename']=='alipay'){
if($channel['appswitch']==0 && checkalipay()){
return ['type' => 'jump', 'url' => '/pay/alipayjs/' . TRADE_NO . '/?d=1'];
}elseif($channel['appswitch']==1 && checkalipay()){
return ['type' => 'jump', 'url' => '/pay/alipayh5/' . TRADE_NO . '/'];
}else{
return ['type' => 'jump', 'url' => '/pay/alipay/' . TRADE_NO . '/'];
}
}elseif($order['typename']=='wxpay'){
if($channel['appswitch']==0 && checkwechat()){
return ['type'=>'jump','url'=>'/pay/wxjspay/'.TRADE_NO.'/?d=1'];
}elseif($channel['appswitch']==0 && checkmobile()){
return ['type'=>'jump','url'=>'/pay/wxwappay/'.TRADE_NO.'/'];
}else{
return ['type'=>'jump','url'=>'/pay/wxpay/'.TRADE_NO.'/'];
}
}elseif($order['typename']=='bank'){
return ['type'=>'jump','url'=>'/pay/bank/'.TRADE_NO.'/'];
}
}
static public function mapi(){
global $siteurl, $channel, $order, $conf, $device, $mdevice;
if($order['typename']=='alipay'){
if($channel['appswitch']==0 && $mdevice=='alipay'){
return ['type' => 'jump', 'url' => '/pay/alipayjs/' . TRADE_NO . '/?d=1'];
}elseif($channel['appswitch']==1 && $mdevice=='alipay'){
return ['type' => 'jump', 'url' => '/pay/alipayh5/' . TRADE_NO . '/'];
}else{
return self::alipay();
}
}elseif($order['typename']=='wxpay'){
if($channel['appswitch']==0 && $mdevice=='wechat'){
return ['type'=>'jump','url'=>$siteurl.'pay/wxjspay/'.TRADE_NO.'/?d=1'];
}elseif($channel['appswitch']==0 && $device=='mobile'){
return self::wxwappay();
}else{
return self::wxpay();
}
}elseif($order['typename']=='bank'){
return self::bank();
}
}
//二维码下单通用
static private function qrcode($orgCode){
global $siteurl, $channel, $order, $ordername, $conf, $clientip;
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$param = [
'merOrderNum' => TRADE_NO,
'tranAmt' => strval($order['realmoney']*100),
'submitTime' => substr(TRADE_NO, 0, 14),
'orgCode' => $orgCode,
'goodsName' => $ordername,
'tranIP' => $clientip,
'notifyUrl' => $conf['localurl'].'pay/notifys/'.TRADE_NO.'/',
'weChatMchId' => $channel['appmchid'],
];
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 1);
return \lib\Payment::lockPayData(TRADE_NO, function() use($pay, $param) {
$result = $pay->scanPay($param);
return $result['qrCodeUrl'];
});
}
//JSAPI下单通用
static private function jsapi($orgCode, $appId, $openId){
global $siteurl, $channel, $order, $ordername, $conf, $clientip;
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$param = [
'tranAmt' => $order['realmoney'],
'orgCode' => $orgCode,
'notifyServerUrl' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'merUserIp' => $clientip,
'goodsInfo' => $ordername,
'orderSubject' => $ordername,
'merchantId' => $channel['appmchid'],
];
if($orgCode == 'WECHATPAY'){
$param += [
'appId' => $appId,
'openId' => $openId,
];
}elseif($orgCode == 'ALIPAY'){
$param += [
'aliAppId' => $appId,
'buyerId' => $openId,
];
}
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
return \lib\Payment::lockPayData(TRADE_NO, function() use($pay, $param) {
$result = $pay->jsapiPay($param, TRADE_NO);
return $result['payInfo'];
});
}
//支付宝扫码支付
static public function alipay(){
global $channel, $siteurl;
if($channel['appswitch']==2){
try{
$code_url = self::qrcode('ALIPAY');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'支付宝下单失败！'.$ex->getMessage()];
}
}elseif($channel['appswitch']==1){
if(checkmobile()){
return self::alipayh5();
}else{
