516 lines
28 KiB
PHP
516 lines
28 KiB
PHP
<?php
|
||
namespace lib\api;
|
||
|
||
use Exception;
|
||
|
||
class Pay
|
||
{
|
||
public static function submit()
|
||
{
|
||
global $conf, $DB, $clientip, $order, $userrow;
|
||
@header('Content-Type: text/html; charset=UTF-8');
|
||
if(isset($_GET['pid'])){
|
||
$queryArr=$_GET;
|
||
}elseif(isset($_POST['pid'])){
|
||
$queryArr=$_POST;
|
||
}else{
|
||
exit('你还未配置支付接口商户！');
|
||
}
|
||
|
||
$pid=intval($queryArr['pid']);
|
||
if(empty($pid))sysmsg('商户ID不能为空');
|
||
$userrow=$DB->getRow("SELECT `uid`,`gid`,`key`,`money`,`mode`,`pay`,`cert`,`status`,`channelinfo`,`qq`,`ordername`,`keytype`,`publickey`,`deposit` FROM `pre_user` WHERE `uid`='{$pid}' LIMIT 1");
|
||
if(!$userrow)sysmsg('商户不存在！');
|
||
if(isset($queryArr['__defend'])){
|
||
$defend_result = $queryArr['__defend'];
|
||
unset($queryArr['__defend']);
|
||
}
|
||
|
||
try{
|
||
\lib\ApiHelper::api_verify($userrow, $queryArr);
|
||
}catch(Exception $e){
|
||
sysmsg($e->getMessage());
|
||
}
|
||
|
||
if($userrow['status']==0 || $userrow['pay']==0)sysmsg('商户已被封禁，无法支付！');
|
||
|
||
if($userrow['pay']==2 && $conf['user_review']==1)sysmsg('商户未通过审核，无法支付！');
|
||
|
||
$type=daddslashes($queryArr['type']);
|
||
$out_trade_no=daddslashes($queryArr['out_trade_no']);
|
||
$notify_url=htmlspecialchars(daddslashes($queryArr['notify_url']));
|
||
$return_url=htmlspecialchars(daddslashes($queryArr['return_url']));
|
||
$name=htmlspecialchars(daddslashes($queryArr['name']));
|
||
$money=daddslashes($queryArr['money']);
|
||
$sitename=urlencode(base64_encode(htmlspecialchars($queryArr['sitename'])));
|
||
$param=isset($queryArr['param'])?htmlspecialchars(daddslashes($queryArr['param'])):null;
|
||
|
||
|
||
if(empty($out_trade_no))sysmsg('订单号(out_trade_no)不能为空');
|
||
if(empty($notify_url))sysmsg('通知地址(notify_url)不能为空');
|
||
if(empty($return_url))sysmsg('回调地址(return_url)不能为空');
|
||
if(empty($name))sysmsg('商品名称(name)不能为空');
|
||
if(empty($money))sysmsg('金额(money)不能为空');
|
||
if($money<=0 || !is_numeric($money) || !preg_match('/^[0-9.]+$/', $money))sysmsg('金额不合法');
|
||
if($conf['pay_maxmoney']>0 && $money>$conf['pay_maxmoney'])sysmsg('最大支付金额是'.$conf['pay_maxmoney'].'元');
|
||
if($conf['pay_minmoney']>0 && $money<$conf['pay_minmoney'])sysmsg('最小支付金额是'.$conf['pay_minmoney'].'元');
|
||
if(!preg_match('/^[a-zA-Z0-9.\_\-|]+$/',$out_trade_no))sysmsg('订单号(out_trade_no)格式不正确');
|
||
|
||
$domain=getdomain($notify_url);
|
||
|
||
$groupconfig = getGroupConfig($userrow['gid']);
|
||
$conf = array_merge($conf, $groupconfig);
|
||
|
||
if($conf['cert_force']==1 && $userrow['cert']==0){
|
||
sysmsg('当前商户未完成实名认证，无法收款');
|
||
}
|
||
if($conf['forceqq']==1 && empty($userrow['qq'])){
|
||
sysmsg('当前商户未填写联系QQ，无法收款');
|
||
}
|
||
if($conf['pay_domain_forbid']==1){
|
||
if(!$DB->getRow("SELECT * FROM pre_domain WHERE uid=:uid AND (domain=:domain OR domain=:domain2) AND status=1 LIMIT 1", [':uid'=>$pid, ':domain'=>get_host($notify_url), ':domain2'=>'*.'.get_main_host($notify_url)])){
|
||
sysmsg('该域名不可发起支付，原因：域名没过白，请前往支付平台授权支付域名');
|
