yunzerwebsite/pay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hero920103
2025-11-28 10:08:12 +08:00
commit 09a14bf0a3
1088 changed files with 145132 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/swiftpass2/inc/SwiftpassClient.class.php
+292
View File
@@ -0,0 +1,292 @@
<?php
class SwiftpassClient
{
//版本号
private $version = '2.0';
//签名类型
private $signType = 'MD5';
//网关地址
private $gatewayUrl = 'https://pay.swiftpass.cn/pay/gateway';
//商户号
private $mchId;
//商户MD5密钥
private $key;
//商户RSA私钥
private $rsaPrivateKey;
//平台RSA公钥
private $rsaPublicKey;
/**
* @param $config 支付配置信息
*/
public function __construct($config)
{
$this->signType = $config['sign_type'];
if (empty($config['mchid'])) {
throw new \InvalidArgumentException("商户号不能为空");
}
$this->mchId = $config['mchid'];
if ($this->signType == 'MD5') {
if (empty($config['key'])) {
throw new \InvalidArgumentException("商户密钥不能为空");
}
$this->key = $config['key'];
}
if (substr($this->signType, 0, 3) == 'RSA') {
if (empty($config['rsa_private_key']) || empty($config['rsa_public_key'])) {
throw new \InvalidArgumentException("商户私钥/平台公钥不能为空");
}
$this->rsaPrivateKey = $config['rsa_private_key'];
$this->rsaPublicKey = $config['rsa_public_key'];
}
if (!empty($config['gateway_url'])) {
$this->gatewayUrl = $config['gateway_url'];
}
}
/**
* 发起请求并解析返回结果
*/
public function requestApi($params)
{
if (empty($params['service'])) {
throw new \InvalidArgumentException("service参数不能为空");
}
$publicParams = [
'mch_id' => $this->mchId,
'version' => $this->version,
'sign_type' => $this->signType,
'nonce_str' => $this->getNonceStr()
];
$params = array_merge($publicParams, $params);
$params['sign'] = $this->makeSign($params);
$xml = $this->array2Xml($params);
$response = $this->curl($this->gatewayUrl, $xml);
$result = $this->xml2array($response);
if (isset($result['status']) && $result['status'] == '0') {
if (!$this->verifySign($result)) {
throw new Exception('返回数据签名校验失败');
}
if (isset($result['result_code']) && $result['result_code'] == '0') {
return $result;
} else {
throw new \Exception('['.$result['err_code'].']'.$result['err_msg']);
}
} elseif(isset($result['message'])) {
throw new \Exception($result['message']);
} else {
throw new \Exception('返回数据解析失败');
}
}
/**
* 支付结果通知
* @return bool|mixed
*/
public function notify()
{
$xml = file_get_contents("php://input");
if (empty($xml)) {
throw new \Exception('no_data');
}
$result = $this->xml2array($xml);
if (!$result) {
throw new \Exception('xml_error');
}
if (!$this->verifySign($result)) {
throw new \Exception('sign_error');
}
return $result;
}
/**
* 验证签名
*/
private function verifySign($params)
{
if(!isset($params['sign'])) return false;
$signStr = $this->getSignContent($params);
if (substr($this->signType, 0, 3) == 'RSA') {
return $this->rsaPublicVerify($signStr, $params['sign']);
} else {
$sign = md5($signStr . '&key=' . $this->key);
$sign = strtoupper($sign);
return $params['sign'] === $sign;
}
}
/**
* 生成签名
* @param $params
* @return string
*/
private function makeSign($params)
{
$signStr = $this->getSignContent($params);
if (substr($this->signType, 0, 3) == 'RSA') {
$sign = $this->rsaPrivateSign($signStr);
} else {
$sign = md5($signStr . '&key=' . $this->key);
$sign = strtoupper($sign);
}
return $sign;
}
/**
* 生成待签名字符串
*/
private function getSignContent($params)
{
ksort($params);
$signStr = '';
foreach ($params as $k => $v) {
if($k != 'sign' && !$this->isEmpty($v)){
$signStr .= $k . '=' . $v . '&';
}
}
$signStr = substr($signStr, 0, -1);
return $signStr;
}
/**
* 商户RSA私钥签名
*/
private function rsaPrivateSign($data)
{
$key = "-----BEGIN RSA PRIVATE KEY-----\n" .
wordwrap($this->rsaPrivateKey, 64, "\n", true) .