$code_url = $siteurl.'pay/alipayh5/'.TRADE_NO.'/?d=1';
}
}else{
$code_url = $siteurl.'pay/alipayjs/'.TRADE_NO.'/';
}
return ['type'=>'qrcode','page'=>'alipay_qrcode','url'=>$code_url];
}
//支付宝JS支付
static public function alipayjs(){
global $conf;
[$user_type, $user_id] = alipay_oauth();
$blocks = checkBlockUser($user_id, TRADE_NO);
if($blocks) return $blocks;
$achannel = \lib\Channel::get($conf['login_alipay']);
try{
$retData = self::jsapi('ALIPAY', $achannel['appid'], $user_id);
}catch(Exception $ex){
return ['type'=>'error','msg'=>'支付宝下单失败！'.$ex->getMessage()];
}
if($_GET['d']=='1'){
$redirect_url='data.backurl';
}else{
$redirect_url='\'/pay/ok/'.TRADE_NO.'/\'';
}
return ['type'=>'page','page'=>'alipay_jspay','data'=>['alipay_trade_no'=>$retData['tradeNO'], 'redirect_url'=>$redirect_url]];
}
//支付宝H5支付
static public function alipayh5(){
global $siteurl, $channel, $order, $ordername, $conf, $clientip;
if($_GET['d']=='1'){
$front_url=$siteurl.'pay/ok/'.TRADE_NO.'/';
}else{
$front_url=$siteurl.'pay/return/'.TRADE_NO.'/';
}
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$param = [
'tranAmt' => $order['realmoney'],
'payType' => 'HnaZFB',
'exPayMode'=>'',
'cardNo'=>'',
'holderName'=>'',
'identityCode'=>'',
'merUserId'=>'',
'orderExpireTime'=>'10',
'frontUrl' => $front_url,
'notifyUrl' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'riskExpand'=>'',
'goodsInfo'=>'',
'orderSubject' => $ordername,
'orderDesc'=>'',
'merchantId' => json_encode(['02'=>$channel['appmchid']]),
'bizProtocolNo'=>'',
'payProtocolNo'=>'',
'merUserIp' => $clientip,
'payLimit'=>'',
];
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
$html = $pay->h5Pay($param, TRADE_NO);
return ['type'=>'html','data'=>$html];
}
//微信扫码支付
static public function wxpay(){
global $channel, $siteurl, $device, $mdevice;
if($channel['appswitch']==2){
try {
$code_url = self::qrcode('WECHATPAY');
} catch (Exception $ex) {
return ['type' => 'error', 'msg' => '微信支付下单失败！' . $ex->getMessage()];
}
}else{
$code_url = $siteurl.'pay/wxjspay/'.TRADE_NO.'/';
}
if($mdevice == 'wechat' || checkwechat()){
return ['type'=>'jump','url'=>$code_url];
} elseif ($device == 'mobile' || checkmobile()) {
return ['type'=>'qrcode','page'=>'wxpay_wap','url'=>$code_url];
} else {
return ['type'=>'qrcode','page'=>'wxpay_qrcode','url'=>$code_url];
}
}
//微信公众号支付
static public function wxjspay(){
global $siteurl, $channel, $order, $ordername, $conf, $clientip;
$wxinfo = \lib\Channel::getWeixin($channel['appwxmp']);
if(!$wxinfo) return ['type'=>'error','msg'=>'支付通道绑定的微信公众号不存在'];
try{
$tools = new \WeChatPay\JsApiTool($wxinfo['appid'], $wxinfo['appsecret']);
$openid = $tools->GetOpenid();
}catch(Exception $e){
return ['type'=>'error','msg'=>$e->getMessage()];
}
$blocks = checkBlockUser($openid, TRADE_NO);
if($blocks) return $blocks;
try{
$pay_info = self::jsapi('WECHATPAY', $wxinfo['appid'], $openid);
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败 '.$ex->getMessage()];
}
if($_GET['d']=='1'){
$redirect_url='data.backurl';
}else{
$redirect_url='\'/pay/ok/'.TRADE_NO.'/\'';
}
return ['type'=>'page','page'=>'wxpay_jspay','data'=>['jsApiParameters'=>json_encode($pay_info), 'redirect_url'=>$redirect_url]];
}
//微信小程序支付
static public function wxminipay(){
global $siteurl,$channel, $order, $ordername, $conf, $clientip;
$code = isset($_GET['code'])?trim($_GET['code']):exit('{"code":-1,"msg":"code不能为空"}');