||
}
|
||
}
|
||
if($conf['user_deposit']==1 && $conf['user_deposit_min'] > 0 && $conf['user_deposit_min'] > $userrow['deposit']){
|
||
sysmsg('商户保证金不足，请前往支付平台充值保证金后再发起支付');
|
||
}
|
||
|
||
if(!empty($conf['blockname'])){
|
||
$block_name = explode('|',$conf['blockname']);
|
||
foreach($block_name as $rows){
|
||
if(!empty($rows) && strpos($name,$rows)!==false){
|
||
$DB->exec("INSERT INTO `pre_risk` (`uid`, `url`, `content`, `date`) VALUES (:uid, :domain, :rows, NOW())", [':uid'=>$pid,':domain'=>$domain,':rows'=>$rows]);
|
||
sysmsg($conf['blockalert']?$conf['blockalert']:'该商品禁止出售');
|
||
}
|
||
}
|
||
}
|
||
|
||
$blackip = $DB->find('blacklist', '*', ['type'=>1, 'content'=>$clientip], null, 1);
|
||
if($blackip)sysmsg('系统异常无法完成付款');
|
||
|
||
if($conf['pay_iplimit'] > 0){
|
||
$ipcount = $DB->getColumn("select count(*) from pre_order where `ip`='$clientip' and `date`='".date('Y-m-d')."' and status>0");
|
||
if($ipcount >= $conf['pay_iplimit']){
|
||
sysmsg('你今天已无法再发起支付，请明天再试');
|
||
}
|
||
}
|
||
|
||
if(checkPayVerifyOpen($pid)){
|
||
$defend_key = getDefendKey($pid, $out_trade_no);
|
||
if(empty($defend_result) || $defend_key!==substr($defend_result,10,32)){
|
||
showPayVerifyPage($defend_key, $queryArr);
|
||
}
|
||
}
|
||
|
||
if(strlen($name)>127)$name=mb_strcut($name, 0, 127, 'utf-8');
|
||
|
||
$firstGetChannel = true;
|
||
$oldorder = $DB->getRow("SELECT * FROM `pre_order` WHERE `uid`=:uid AND `out_trade_no`=:out_trade_no", [':uid'=>$pid, ':out_trade_no'=>$out_trade_no]);
|
||
if($oldorder && time() - strtotime($oldorder['addtime']) < 864000){
|
||
if($oldorder['status']>0){
|
||
sysmsg('该订单('.$out_trade_no.')已完成支付，请勿重复发起支付');
|
||
}
|
||
if(round($oldorder['money'],2) != round($money,2) || $oldorder['name'] != $name || $oldorder['notify_url'] != $notify_url || $oldorder['return_url'] != $return_url || $oldorder['param'] != $param){
|
||
sysmsg('该订单('.$out_trade_no.')支付参数有变化，请更换订单号重新发起支付');
|
||
}
|
||
$trade_no=$oldorder['trade_no'];
|
||
$typeid = $DB->getColumn("SELECT id FROM pre_type WHERE name=:name LIMIT 1", [':name'=>$type]);
|
||
if($oldorder['type'] > 0 && $oldorder['channel'] > 0 && $oldorder['realmoney'] > 0 && $oldorder['getmoney'] > 0 && $typeid == $oldorder['type']){ //订单已经获取过支付通道信息
|
||
$firstGetChannel = false;
|
||
}
|
||
}else{
|
||
$version = defined('API_INIT') ? 1 : 0;
|
||
$trade_no=date("YmdHis").rand(11111,99999);
|
||
if(!$DB->exec("INSERT INTO `pre_order` (`trade_no`,`out_trade_no`,`uid`,`addtime`,`name`,`money`,`notify_url`,`return_url`,`param`,`domain`,`ip`,`status`,`version`) VALUES (:trade_no, :out_trade_no, :uid, NOW(), :name, :money, :notify_url, :return_url, :param, :domain, :clientip, 0, :version)", [':trade_no'=>$trade_no, ':out_trade_no'=>$out_trade_no, ':uid'=>$pid, ':name'=>$name, ':money'=>$money, ':notify_url'=>$notify_url, ':return_url'=>$return_url, ':domain'=>$domain, ':clientip'=>$clientip, ':param'=>$param, ':version'=>$version]))sysmsg('创建订单失败，请返回重试！');
|
||
}
|
||
|
||
|
||
if(empty($type)){
|
||