"\n-----END RSA PRIVATE KEY-----";
$privatekey = openssl_get_privatekey($key);
if (!$privatekey) {
throw new \Exception("签名失败，商户RSA私钥错误");
}
if ($this->signType == 'RSA_1_1') {
openssl_sign($data, $sign, $privatekey);
} else if ($this->signType == 'RSA_1_256') {
openssl_sign($data, $sign, $privatekey, OPENSSL_ALGO_SHA256);
}
return base64_encode($sign);
}
/**
* 平台公钥验签
*/
private function rsaPublicVerify($data, $sign)
{
$key = "-----BEGIN PUBLIC KEY-----\n" .
wordwrap($this->rsaPublicKey, 64, "\n", true) .
"\n-----END PUBLIC KEY-----";
$publickey = openssl_get_publickey($key);
if (!$publickey) {
throw new \Exception("验签失败，平台RSA公钥错误");
}
if ($this->signType == 'RSA_1_1') {
$result = openssl_verify($data, base64_decode($sign), $publickey);
} else if ($this->signType == 'RSA_1_256') {
$result = openssl_verify($data, base64_decode($sign), $publickey, OPENSSL_ALGO_SHA256);
}
return $result === 1;
}
/**
* 校验某字符串或可被转换为字符串的数据，是否为 NULL 或均为空白字符.
*
* @param string|null $value
*
* @return bool
*/
private function isEmpty($value)
{
return $value === null || trim($value) === '';
}
/**
* 产生随机字符串，不长于32位
* @param int $length
* @return 产生的随机字符串
*/
private function getNonceStr($length = 32)
{
$chars = "abcdefghijklmnopqrstuvwxyz0123456789";
$str = "";
for ($i = 0; $i < $length; $i++) {
$str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
}
return $str;
}
/**
* 转为XML数据
* @param array $data 源数据
* @return string
*/
private function array2Xml($data)
{
if (!is_array($data)) {
return false;
}
$xml = '<xml>';
foreach ($data as $key => $val) {
$xml .= (is_numeric($val) ? "<{$key}>{$val}</{$key}>" : "<{$key}><![CDATA[{$val}]]></{$key}>");
}
return $xml . '</xml>';
}
/**
* 解析XML数据
* @param string $xml 源数据
* @return mixed
*/
private function xml2array($xml)
{
if (!$xml) {
return false;
}
if(function_exists('libxml_disable_entity_loader')) {
libxml_disable_entity_loader(true);
}
return json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA), JSON_UNESCAPED_UNICODE), true);
}
/**
* 以post方式提交xml到对应的接口url
* @param string $url url
* @param string $xml 需要post的xml数据
* @param int $second url执行超时时间
* @return string
*/
private function curl($url, $xml, $second = 10)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_TIMEOUT, $second);
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($ch, CURLOPT_HEADER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, $xml);
$data = curl_exec($ch);
if (curl_errno($ch) > 0) {
$errmsg = curl_error($ch);
curl_close($ch);
throw new \Exception('call http err :'.$errmsg, 0);
}
$httpStatusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
if ($httpStatusCode != 200) {
curl_close($ch);
throw new \Exception('call http err httpcode='.$httpStatusCode, $httpStatusCode);
}
curl_close($ch);
return $data;
}
}
plugins/swiftpass2/inc/SwiftpassConfig.php
+15
View File
@@ -0,0 +1,15 @@
<?php
$swiftpass_config = [
//网关地址(留空为默认)
'gateway_url' => $channel['appurl'],
//签名类型
'sign_type' => 'MD5',
//商户号
'mchid' => $channel['appid'],
//商户MD5密钥
'key' => $channel['appkey'],
];
return $swiftpass_config;
plugins/swiftpass2/swiftpass2_plugin.php
+372
View File
@@ -0,0 +1,372 @@
<?php
class swiftpass2_plugin
{
static public $info = [
'name' => 'swiftpass2', //支付插件英文名称，需和目录名称一致，不能有重复
'showname' => '威富通MD5', //支付插件显示名称