$wxinfo = \lib\Channel::getWeixin($channel['appwxa']);
if(!$wxinfo)exit('{"code":-1,"msg":"支付通道绑定的微信小程序不存在"}');
try{
$tools = new \WeChatPay\JsApiTool($wxinfo['appid'], $wxinfo['appsecret']);
$openid = $tools->AppGetOpenid($code);
}catch(Exception $e){
exit('{"code":-1,"msg":"'.$e->getMessage().'"}');
}
$blocks = checkBlockUser($openid, TRADE_NO);
if($blocks)exit('{"code":-1,"msg":"'.$blocks['msg'].'"}');
try{
$pay_info = self::jsapi('WECHATPAY', $wxinfo['appid'], $openid);
}catch(Exception $ex){
exit(json_encode(['code'=>-1, 'msg'=>'微信支付下单失败 '.$ex->getMessage()]));
}
exit(json_encode(['code'=>0, 'data'=>$pay_info]));
}
//微信手机支付
static public function wxwappay(){
global $siteurl,$channel, $order, $ordername, $conf, $clientip;
if($channel['appwxa']>0){
$wxinfo = \lib\Channel::getWeixin($channel['appwxa']);
if(!$wxinfo) return ['type'=>'error','msg'=>'支付通道绑定的微信小程序不存在'];
try{
$code_url = wxminipay_jump_scheme($wxinfo['id'], TRADE_NO);
}catch(Exception $e){
return ['type'=>'error','msg'=>$e->getMessage()];
}
return ['type'=>'scheme','page'=>'wxpay_mini','url'=>$code_url];
}else{
return self::wxpay();
}
}
//云闪付扫码支付
static public function bank(){
try{
$code_url = self::qrcode('UNIONPAY');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'银联云闪付下单失败！'.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'bank_qrcode','url'=>$code_url];
}
//异步回调
static public function notify(){
global $channel, $order;
if(!isset($_POST)) return ['type'=>'html','data'=>'no_data'];
//file_put_contents('logs.txt' , http_build_query($_POST));
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
if($_POST['tranCode'] == 'MUP11'){
$verify_result = $pay->alipayh5Verify($_POST);
}else{
$verify_result = $pay->jsapiVerify($_POST);
}
if($verify_result){
if($_POST['resultCode'] == '0000'){
$out_trade_no = $_POST['merOrderId'];
$trade_no = $_POST['hnapayOrderId'];
if(!empty($_POST['bankOrderId'])) $trade_no = $_POST['bankOrderId'];
$bill_trade_no = $_POST['realBankOrderId'];
if($order['type'] == 1 && substr($bill_trade_no, 0, 4) != date('Y') && substr($bill_trade_no, 2, 4) == date('Y')) $bill_trade_no = substr($bill_trade_no, 2);
$money = $_POST['tranAmt'];
$buyer = $_POST['userId'];
if ($out_trade_no == TRADE_NO) {
processNotify($order, $trade_no, $buyer, $bill_trade_no);
}
return ['type'=>'html','data'=>'200'];
}else{
return ['type'=>'html','data'=>'200'];
}
}else{
return ['type'=>'html','data'=>'sign_error'];
}
}
//异步回调(扫码支付)
static public function notifys(){
global $channel, $order;
//file_put_contents('logs.txt' , http_build_query($_POST));
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 1);
if($pay->scanVerify($_POST)){
if($_POST['respCode'] == '0000'){
$out_trade_no = $_POST['merOrderNum'];
$trade_no = $_POST['hnapayOrderId'];
if(!empty($_POST['bankOrderId'])) $trade_no = $_POST['bankOrderId'];
$bill_trade_no = $_POST['realBankOrderId'];
if($order['type'] == 1 && substr($bill_trade_no, 0, 4) != date('Y') && substr($bill_trade_no, 2, 4) == date('Y')) $bill_trade_no = substr($bill_trade_no, 2);
$money = $_POST['tranAmt'];
$buyer = $_POST['userId'];
if ($out_trade_no == TRADE_NO) {
processNotify($order, $trade_no, $buyer, $bill_trade_no);
}
return ['type'=>'html','data'=>'200'];
}else{
return ['type'=>'html','data'=>'200'];
}
}else{
return ['type'=>'html','data'=>'sign_error'];
}
}
//支付成功页面
static public function ok(){