echo "<script>window.location.replace('/cashier.php?trade_no={$trade_no}&sitename={$sitename}');</script>";
|
||
exit;
|
||
}
|
||
|
||
// 获取订单支付方式ID、支付插件、支付通道、支付费率
|
||
if($firstGetChannel){
|
||
$submitData = \lib\Channel::submit($type, $userrow['uid'], $userrow['gid'], $money);
|
||
if(!$submitData){
|
||
echo "<script>window.location.replace('/cashier.php?trade_no={$trade_no}&sitename={$sitename}&other=1');</script>";
|
||
exit;
|
||
}
|
||
if($userrow['mode']==1){ //订单加费模式
|
||
$realmoney = round($money*(100+100-$submitData['rate'])/100,2);
|
||
$getmoney = $money;
|
||
if($conf['payfee_lessthan'] > 0 && $conf['payfee_mincost'] > 0){
|
||
$feemoney = round($money*(100-$submitData['rate'])/100,2);
|
||
if($feemoney < round($conf['payfee_lessthan'], 2)){
|
||
$realmoney = round($money + $conf['payfee_mincost'], 2);
|
||
}
|
||
}
|
||
}else{
|
||
$realmoney = $money;
|
||
$getmoney = round($money*$submitData['rate']/100,2);
|
||
if($conf['payfee_lessthan'] > 0 && $conf['payfee_mincost'] > 0){
|
||
$feemoney = round($money*(100-$submitData['rate'])/100,2);
|
||
if($feemoney < round($conf['payfee_lessthan'], 2)){
|
||
$getmoney = round($money - $conf['payfee_mincost'], 2);
|
||
if($getmoney < 0) $getmoney = 0;
|
||
}
|
||
}
|
||
}
|
||
}else{
|
||
$submitData = \lib\Channel::info($oldorder['channel']);
|
||
$submitData['typename'] = $type;
|
||
$submitData['subchannel'] = $oldorder['subchannel'];
|
||
$realmoney = $oldorder['realmoney'];
|
||
$getmoney = $oldorder['getmoney'];
|
||
}
|
||
|
||
// 判断通道单笔支付限额
|
||
if(!empty($submitData['paymin']) && $submitData['paymin']>0 && $money<$submitData['paymin']){
|
||
sysmsg('<center>当前支付方式单笔最小限额为'.$submitData['paymin'].'元，请选择其他支付方式！</center>', '跳转提示');
|
||
}
|
||
if(!empty($submitData['paymax']) && $submitData['paymax']>0 && $money>$submitData['paymax']){
|
||
sysmsg('<center>当前支付方式单笔最大限额为'.$submitData['paymax'].'元，请选择其他支付方式！</center>', '跳转提示');
|
||
}
|
||
// 商户直清模式判断商户余额
|
||
if($submitData['mode']==1 && $realmoney-$getmoney>$userrow['money']){
|
||
sysmsg('当前商户余额不足，无法完成支付，请商户登录用户中心充值余额');
|
||
}
|
||
|
||
if($firstGetChannel){
|
||
// 随机增减金额
|
||
if(!empty($conf['pay_payaddstart'])&&$conf['pay_payaddstart']!=0&&!empty($conf['pay_payaddmin'])&&$conf['pay_payaddmin']!=0&&!empty($conf['pay_payaddmax'])&&$conf['pay_payaddmax']!=0&&$realmoney>=$conf['pay_payaddstart'])$realmoney = round($realmoney + randomFloat(round($conf['pay_payaddmin'],2),round($conf['pay_payaddmax'],2)), 2);
|
||
|
||
$DB->update('order', ['type'=>$submitData['typeid'], 'channel'=>$submitData['channel'], 'subchannel'=>$submitData['subchannel'], 'realmoney'=>$realmoney, 'getmoney'=>$getmoney], ['trade_no'=>$trade_no]);
|
||
}
|
||
|
||
|
||
$order['trade_no'] = $trade_no;
|
||
$order['out_trade_no'] = $out_trade_no;
|
||
$order['uid'] = $pid;
|
||
$order['addtime'] = date('Y-m-d H:i:s');
|
||
$order['name'] = $name;
|
||
$order['realmoney'] = $realmoney;
|
||
$order['type'] = $submitData['typeid'];
|
||
$order['channel'] = $submitData['channel'];
|
||
$order['subchannel'] = $submitData['subchannel'];
|
||
$order['typename'] = $submitData['typename'];