'author' => '威富通', //支付插件作者
'link' => 'https://www.swiftpass.cn/', //支付插件作者链接
'types' => ['alipay','wxpay','qqpay','bank','jdpay'], //支付插件支持的支付方式，可选的有alipay,qqpay,wxpay,bank
'inputs' => [ //支付插件要求传入的参数以及参数显示名称，可选的有appid,appkey,appsecret,appurl,appmchid
'appid' => [
'name' => '商户号',
'type' => 'input',
'note' => '',
],
'appkey' => [
'name' => '商户密钥',
'type' => 'input',
'note' => '',
],
'appurl' => [
'name' => '自定义网关URL',
'type' => 'input',
'note' => '可不填,默认是https://pay.swiftpass.cn/pay/gateway',
],
'appswitch' => [
'name' => '微信是否支持H5',
'type' => 'select',
'options' => [0=>'否',1=>'是'],
],
],
'select' => null,
'note' => '', //支付密钥填写说明
'bindwxmp' => true, //是否支持绑定微信公众号
'bindwxa' => true, //是否支持绑定微信小程序
];
static public function submit(){
global $siteurl, $channel, $order, $sitename;
if($order['typename']=='alipay'){
return ['type'=>'jump','url'=>'/pay/alipay/'.TRADE_NO.'/'];
}elseif($order['typename']=='wxpay'){
if(checkwechat()){
return ['type'=>'jump','url'=>'/pay/wxjspay/'.TRADE_NO.'/?d=1'];
}elseif(checkmobile()){
return ['type'=>'jump','url'=>'/pay/wxwappay/'.TRADE_NO.'/'];
}else{
return ['type'=>'jump','url'=>'/pay/wxpay/'.TRADE_NO.'/'];
}
}elseif($order['typename']=='qqpay'){
return ['type'=>'jump','url'=>'/pay/qqpay/'.TRADE_NO.'/'];
}elseif($order['typename']=='jdpay'){
return ['type'=>'jump','url'=>'/pay/jdpay/'.TRADE_NO.'/'];
}elseif($order['typename']=='bank'){
return ['type'=>'jump','url'=>'/pay/bank/'.TRADE_NO.'/'];
}
}
static public function mapi(){
global $siteurl, $channel, $order, $conf, $device, $mdevice;
if($order['typename']=='alipay'){
return self::alipay();
}elseif($order['typename']=='wxpay'){
if($mdevice=='wechat'){
if ($channel['appwxmp']>0) {
return ['type'=>'jump','url'=>$siteurl.'pay/wxjspay/'.TRADE_NO.'/?d=1'];
}else{
return self::wxjspay();
}
}elseif($device=='mobile'){
return self::wxwappay();
}else{
return self::wxpay();
}
}elseif($order['typename']=='qqpay'){
return self::qqpay();
}elseif($order['typename']=='jdpay'){
return self::jdpay();
}elseif($order['typename']=='bank'){
return self::bank();
}
}
//扫码通用
static private function nativepay($service){
global $channel, $order, $ordername, $conf, $clientip;
require(PAY_ROOT.'inc/SwiftpassClient.class.php');
$pay_config = require(PAY_ROOT.'inc/SwiftpassConfig.php');
$params = [
'service' => $service,
'body' => $ordername,
'total_fee' => strval($order['realmoney']*100),
'mch_create_ip' => $clientip,
'out_trade_no' => TRADE_NO,
'notify_url' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
];
$client = new SwiftpassClient($pay_config);
$result = $client->requestApi($params);
$code_url = $result['code_url'];
if(strpos($code_url,'myun.tenpay.com')){
$qrcode=explode('&t=',$code_url);
$code_url = 'https://qpay.qq.com/qr/'.$qrcode[1];
}
return $code_url;
}
//微信JS支付
static private function weixinjspay($sub_appid, $sub_openid, $is_minipg = 0){
global $channel, $order, $ordername, $conf, $clientip;
require(PAY_ROOT.'inc/SwiftpassClient.class.php');
$pay_config = require(PAY_ROOT.'inc/SwiftpassConfig.php');
$params = [
'service' => 'pay.weixin.jspay',
'is_raw' => '1',
'is_minipg' => strval($is_minipg),
'body' => $ordername,
'sub_appid' => $sub_appid,
'sub_openid' => $sub_openid,
'total_fee' => strval($order['realmoney']*100),
'mch_create_ip' => $clientip,