return ['type'=>'page','page'=>'ok'];
}
//支付返回页面
static public function return(){
return ['type'=>'page','page'=>'return'];
}
//退款
static public function refund($order){
global $channel, $conf;
if(empty($order))exit();
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$param = [
'orgMerOrderId' => $order['trade_no'],
'orgSubmitTime' => substr($order['trade_no'], 0, 14),
'orderAmt' => $order['realmoney'],
'refundOrderAmt' => $order['refundmoney'],
'notifyUrl' => $conf['localurl'].'pay/refundnotify/'.TRADE_NO.'/',
];
try{
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
$result = $pay->refund($param, $order['refund_no']);
return ['code'=>0, 'trade_no'=>$result['orgMerOrderId'], 'refund_fee'=>$result['refundAmt']];
}catch(Exception $ex){
return ['code'=>-1, 'msg'=>$ex->getMessage()];
}
}
//退款异步回调
static public function refundnotify(){
global $channel, $order;
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
if($pay->jsapiVerify($_POST)){
if($_POST['resultCode'] == '0000'){
return ['type'=>'html','data'=>'200'];
}else{
return ['type'=>'html','data'=>'status_error'];
}
}else{
return ['type'=>'html','data'=>'sign_error'];
}
}
//转账
static public function transfer($channel, $bizParam){
global $conf, $clientip;
if(empty($channel) || empty($bizParam))exit();
require(PLUGIN_ROOT.'hnapay/inc/HnaPayApi.class.php');
$param = [
'tranAmt' => $bizParam['money'],
'payType' => '1',
'auditFlag' => '0',
'payeeName' => $bizParam['payee_real_name'],
'payeeAccount' => $bizParam['payee_account'],
'note' => '',
'remark' => $bizParam['transfer_desc'],
'bankCode' => '',
'payeeType' => '1',
'notifyUrl' => $conf['localurl'].'pay/transfernotify/'.$channel['id'].'/',
'paymentTerminalInfo' => '01|A10001',
'deviceInfo' => $clientip,
];
try{
$client = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 2);
$result = $client->transfer($param, $bizParam['out_biz_no']);
return ['code'=>0, 'status'=>0, 'orderid'=>$result['hnapayOrderId'], 'paydate'=>date('Y-m-d H:i:s')];
}catch(Exception $ex){
return ['code'=>-1, 'msg'=>$ex->getMessage()];
}
}
//转账查询
static public function transfer_query($channel, $bizParam){
if(empty($channel) || empty($bizParam))exit();
require(PLUGIN_ROOT.'hnapay/inc/HnaPayApi.class.php');
try{
$client = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 2);
$result = $client->transferQuery($bizParam['out_biz_no']);
if($result['orderStatus'] == '1'){
$status = 1;
}elseif($result['orderStatus'] == '0' || $result['orderStatus'] == '3'){
$status = 0;
}else{
$status = 2;
}
if($result['orderFailedCode']){
$errmsg = '['.$result['orderFailedCode'].']'.$result['orderFailedMsg'];
}
return ['code'=>0, 'status'=>$status, 'amount'=>$result['tranAmt'], 'paydate'=>date('Y-m-d H:i:s', strtotime($result['successTime'])), 'errmsg'=>$errmsg];
}catch(Exception $ex){
return ['code'=>-1, 'msg'=>$ex->getMessage()];
}
}
//电子回单
static public function transfer_proof($channel, $bizParam){
if(empty($channel) || empty($bizParam))exit();
require(PLUGIN_ROOT.'hnapay/inc/HnaPayApi.class.php');
try{
$client = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 2);
$result = $client->transferProof($bizParam['orderid']);
file_put_contents(ROOT.'assets/uploads/'.$bizParam['orderid'].'.png', base64_decode($result['payCertificate']));
$image = '/assets/uploads/'.$bizParam['orderid'].'.png';
return ['code'=>0, 'msg'=>'电子回单生成成功！', 'download_url'=>$image];