|
||
$order['plugin'] = $submitData['plugin'];
|
||
$order['profits'] = \lib\Payment::updateOrderProfits($order, $submitData['plugin']);
|
||
|
||
try{
|
||
$result = \lib\Plugin::loadForSubmit($submitData['plugin'], $trade_no);
|
||
$result['submit'] = true;
|
||
\lib\Payment::echoDefault($result);
|
||
}catch(Exception $e){
|
||
sysmsg($e->getMessage());
|
||
}
|
||
}
|
||
|
||
|
||
public static function create(){
|
||
global $conf, $DB, $clientip, $order, $userrow, $method, $device, $mdevice, $siteurl;
|
||
if(isset($_POST['pid'])){
|
||
$queryArr=$_POST;
|
||
}else{
|
||
echojsonmsg('未传入任何参数', -4);
|
||
}
|
||
|
||
$pid=intval($queryArr['pid']);
|
||
if(empty($pid))echojsonmsg('商户ID不能为空');
|
||
$userrow=$DB->getRow("SELECT `uid`,`gid`,`key`,`money`,`mode`,`pay`,`cert`,`status`,`channelinfo`,`qq`,`ordername`,`keytype`,`publickey`,`deposit` FROM `pre_user` WHERE `uid`='{$pid}' LIMIT 1");
|
||
if(!$userrow)echojsonmsg('商户不存在！');
|
||
|
||
try{
|
||
\lib\ApiHelper::api_verify($userrow, $queryArr);
|
||
}catch(Exception $e){
|
||
echojsonmsg($e->getMessage(), -3);
|
||
}
|
||
|
||
if($userrow['status']==0 || $userrow['pay']==0)echojsonmsg('商户已被封禁，无法支付！');
|
||
|
||
if($userrow['pay']==2 && $conf['user_review']==1)echojsonmsg('商户未通过审核，无法支付！');
|
||
|
||
$type=daddslashes($queryArr['type']);
|
||
$out_trade_no=daddslashes($queryArr['out_trade_no']);
|
||
$notify_url=htmlspecialchars(daddslashes($queryArr['notify_url']));
|
||
$return_url=htmlspecialchars(daddslashes($queryArr['return_url']));
|
||
$name=htmlspecialchars(daddslashes($queryArr['name']));
|
||
$money=daddslashes($queryArr['money']);
|
||
$clientip=daddslashes($queryArr['clientip']);
|
||
$device=$queryArr['device'];
|
||
if(empty($device))$device = 'pc';
|
||
$sub_openid=$queryArr['sub_openid'];
|
||
$sub_appid=$queryArr['sub_appid'];
|
||
$auth_code=$queryArr['auth_code'];
|
||
$sitename=urlencode(base64_encode(htmlspecialchars($queryArr['sitename'])));
|
||
$param=isset($queryArr['param'])?htmlspecialchars(daddslashes($queryArr['param'])):null;
|
||
$method=$queryArr['method']; //web/jump/jsapi/scan
|
||
if($device == 'jump')$method = 'jump';
|
||
$mdevice='';
|
||
if ($device=='qq'||$device=='wechat'||$device=='alipay'||$device=='app') {
|
||
$mdevice=$device;
|
||
$device='mobile';
|
||
}
|
||
|
||
if(empty($out_trade_no))echojsonmsg('订单号(out_trade_no)不能为空');
|
||
if(empty($notify_url))echojsonmsg('通知地址(notify_url)不能为空');
|
||
if(empty($name))echojsonmsg('商品名称(name)不能为空');
|
||
if(empty($money))echojsonmsg('金额(money)不能为空');
|
||
if(empty($type) && $method != 'scan')echojsonmsg('支付方式(type)不能为空');
|
||
if(empty($clientip))echojsonmsg('用户IP地址(clientip)不能为空');
|
||
if($money<=0 || !is_numeric($money) || !preg_match('/^[0-9.]+$/', $money))echojsonmsg('金额不合法');
|
||
if($conf['pay_maxmoney']>0 && $money>$conf['pay_maxmoney'])echojsonmsg('最大支付金额是'.$conf['pay_maxmoney'].'元');
|
||
if($conf['pay_minmoney']>0 && $money<$conf['pay_minmoney'])echojsonmsg('最小支付金额是'.$conf['pay_minmoney'].'元');
|
||