'out_trade_no' => TRADE_NO,
'device_info' => 'AND_WAP',
'notify_url' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
];
$client = new SwiftpassClient($pay_config);
$result = $client->requestApi($params);
$pay_info = $result['pay_info'];
return $pay_info;
}
//微信H5支付
static private function weixinh5pay(){
global $siteurl, $channel, $order, $ordername, $conf, $clientip;
require(PAY_ROOT.'inc/SwiftpassClient.class.php');
$pay_config = require(PAY_ROOT.'inc/SwiftpassConfig.php');
$params = [
'service' => 'pay.weixin.wappay',
'body' => $ordername,
'total_fee' => strval($order['realmoney']*100),
'mch_create_ip' => $clientip,
'out_trade_no' => TRADE_NO,
'device_info' => 'AND_WAP',
'mch_app_name' => $conf['sitename'],
'mch_app_id' => $siteurl,
'notify_url' => $conf['localurl'].'pay/notify/'.TRADE_NO.'/',
'callback_url' => $siteurl.'pay/return/'.TRADE_NO.'/'
];
$client = new SwiftpassClient($pay_config);
$result = $client->requestApi($params);
$pay_info = $result['pay_info'];
return $pay_info;
}
//支付宝扫码支付
static public function alipay(){
try{
$code_url = self::nativepay('pay.alipay.native');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'支付宝支付下单失败 '.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'alipay_qrcode','url'=>$code_url];
}
//微信扫码支付
static public function wxpay(){
try{
$code_url = self::nativepay('pay.weixin.native');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败 '.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'wxpay_qrcode','url'=>$code_url];
}
//QQ扫码支付
static public function qqpay(){
try{
$code_url = self::nativepay('pay.tenpay.native');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'QQ钱包支付下单失败 '.$ex->getMessage()];
}
if(checkmobile() && !isset($_GET['qrcode'])){
return ['type'=>'qrcode','page'=>'qqpay_wap','url'=>$code_url];
}else{
return ['type'=>'qrcode','page'=>'qqpay_qrcode','url'=>$code_url];
}
}
//云闪付扫码支付
static public function bank(){
try{
$code_url = self::nativepay('pay.unionpay.native');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'云闪付下单失败 '.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'bank_qrcode','url'=>$code_url];
}
//京东扫码支付
static public function jdpay(){
try{
$code_url = self::nativepay('pay.jdpay.native');
}catch(Exception $ex){
return ['type'=>'error','msg'=>'京东支付下单失败 '.$ex->getMessage()];
}
return ['type'=>'qrcode','page'=>'jdpay_qrcode','url'=>$code_url];
}
//微信公众号支付
static public function wxjspay(){
global $siteurl,$channel, $order, $ordername, $conf, $clientip;
if($channel['appwxmp']>0){
$wxinfo = \lib\Channel::getWeixin($channel['appwxmp']);
if(!$wxinfo) return ['type'=>'error','msg'=>'支付通道绑定的微信公众号不存在'];
try{
$tools = new \WeChatPay\JsApiTool($wxinfo['appid'], $wxinfo['appsecret']);
$openid = $tools->GetOpenid();
}catch(Exception $e){
return ['type'=>'error','msg'=>$e->getMessage()];
}
$blocks = checkBlockUser($openid, TRADE_NO);
if($blocks) return $blocks;
try{
$pay_info = self::weixinjspay($wxinfo['appid'], $openid);
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败 '.$ex->getMessage()];
}
if($_GET['d']=='1'){
$redirect_url='data.backurl';
}else{
$redirect_url='\'/pay/ok/'.TRADE_NO.'/\'';
}
return ['type'=>'page','page'=>'wxpay_jspay','data'=>['jsApiParameters'=>$pay_info, 'redirect_url'=>$redirect_url]];
}else{
