文章只是实现了消费功能。
主要的代码清单如下:
<?php /** * @link http://www.360us.net/ * @author dyllen_zhong@qq.com */ class UnionPay { /** * 支付配置 * @var array */ public $config = []; /** * 支付参数,提交到银联对应接口的所有参数 * @var array */ public $params = []; /** * 自动提交表单模板 * @var string */ private $formTemplate = <<<'HTML' <!DOCTYPE HTML> <html> <head> <meta charset="utf-8"> <title>支付</title> </head> <body> <div style="text-align:center">跳转中...</div> <form id="pay_form" name="pay_form" action="%s" method="post"> %s </form> <script type="text/javascript"> document.onreadystatechange = function(){ if(document.readyState == "complete") { document.pay_form.submit(); } }; </script> </body> </html> HTML; /** * 构建自动提交HTML表单 * @return string */ public function createPostForm() { $this->params['signature'] = $this->sign(); $input = ''; foreach($this->params as $key => $item) { $input .= "\t\t<input type=\"hidden\" name=\"{$key}\" value=\"{$item}\">\n"; } return sprintf($this->formTemplate, $this->config['frontUrl'], $input); } /** * 推送订单信息到银联,获取到流水号tn * * @return string */ public function getTn() { $this->params['signature'] = $this->sign(); $result = $this->postUrl($this->config['appUrl'], http_build_query($this->params)); if(!$result) { throw new Exception('推送订单信息到银联请求失败!'); } parse_str($result, $resultArr); if(!isset($resultArr['tn'])) { throw new Exception('获取银联受理订单号失败,原始返回:'.$result); } return $resultArr['tn']; } /** * 验证签名 * 验签规则: * 除signature域之外的所有项目都必须参加验签 * 根据key值按照字典排序,然后用&拼接key=value形式待验签字符串; * 然后对待验签字符串使用sha1算法做摘要; * 用银联公钥对摘要和签名信息做验签操作 * * @throws \Exception * @return bool */ public function verifySign() { $publicKey = $this->getVerifyPublicKey(); $verifyArr = $this->filterBeforSign(); ksort($verifyArr); $verifyStr = $this->arrayToString($verifyArr); $verifySha1 = sha1($verifyStr); $signature = base64_decode($this->params['signature']); $result = openssl_verify($verifySha1, $signature, $publicKey); if($result === -1) { throw new \Exception('Verify Error:'.openssl_error_string()); } return $result === 1 ? true : false; } /** * 取签名证书ID(SN) * @return string */ public function getSignCertId() { return $this->getCertIdPfx($this->config['signCertPath']); } /** * 签名数据 * 签名规则: * 除signature域之外的所有项目都必须参加签名 * 根据key值按照字典排序,然后用&拼接key=value形式待签名字符串; * 然后对待签名字符串使用sha1算法做摘要; * 用银联颁发的私钥对摘要做RSA签名操作 * 签名结果用base64编码后放在signature域 * * @throws \InvalidArgumentException * @return multitype|string */ private function sign() { $signData = $this->filterBeforSign(); ksort($signData); $signQueryString = $this->arrayToString($signData); if($this->params['signMethod'] == 01) { //签名之前先用sha1处理 //echo $signQueryString;exit; $datasha1 = sha1($signQueryString); $signed = $this->rsaSign($datasha1); } else { throw new \InvalidArgumentException('Nonsupport Sign Method'); } return $signed; } /** * 数组转换成字符串 * @param array $arr * @return string */ private function arrayToString($arr) { $str = ''; foreach($arr as $key => $value) { $str .= $key.'='.$value.'&'; } return substr($str, 0, strlen($str) - 1); } /** * 过滤待签名数据 * signature域不参加签名 * * @return array */ private function filterBeforSign() { $tmp = $this->params; unset($tmp['signature']); return $tmp; } /** * RSA签名数据,并base64编码 * @param string $data 待签名数据 * @return mixed */ private function rsaSign($data) { $privatekey = $this->getSignPrivateKey(); $result = openssl_sign($data, $signature, $privatekey); if($result) { return base64_encode($signature); } return false; } /** * 取.pfx格式证书ID(SN) * @return string */ private function