if(!preg_match('/^[a-zA-Z0-9.\_\-|]+$/',$out_trade_no))echojsonmsg('订单号(out_trade_no)格式不正确');
|
||
if($method == 'jsapi' && empty($sub_openid))echojsonmsg('jsapi支付时参数(sub_openid)不能为空');
|
||
if($method == 'jsapi' && $type=='wxpay' && empty($sub_appid))echojsonmsg('jsapi支付时参数(sub_appid)不能为空');
|
||
if($method == 'scan' && empty($auth_code))echojsonmsg('付款码支付时授权码(auth_code)不能为空');
|
||
if($method == 'scan' && empty($type)){
|
||
$type = getScanPayType($auth_code);
|
||
if($type == 'unknown') echojsonmsg('未知的付款码类型');
|
||
}
|
||
|
||
$groupconfig = getGroupConfig($userrow['gid']);
|
||
$conf = array_merge($conf, $groupconfig);
|
||
|
||
$domain=getdomain($notify_url);
|
||
|
||
if($conf['cert_force']==1 && $userrow['cert']==0){
|
||
echojsonmsg('当前商户未完成实名认证，无法收款');
|
||
}
|
||
if($conf['forceqq']==1 && empty($userrow['qq'])){
|
||
echojsonmsg('当前商户未填写联系QQ，无法收款');
|
||
}
|
||
if($conf['pay_domain_forbid']==1){
|
||
if(!$DB->getRow("SELECT * FROM pre_domain WHERE uid=:uid AND (domain=:domain OR domain=:domain2) AND status=1 LIMIT 1", [':uid'=>$pid, ':domain'=>get_host($notify_url), ':domain2'=>'*.'.get_main_host($notify_url)])){
|
||
echojsonmsg('该域名不可发起支付，原因：域名没过白，请前往支付平台授权支付域名');
|
||
}
|
||
}
|
||
if($conf['user_deposit']==1 && $conf['user_deposit_min'] > 0 && $conf['user_deposit_min'] > $userrow['deposit']){
|
||
echojsonmsg('商户保证金不足，请前往支付平台充值保证金后再发起支付');
|
||
}
|
||
|
||
if(!empty($conf['blockname'])){
|
||
$block_name = explode('|',$conf['blockname']);
|
||
foreach($block_name as $rows){
|
||
if(!empty($rows) && strpos($name,$rows)!==false){
|
||
$DB->exec("INSERT INTO `pre_risk` (`uid`, `url`, `content`, `date`) VALUES (:uid, :domain, :rows, NOW())", [':uid'=>$pid,':domain'=>$domain,':rows'=>$rows]);
|
||
echojsonmsg($conf['blockalert']?$conf['blockalert']:'该商品禁止出售');
|
||
}
|
||
}
|
||
}
|
||
|
||
$blackip = $DB->find('blacklist', '*', ['type'=>1, 'content'=>$clientip], null, 1);
|
||
if($blackip)echojsonmsg('系统异常无法完成付款');
|
||
|
||
if($conf['pay_iplimit'] > 0){
|
||
$ipcount = $DB->getColumn("select count(*) from pre_order where `ip`='$clientip' and `date`='".date('Y-m-d')."' and status>0");
|
||
if($ipcount >= $conf['pay_iplimit']){
|
||
echojsonmsg('你今天已无法再发起支付，请明天再试');
|
||
}
|
||
}
|
||
|
||
if(checkPayVerifyOpen($pid)){
|
||
echojsonmsg('本次支付需要安全验证，请使用跳转支付接口发起支付');
|
||
}
|
||
|
||
if(strlen($name)>127)$name=mb_strcut($name, 0, 127, 'utf-8');
|
||
|
||
$firstGetChannel = true;
|
||
$oldorder = $DB->getRow("SELECT * FROM `pre_order` WHERE `uid`=:uid AND `out_trade_no`=:out_trade_no", [':uid'=>$pid, ':out_trade_no'=>$out_trade_no]);
|
||
if($oldorder && time() - strtotime($oldorder['addtime']) < 864000){
|
||
if($oldorder['status']>0){
|
||
echojsonmsg('该订单('.$out_trade_no.')已完成支付，请勿重复发起支付');
|
||
}
|
||
if(round($oldorder['money'],2) != round($money,2) || $oldorder['name'] != $name || $oldorder['notify_url'] != $notify_url || $oldorder['return_url'] != $return_url || $oldorder['param'] != $param){
|
||
echojsonmsg('该订单('.$out_trade_no.')支付参数有变化，请更换订单号重新发起支付');
|
||
}
|
||
$trade_no=$oldorder['trade_no'];
|
||