$code_url = self::nativepay('unified.trade.native');
return ['type'=>'jump','url'=>$code_url];
}
}
//微信小程序支付
static public function wxminipay(){
global $siteurl,$channel, $order, $ordername, $conf, $clientip;
$code = isset($_GET['code'])?trim($_GET['code']):exit('{"code":-1,"msg":"code不能为空"}');
$wxinfo = \lib\Channel::getWeixin($channel['appwxa']);
if(!$wxinfo)exit('{"code":-1,"msg":"支付通道绑定的微信小程序不存在"}');
try{
$tools = new \WeChatPay\JsApiTool($wxinfo['appid'], $wxinfo['appsecret']);
$openid = $tools->AppGetOpenid($code);
}catch(Exception $e){
exit('{"code":-1,"msg":"'.$e->getMessage().'"}');
}
$blocks = checkBlockUser($openid, TRADE_NO);
if($blocks)exit('{"code":-1,"msg":"'.$blocks['msg'].'"}');
try{
$pay_info = self::weixinjspay($wxinfo['appid'], $openid, '1');
}catch(Exception $ex){
exit(json_encode(['code'=>-1, 'msg'=>'微信支付下单失败 '.$ex->getMessage()]));
}
exit(json_encode(['code'=>0, 'data'=>json_decode($pay_info, true)]));
}
//微信手机支付
static public function wxwappay(){
global $siteurl,$channel, $order, $ordername, $conf, $clientip;
if($channel['appswitch']==1){
try{
$pay_info = self::weixinh5pay();
return ['type'=>'jump','url'=>$pay_info];
}catch(Exception $ex){
return ['type'=>'error','msg'=>'微信支付下单失败 '.$ex->getMessage()];
}
}elseif($channel['appwxa']>0){
$wxinfo = \lib\Channel::getWeixin($channel['appwxa']);
if(!$wxinfo) return ['type'=>'error','msg'=>'支付通道绑定的微信小程序不存在'];
try{
$code_url = wxminipay_jump_scheme($wxinfo['id'], TRADE_NO);
}catch(Exception $e){
return ['type'=>'error','msg'=>$e->getMessage()];
}
return ['type'=>'scheme','page'=>'wxpay_mini','url'=>$code_url];
}else{
$code_url = $siteurl.'pay/wxjspay/'.TRADE_NO.'/';
return ['type'=>'qrcode','page'=>'wxpay_wap','url'=>$code_url];
}
}
//异步回调
static public function notify(){
global $channel, $order;
require(PAY_ROOT.'inc/SwiftpassClient.class.php');
$pay_config = require(PAY_ROOT.'inc/SwiftpassConfig.php');
try{
$client = new SwiftpassClient($pay_config);
$result = $client->notify();
if($result['status'] == '0' && $result['result_code'] == '0'){
if($result['out_trade_no'] == TRADE_NO && $result['total_fee']==strval($order['realmoney']*100)){
processNotify($order, $result['transaction_id'], $result['openid']);
}
return ['type'=>'html','data'=>'success'];
}else{
return ['type'=>'html','data'=>'failure'];
}
}catch(Exception $e){
return ['type'=>'html','data'=>$e->getMessage()];
}
}
//支付成功页面
static public function ok(){
return ['type'=>'page','page'=>'ok'];
}
//支付返回页面
static public function return(){
return ['type'=>'page','page'=>'return'];
}
//退款
static public function refund($order){
global $channel;
if(empty($order))exit();
require(PAY_ROOT.'inc/SwiftpassClient.class.php');
$pay_config = require(PAY_ROOT.'inc/SwiftpassConfig.php');
$params = [
'service' => 'unified.trade.refund',
'transaction_id' => $order['api_trade_no'],
'out_refund_no' => $order['refund_no'],
'total_fee' => strval($order['realmoney']*100),
'refund_fee' => strval($order['refundmoney']*100),
'op_user_id' => $pay_config['mchid'],
];
try{
$client = new SwiftpassClient($pay_config);
$data = $client->requestApi($params);
$result = ['code'=>0, 'trade_no'=>$data['refund_id'], 'refund_fee'=>$data['refund_fee']];
}catch(Exception $e){
$result = ['code'=>-1, 'msg'=>$e->getMessage()];
}
return $result;
}
}