}catch(Exception $ex){
return ['code'=>-1, 'msg'=>$ex->getMessage()];
}
}
//余额查询
static public function balance_query($channel, $bizParam){
if(empty($channel))exit();
require(PLUGIN_ROOT.'hnapay/inc/HnaPayApi.class.php');
try{
$client = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret']);
$result = $client->queryBalance();
return ['code'=>0, 'amount'=>$result['avaBalance'], 'msg'=>'当前账户可用余额：'.$result['avaBalance'].' 元，待结转金额：'.$result['pendAmt']];
}catch(Exception $ex){
return ['code'=>-1, 'msg'=>$ex->getMessage()];
}
}
//付款异步回调
static public function transfernotify(){
global $channel;
require(PAY_ROOT.'inc/HnaPayApi.class.php');
$pay = new HnaPayApi($channel['appid'], $channel['appkey'], $channel['appsecret'], 2);
if($pay->transferVerify($_POST)){
if($_POST['resultCode'] == '0000'){
$status = 1;
}else{
$status = 2;
}
if($_POST['errorMsg']){
$errmsg = '['.$_POST['errorCode'].']'.$_POST['errorMsg'];
}
processTransfer($_POST['merOrderId'], $status, $errmsg);
return ['type'=>'html','data'=>'200'];
}else{
return ['type'=>'html','data'=>'sign_error'];
}
}
}
plugins/hnapay/inc/HnaPayApi.class.php
+503
View File
@@ -0,0 +1,503 @@
<?php
/**
* 新生支付API
* @see https://www.yuque.com/chenyanfei-sjuaz/uhng8q
*/
class HnaPayApi
{
protected $mer_id;
protected $sign_type = '1'; //1：RSA 3：国密交易证书 4：国密密钥
protected $charset = '1';
private $platform_public_key;
private $merchant_private_key;
public function __construct($mer_id, $platform_public_key, $merchant_private_key, $key_type = 0)
{
$this->mer_id = $mer_id;
if($key_type == 2){
$platform_public_key_path = PLUGIN_ROOT.'hnapay/cert/hnapaypay.pem';
if(file_exists(PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/pay.key')){
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/pay.key';
}else{
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/pay.key';
}
if(!file_exists($merchant_private_key_path)) {
throw new Exception('商户私钥文件pay.key不存在');
}
$this->platform_public_key = $this->loadPublicKeyFile($platform_public_key_path);
$this->merchant_private_key = $this->loadPrivateKeyFile($merchant_private_key_path);
}elseif($key_type == 1){
$platform_public_key_path = PLUGIN_ROOT.'hnapay/cert/hnapay.pem';
if(file_exists(PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/mch.key')){
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/'.$mer_id.'/mch.key';
}else{
$merchant_private_key_path = PLUGIN_ROOT.'hnapay/cert/mch.key';
}
if(!file_exists($merchant_private_key_path)) {
throw new Exception('商户私钥文件mch.key不存在');
}
$this->platform_public_key = $this->loadPublicKeyFile($platform_public_key_path);
$this->merchant_private_key = $this->loadPrivateKeyFile($merchant_private_key_path);
}else{
$this->platform_public_key = $this->loadPublicKey($platform_public_key);
$this->merchant_private_key = $this->loadPrivateKey($merchant_private_key);
}
}
//扫码支付
public function scanPay($params){
$apiurl = 'https://gateway.hnapay.com/website/scanPay.do';
$publicParams = [
'tranCode' => 'WS01',
'version' => '2.1',
'merId' => $this->mer_id,
'payType' => 'QRCODE_B2C',
'charset' => $this->charset,
'signType' => $this->sign_type
];
$params = array_merge($publicParams, $params);
$sign_order = ['tranCode', 'version', 'merId', 'submitTime', 'merOrderNum', 'tranAmt', 'payType', 'orgCode', 'notifyUrl', 'charset', 'signType'];
$params['signMsg'] = $this->generateSignOld($params, $sign_order);