$typeid = $DB->getColumn("SELECT id FROM pre_type WHERE name=:name LIMIT 1", [':name'=>$type]);
|
||
if($oldorder['type'] > 0 && $oldorder['channel'] > 0 && $oldorder['realmoney'] > 0 && $oldorder['getmoney'] > 0 && $typeid == $oldorder['type']){ //订单已经获取过支付通道信息
|
||
$firstGetChannel = false;
|
||
}
|
||
}else{
|
||
$version = defined('API_INIT') ? 1 : 0;
|
||
$trade_no=date("YmdHis").rand(11111,99999);
|
||
if(!$DB->exec("INSERT INTO `pre_order` (`trade_no`,`out_trade_no`,`uid`,`addtime`,`name`,`money`,`notify_url`,`return_url`,`param`,`domain`,`ip`,`status`,`version`) VALUES (:trade_no, :out_trade_no, :uid, NOW(), :name, :money, :notify_url, :return_url, :param, :domain, :clientip, 0, :version)", [':trade_no'=>$trade_no, ':out_trade_no'=>$out_trade_no, ':uid'=>$pid, ':name'=>$name, ':money'=>$money, ':notify_url'=>$notify_url, ':return_url'=>$return_url, ':domain'=>$domain, ':clientip'=>$clientip, ':param'=>$param, ':version'=>$version]))echojsonmsg('创建订单失败，请返回重试！');
|
||
}
|
||
|
||
if(empty($type)){
|
||
define("TRADE_NO", $trade_no);
|
||
\lib\Payment::echoJson(['type'=>'jump','url'=>$siteurl.'cashier.php?trade_no='.$trade_no.'&sitename='.$sitename]);
|
||
}
|
||
|
||
// 获取订单支付方式ID、支付插件、支付通道、支付费率
|
||
if($firstGetChannel){
|
||
$submitData = \lib\Channel::submit($type, $userrow['uid'], $userrow['gid'], $money);
|
||
if(!$submitData){
|
||
define("TRADE_NO", $trade_no);
|
||
\lib\Payment::echoJson(['type'=>'jump','url'=>$siteurl.'cashier.php?trade_no='.$trade_no.'&sitename='.$sitename.'&other=1']);
|
||
}
|
||
if($userrow['mode']==1){ //订单加费模式
|
||
$realmoney = round($money*(100+100-$submitData['rate'])/100,2);
|
||
$getmoney = $money;
|
||
if($conf['payfee_lessthan'] > 0 && $conf['payfee_mincost'] > 0){
|
||
$feemoney = round($money*(100-$submitData['rate'])/100,2);
|
||
if($feemoney < round($conf['payfee_lessthan'], 2)){
|
||
$realmoney = round($money + $conf['payfee_mincost'], 2);
|
||
}
|
||
}
|
||
}else{
|
||
$realmoney = $money;
|
||
$getmoney = round($money*$submitData['rate']/100,2);
|
||
if($conf['payfee_lessthan'] > 0 && $conf['payfee_mincost'] > 0){
|
||
$feemoney = round($money*(100-$submitData['rate'])/100,2);
|
||
if($feemoney < round($conf['payfee_lessthan'], 2)){
|
||
$getmoney = round($money - $conf['payfee_mincost'], 2);
|
||
if($getmoney < 0) $getmoney = 0;
|
||
}
|
||
}
|
||
}
|
||
}else{
|
||
$submitData = \lib\Channel::info($oldorder['channel']);
|
||
$submitData['typename'] = $type;
|
||
$submitData['subchannel'] = $oldorder['subchannel'];
|
||
$realmoney = $oldorder['realmoney'];
|
||
$getmoney = $oldorder['getmoney'];
|
||
}
|
||
|
||
// 判断通道单笔支付限额
|
||
if(!empty($submitData['paymin']) && $submitData['paymin']>0 && $money<$submitData['paymin']){
|
||
echojsonmsg('当前支付方式单笔最小限额为'.$submitData['paymin'].'元，请选择其他支付方式！');
|
||
}
|
||
if(!empty($submitData['paymax']) && $submitData['paymax']>0 && $money>$submitData['paymax']){
|
||
echojsonmsg('当前支付方式单笔最大限额为'.$submitData['paymax'].'元，请选择其他支付方式！');
|
||
}
|
||
// 商户直清模式判断商户余额
|
||
if($submitData['mode']==1 && $realmoney-$getmoney>$userrow['money']){
|
||