getCertIdPfx($path) { $pkcs12certdata = file_get_contents($path); openssl_pkcs12_read($pkcs12certdata, $certs, $this->config['signCertPwd']); $x509data = $certs['cert']; openssl_x509_read($x509data); $certdata = openssl_x509_parse($x509data); return $certdata['serialNumber']; } /** * 取.cer格式证书ID(SN) * @return string */ private function getCertIdCer($path) { $x509data = file_get_contents($path); openssl_x509_read($x509data); $certdata = openssl_x509_parse($x509data); return $certdata['serialNumber']; } /** * 取签名证书私钥 * @return resource */ private function getSignPrivateKey() { $pkcs12 = file_get_contents($this->config['signCertPath']); openssl_pkcs12_read($pkcs12, $certs, $this->config['signCertPwd']); return $certs['pkey']; } /** * 取验证签名证书 * @throws \InvalidArgumentException * @return string */ private function getVerifyPublicKey() { //先判断配置的验签证书与银联返回指定的证书是否一致 if($this->getCertIdCer($this->config['verifyCertPath']) != $this->params['certId']) { throw new \InvalidArgumentException('Verify sign cert is incorrect'); } return file_get_contents($this->config['verifyCertPath']); } /** * 通过POST方法请求URL * @param string $url * @param array|string $data post的数据 * * @return mixed */ protected function postUrl($url, $data) { $curl = curl_init($url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false); //忽略证书验证 curl_setopt($curl, CURLOPT_POST, true); curl_setopt($curl, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl, CURLOPT_POSTFIELDS, $data); $result = curl_exec($curl); return $result; } }
以上这个类可以单独直接使用,需要openssl扩展。
配置如下:
//测试环境参数 //'appUrl' => 'https://101.231.204.80:5000/gateway/api/appTransReq.do', //App请求交易地址 //'singleQueryUrl' => 'https://101.231.204.80:5000/gateway/api/queryTrans.do', //单笔查询请求地址 //'signCertPath' => __DIR__.'/../key/unionpay/test/sign/700000000000001_acp.pfx', //签名证书路径 //'signCertPwd' => '000000', //签名证书密码 //'verifyCertPath' => __DIR__.'/../key/unionpay/test/verify/verify_sign_acp.cer', //验签证书路径 //'merId' => '666666666', //正式环境参数 'appUrl' => 'https://gateway.95516.com/gateway/api/appTransReq.do', //App请求交易地址 //'singleQueryUrl' => 'https://101.231.204.80:5000/gateway/api/queryTrans.do', //单笔查询请求地址 'signCertPath' => __DIR__.'/../key/unionpay/production/sign/crSign.pfx', //签名证书路径 'signCertPwd' => '888888', //签名证书密码 'verifyCertPath' => __DIR__.'/../key/unionpay/production/verify/UpopRsaCert.cer', //验签证书路径 'merId' => '123456789', //商户代码
这些地址参数在sdk的测试指引文档,最后配置文件说明里面有。
正式环境的签名证书需要上传到商户服务网站,还有一点需要注意的是,证书密码不能超过6位,否则上传会不成功。
使用实例:
$unionpay = new UnionPay(); $unionpay->config = []; //上面给出的配置参数 $unionpay->params = [ 'version' => '5.0.0', //版本号 'encoding' => 'UTF-8', //编码方式 'certId' => $unionpay->getSignCertId(), //证书ID 'signature' => '', //签名 'signMethod' => '01', //签名方式 'txnType' => '01', //交易类型 'txnSubType' => '01', //交易子类 'bizType' => '000201', //产品类型 'channelType' => '08',//渠道类型 'backUrl' => $base_url.'api/mobileapp/paynotify/unionpaynotify', //后台通知地址 'accessType' => '0', //接入类型 'merId' => $config['merId'], //商户代码 'orderId' => $order_no, //商户订单号 'txnTime' => date('YmdHis'), //订单发送时间 'txnAmt' => $price * 100, //交易金额,单位分 'currencyCode' => '156', //交易币种 ]; $result = $unionpay->getTn(); //手机控件支付的所需的tn参数。 $result = $unionpay->createPostForm(); //wap网页支付的调整表单。
异步通知处理:
$unionpay = new UnionPay(); $unionpay->config = []; //上面给出的配置参数 $unionpay->params = $_POST; if(!$this->unionpay->verifySign()) { echo 'fail'; exit; } if($this->unionpay->params['respCode'] == '00') { //业务代码 //... } echo 'success';
本来链接:https://360us.net/article/25.html