$response = get_curl($apiurl, http_build_query($params));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
if(!empty($arr['signMsg'])){
$sign_order = ['tranCode', 'version', 'merId', 'merOrderNum', 'tranAmt', 'submitTime', 'qrCodeUrl', 'hnapayOrderId', 'resultCode', 'charset', 'signType'];
if(!$this->verifySignOld($arr, $sign_order, $arr['signMsg'])){
throw new Exception('返回结果验签失败');
}
}
$arr['qrCodeUrl'] = getSubstr($arr['qrCodeUrl'], 'qrContent=', '&sign=');
return $arr;
}elseif(isset($arr['resultCode'])){
throw new Exception('['.$arr['resultCode'].']'.$arr['msgExt']);
}else{
throw new Exception('返回数据解析失败');
}
}
//扫码支付查单
public function scanQuery($trade_no){
$apiurl = 'https://gateway.hnapay.com/website/queryOrderResult.htm';
$param = [
'version' => "2.8",
'serialID' => date("YmdHis").rand(11111,99999),
'mode' => '1',
'type' => "1",
'orderID' => $trade_no,
'partnerID' => $this->mer_id,
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$sign_order = ['version', 'serialID', 'mode', 'type', 'orderID', 'beginTime', 'endTime', 'partnerID', 'remark', 'charset', 'signType'];
$signStr = '';
foreach($sign_order as $key){
$signStr .= $key.'='.$param[$key].'&';
}
$signStr = substr($signStr, 0, -1);
$param['signMsg'] = $this->rsaPrivateSign($signStr, true);
$response = get_curl($apiurl, http_build_query($param));
$arr = [];
parse_str($response, $arr);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['resultCode'])){
throw new Exception('['.$arr['resultCode'].']'.$arr['ErrorCode']);
}else{
throw new Exception('返回数据解析失败');
}
}
//扫码支付回调验签
public function scanVerify($param){
if(!$param['signMsg']) return false;
$sign_order = ['tranCode', 'version', 'merId', 'merOrderNum', 'tranAmt', 'submitTime', 'hnapayOrderId', 'tranFinishTime', 'respCode', 'charset', 'signType'];
return $this->verifySignOld($param, $sign_order, $param['signMsg']);
}
//JSAPI支付
public function jsapiPay($params, $trade_no){
$apiurl = 'https://gateway.hnapay.com/ita/inCharge.do';
$param = [
'version' => "2.0",
'tranCode' => "ITA10",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => substr($trade_no, 0, 14),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$param['msgCiphertext'] = $this->encryptParams($params);
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
//print_r($arr);exit;
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
if(!empty($arr['signValue'])){
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'errorCode', 'hnapayOrderId', 'payInfo'];
if(!$this->verifySign($arr, $sign_order, $arr['signValue'])){
throw new Exception('返回结果验签失败');
}
}
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//JSAPI支付与H5支付查单
public function jsapiQuery($trade_no){
$apiurl = 'https://gateway.hnapay.com/exp/query.do';
$param = [
'version' => "2.0",
'tranCode' => "EXP08",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => substr($trade_no, 0, 8),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//JSAPI回调验签
public function jsapiVerify($param){
if(!$param['signValue']) return false;
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'merAttach', 'charset', 'signType', 'hnapayOrderId', 'resultCode', 'tranAmt', 'submitTime', 'tranFinishTime'];
return $this->verifySign($param, $sign_order, $param['signValue']);
}
//支付宝H5支付
public function h5Pay($params, $trade_no){
$apiurl = 'https://gateway.hnapay.com/multipay/h5.do';
$param = [