echojsonmsg('当前商户余额不足，无法完成支付，请商户登录用户中心充值余额');
|
||
}
|
||
|
||
if($firstGetChannel){
|
||
// 随机增减金额
|
||
if(!empty($conf['pay_payaddstart'])&&$conf['pay_payaddstart']!=0&&!empty($conf['pay_payaddmin'])&&$conf['pay_payaddmin']!=0&&!empty($conf['pay_payaddmax'])&&$conf['pay_payaddmax']!=0&&$realmoney>=$conf['pay_payaddstart'])$realmoney = $realmoney + randomFloat(round($conf['pay_payaddmin'],2),round($conf['pay_payaddmax'],2));
|
||
|
||
$DB->update('order', ['type'=>$submitData['typeid'], 'channel'=>$submitData['channel'], 'subchannel'=>$submitData['subchannel'], 'realmoney'=>$realmoney, 'getmoney'=>$getmoney], ['trade_no'=>$trade_no]);
|
||
}
|
||
|
||
$order['trade_no'] = $trade_no;
|
||
$order['out_trade_no'] = $out_trade_no;
|
||
$order['uid'] = $pid;
|
||
$order['addtime'] = date('Y-m-d H:i:s');
|
||
$order['name'] = $name;
|
||
$order['realmoney'] = $realmoney;
|
||
$order['type'] = $submitData['typeid'];
|
||
$order['channel'] = $submitData['channel'];
|
||
$order['subchannel'] = $submitData['subchannel'];
|
||
$order['typename'] = $submitData['typename'];
|
||
$order['plugin'] = $submitData['plugin'];
|
||
$order['profits'] = \lib\Payment::updateOrderProfits($order, $submitData['plugin']);
|
||
$order['sub_openid'] = $sub_openid;
|
||
$order['sub_appid'] = $sub_appid;
|
||
$order['auth_code'] = $auth_code;
|
||
|
||
if($method == 'jump'){
|
||
define("TRADE_NO", $trade_no);
|
||
\lib\Payment::echoJson(['type'=>'jump','url'=>$siteurl.'pay/submit/'.$trade_no.'/']);
|
||
}
|
||
|
||
try{
|
||
$result = \lib\Plugin::loadForSubmit($submitData['plugin'], $trade_no, true);
|
||
\lib\Payment::echoJson($result);
|
||
}catch(Exception $e){
|
||
echojsonmsg($e->getMessage());
|
||
}
|
||
|
||
}
|
||
|
||
public static function query(){
|
||
global $conf, $DB, $queryArr;
|
||
|
||
$pid=intval($queryArr['pid']);
|
||
|
||
if(!empty($queryArr['trade_no'])){
|
||
$trade_no=daddslashes($queryArr['trade_no']);
|
||
$order=$DB->getRow("SELECT * FROM pre_order WHERE uid='{$pid}' and trade_no='{$trade_no}' limit 1");
|
||
}elseif(!empty($queryArr['out_trade_no'])){
|
||
$out_trade_no=daddslashes($queryArr['out_trade_no']);
|
||
$order=$DB->getRow("SELECT * FROM pre_order WHERE uid='{$pid}' and out_trade_no='{$out_trade_no}' limit 1");
|
||
}else{
|
||
throw new Exception('订单号不能为空');
|
||
}
|
||
if($order){
|
||
$type=$DB->getColumn("SELECT name FROM pre_type WHERE id='{$order['type']}' LIMIT 1");
|
||
$result = ['code'=>0, 'trade_no'=>$order['trade_no'],'out_trade_no'=>$order['out_trade_no'],'api_trade_no'=>$order['api_trade_no'],'bill_trade_no'=>$order['bill_trade_no'],'type'=>$type,'pid'=>$order['uid'],'addtime'=>$order['addtime'],'endtime'=>$order['endtime'],'name'=>$order['name'],'money'=>$order['money'],'param'=>$order['param'],'buyer'=>$order['buyer'],'clientip'=>$order['ip'],'status'=>$order['status'],'refundmoney'=>$order['refundmoney']];
|
||
$result = array_filter($result, function($a){return !isEmpty($a);});
|
||
return $result;
|
||
}else{
|
||
throw new Exception('订单号不存在');
|
||
}
|
||
}
|
||
|
||