'version' => "2.0",
'tranCode' => "MUP11",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => substr($trade_no, 0, 14),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$param['msgCiphertext'] = $this->encryptParams($params);
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'signType', 'charset', 'msgCiphertext'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$html = "<form id='alipaysubmit' name='alipaysubmit' action='{$apiurl}' method='POST'>";
foreach ($param as $key => $value) {
$value = htmlentities($value, ENT_QUOTES | ENT_HTML5);
$html .= "<input type='hidden' name='{$key}' value='{$value}'/>";
}
$html .= "<input type='submit' value='ok' style='display:none;'></form>";
$html .= "<script>document.forms['alipaysubmit'].submit();</script>";
return $html;
}
//支付宝H5回调验签
public function alipayh5Verify($param){
if(!$param['signValue']) return false;
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'hnapayOrderId'];
return $this->verifySign($param, $sign_order, $param['signValue']);
}
//退款
public function refund($params, $trade_no){
$apiurl = 'https://gateway.hnapay.com/exp/refund.do';
$param = [
'version' => "2.0",
'tranCode' => "EXP09",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => date('YmdHis'),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$param['msgCiphertext'] = $this->encryptParams($params);
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//付款到银行
public function transfer($params, $trade_no){
$apiurl = 'https://gateway.hnapay.com/website/singlePay.do';
$param = [
'version' => "2.1",
'tranCode' => "SGP01",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => date('YmdHis'),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$param['msgCiphertext'] = $this->encryptParams($params);
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext', 'signType'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//商户账户余额查询
public function transferQuery($orderid){
$apiurl = 'https://gateway.hnapay.com/website/singlePayQuery.do';
$param = [
'version' => "2.0",
'tranCode' => "SGP02",
'merOrderId' => $orderid,
'submitTime' => substr($orderid, 0, 14),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//付款凭证下载
public function transferProof($hnapayOrderId){
$trade_no = date('YmdHis').rand(1000, 9999);
$apiurl = 'https://gateway.hnapay.com/website/payCertificate.do';
$param = [
'version' => "2.0",
'tranCode' => "SGP03",
'merId' => $this->mer_id,
'merOrderId' => $trade_no,
'submitTime' => date('YmdHis'),
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$params = [
'hnapayOrderId' => $hnapayOrderId
];
$param['msgCiphertext'] = $this->encryptParams($params);
$sign_order = ['version', 'tranCode', 'merId', 'merOrderId', 'submitTime', 'msgCiphertext'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//商户账户余额查询
public function queryBalance(){
$apiurl = 'https://gateway.hnapay.com/merchant/acct/queryBalance.do';
$param = [
'version' => "2.0",
'tranCode' => "QB01",
'merId' => $this->mer_id,
'acctType' => '11',
'signType' => $this->sign_type,
'charset' => $this->charset,
];
$sign_order = ['version', 'tranCode', 'merId', 'acctType', 'charset', 'signType'];
$param['signValue'] = $this->generateSign($param, $sign_order);
$response = get_curl($apiurl, http_build_query($param));
$arr = json_decode($response, true);
if(isset($arr['resultCode']) && $arr['resultCode'] == '0000'){
return $arr;
}elseif(isset($arr['errorCode'])){
throw new Exception('['.$arr['errorCode'].']'.$arr['errorMsg']);
}else{
throw new Exception('返回数据解析失败');
}
}
//付款回调验签
public function transferVerify($param){
if(!$param['signValue']) return false;
$sign_order = ['version', 'tranCode', 'merOrderId', 'merId', 'charset', 'signType', 'resultCode', 'hnapayOrderId'];
return $this->verifySign($param, $sign_order, $param['signValue']);
}
//请求参数签名(新收款密钥)
protected function generateSign($param, $sign_order){
$signStr = $this->getSignContent($param, $sign_order);
return $this->rsaPrivateSign($signStr);
}
//请求参数签名(收款密钥)
protected function generateSignOld($param, $sign_order){
$signStr = $this->getSignContent($param, $sign_order);
return $this->rsaPrivateSign($signStr, true);
}
//参数验签(新收款密钥)
protected function verifySign($param, $sign_order, $sign){
$signStr = $this->getSignContent($param, $sign_order);
return $this->rsaPubilcVerify($signStr, $sign);
}
//参数验签(收款密钥)
protected function verifySignOld($param, $sign_order, $sign){
$signStr = $this->getSignContent($param, $sign_order);
return $this->rsaPubilcVerify($signStr, $sign, true);
}
//生成待签名字符串
private function getSignContent($param, $sign_order){
$signStr = '';
foreach($sign_order as $key){
if(!isset($param[$key])){
throw new Exception('缺少参数'.$key);
}
if(is_array($param[$key])) $param[$key] = json_encode($param[$key], JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
$signStr .= $key.'=['.$param[$key].']';
}
return $signStr;
}
//请求参数加密
protected function encryptParams($params){
$key = openssl_get_publickey($this->platform_public_key);
if(!$key){
throw new Exception('加密失败，平台公钥不正确');
}
$data = json_encode($params);
$dataArray = str_split($data, 117);
$crypted = '';
foreach($dataArray as $subData){
$subCrypted = null;
openssl_public_encrypt($subData, $subCrypted, $key);
$crypted .= $subCrypted;
}
$crypted = base64_encode($crypted);
return $crypted;
}
//商户私钥签名
private function rsaPrivateSign($data, $is_hex = false){
openssl_sign($data, $sign, $this->merchant_private_key, OPENSSL_ALGO_SHA1);
$sign = $is_hex ? bin2hex($sign) : base64_encode($sign);
return $sign;
}
//平台公钥验签
private function rsaPubilcVerify($data, $sign, $is_hex = false){
$sign = $is_hex ? hex2bin($sign) : base64_decode($sign);
$result = openssl_verify($data, $sign, $this->platform_public_key);
return $result === 1;
}
//加载平台公钥
private function loadPublicKey($public_key){
$res = "-----BEGIN PUBLIC KEY-----\n" .
wordwrap($public_key, 64, "\n", true) .
"\n-----END PUBLIC KEY-----";
$pubkeyid = openssl_get_publickey($res);
if(!$pubkeyid){
throw new Exception('平台公钥不正确');
}
return $pubkeyid;
}
//加载商户私钥
private function loadPrivateKey($private_key){
$res = "-----BEGIN RSA PRIVATE KEY-----\n" .
wordwrap($private_key, 64, "\n", true) .
"\n-----END RSA PRIVATE KEY-----";
$prikeyid = openssl_get_privatekey($res);
if(!$prikeyid){
throw new Exception('商户私钥不正确');
}
return $prikeyid;
}
//从文件加载平台公钥
private function loadPublicKeyFile($public_key_path){
$res = file_get_contents($public_key_path);
$pubkeyid = openssl_get_publickey($res);
if(!$pubkeyid){
throw new Exception('平台公钥不正确');
}
return $pubkeyid;
}
//从文件加载商户私钥
private function loadPrivateKeyFile($private_key_path){
$res = file_get_contents($private_key_path);
$prikeyid = openssl_get_privatekey($res);
if(!$prikeyid){
throw new Exception('商户私钥不正确');
}
return $prikeyid;
}
}