public static function refund(){
|
||
global $conf, $DB, $userrow, $queryArr;
|
||
|
||
$pid=intval($queryArr['pid']);
|
||
if(!$conf['user_refund']) throw new Exception('管理员未开启商户后台自助退款');
|
||
|
||
$money = trim($queryArr['money']);
|
||
if(!is_numeric($money) || !preg_match('/^[0-9.]+$/', $money))throw new Exception('金额输入错误');
|
||
|
||
if(!empty($queryArr['trade_no'])){
|
||
$trade_no=daddslashes($queryArr['trade_no']);
|
||
}elseif(!empty($queryArr['out_trade_no'])){
|
||
$out_trade_no=daddslashes($queryArr['out_trade_no']);
|
||
$trade_no = $DB->findColumn('order', 'trade_no', ['out_trade_no'=>$out_trade_no, 'uid'=>$pid]);
|
||
if(!$trade_no) throw new Exception('当前订单不存在！');;
|
||
}else{
|
||
throw new Exception('订单号不能为空');
|
||
}
|
||
|
||
$refund_no = date("YmdHis").rand(11111,99999);
|
||
if(!empty($queryArr['out_refund_no']) && strlen($queryArr['out_refund_no']) > 5){ //判断商户是否重复提交退款
|
||
$out_refund_no = daddslashes($queryArr['out_refund_no']);
|
||
$refund_order = $DB->find('refundorder', '*', ['out_refund_no'=>$out_refund_no, 'uid'=>$pid]);
|
||
if($refund_order && $refund_order['status'] == 1){
|
||
$result = ['code'=>0, 'refund_no'=>$refund_order['refund_no'], 'out_refund_no'=>$refund_order['out_refund_no'], 'trade_no'=>$refund_order['trade_no'], 'uid'=>$refund_order['uid'], 'money'=>$refund_order['money'], 'reducemoney'=>$refund_order['reducemoney'], 'msg'=>'已存在相同退款单号！退款金额¥'.$refund_order['money']];
|
||
return $result;
|
||
}elseif($refund_order && $refund_order['status'] == 0){
|
||
$refund_no = $refund_order['refund_no'];
|
||
}
|
||
}
|
||
|
||
$result = \lib\Order::refund($refund_no, $trade_no, $money, 1, $pid, $out_refund_no);
|
||
if($result['code'] == 0){
|
||
$result['msg'] = '退款成功！退款金额¥'.$result['money'];
|
||
}
|
||
return $result;
|
||
}
|
||
|
||
public static function refundquery(){
|
||
global $conf, $DB, $queryArr;
|
||
|
||
$pid=intval($queryArr['pid']);
|
||
if(!$conf['user_refund']) throw new Exception('管理员未开启商户后台自助退款');
|
||
|
||
if(!empty($queryArr['refund_no'])){
|
||
$refund_no=daddslashes($queryArr['refund_no']);
|
||
$refund_order = $DB->find('refundorder', '*', ['refund_no'=>$refund_no, 'uid'=>$pid]);
|
||
}elseif(!empty($queryArr['out_refund_no'])){
|
||
$out_refund_no=daddslashes($queryArr['out_refund_no']);
|
||
$refund_order = $DB->find('refundorder', '*', ['out_refund_no'=>$out_refund_no, 'uid'=>$pid]);
|
||
}else{
|
||
throw new Exception('商户退款单号不能为空');
|
||
}
|
||
|
||
if(!$refund_order)throw new Exception('退款记录不存在');
|
||
|
||
$out_trade_no = $DB->findColumn('order', 'out_trade_no', ['trade_no'=>$refund_order['trade_no']]);
|
||
|
||
$result = ['code'=>0, 'refund_no'=>$refund_order['refund_no'], 'out_refund_no'=>$refund_order['out_refund_no'], 'trade_no'=>$refund_order['trade_no'], 'out_trade_no'=>$out_trade_no, 'uid'=>$refund_order['uid'], 'money'=>$refund_order['money'], 'reducemoney'=>$refund_order['reducemoney'], 'status'=>$refund_order['status'], 'addtime'=>$refund_order['addtime'], 'endtime'=>$refund_order['endtime']];
|
||
|
||
return $result;
|
||
}
|
||
} |