106 lines
4.4 KiB
PHP
106 lines
4.4 KiB
PHP
<?php
|
|
|
|
class PayNotifyController {
|
|
|
|
const PUB_KEY = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2g2T98rLysZAS1pVv2gE/2DOf9+LkHI9oEFVeKvVZKLHMNzEpZkXK+IXJMHpxlMNLStiwuLxLpnvCQQptGbFohqDsHACademc6/t+YVF2FX4F6GIgBuaPDdJwSGAljtU5P3vsCbJpGPXh6QNyKveBAJKILbXem6pPl+J01CMXyQIDAQAB';
|
|
|
|
protected function getMysql($accountid)
|
|
{
|
|
$mysql_conf = getMysqlConfig(crc32($accountid));
|
|
$conn = new phpcommon\Mysql(array(
|
|
'host' => $mysql_conf['host'],
|
|
'port' => $mysql_conf['port'],
|
|
'user' => $mysql_conf['user'],
|
|
'passwd' => $mysql_conf['passwd'],
|
|
'dbname' => 'paydb'
|
|
));
|
|
return $conn;
|
|
}
|
|
|
|
private function _redPubkey()
|
|
{
|
|
$pem = "-----BEGIN PUBLIC KEY-----\n" .
|
|
chunk_split(self::PUB_KEY, 64, "\n") .
|
|
"-----END PUBLIC KEY-----\n";
|
|
echo $pem;
|
|
return openssl_pkey_get_public($pem);
|
|
}
|
|
|
|
private function _redPrikey()
|
|
{
|
|
$pem = "-----BEGIN RSA PRIVATE KEY-----\n" .
|
|
chunk_split(self::PRI_KEY, 64, "\n") .
|
|
"-----END RSA PRIVATE KEY-----\n";
|
|
error_log($pem);
|
|
return openssl_pkey_get_private($pem);
|
|
}
|
|
|
|
private function _reaEncode($str) {
|
|
$prikey = self::_redPrikey();
|
|
return openssl_sign($str, $sign, $prikey, OPENSSL_ALGO_SHA1) ? base64_encode($sign) : false;
|
|
}
|
|
|
|
public function payNotify()
|
|
{
|
|
die();
|
|
error_log('payNotify:' . json_encode($_REQUEST));
|
|
$sign_info = $this->_reaEncode(
|
|
'MerNo=' . $_REQUEST['MerNo'] . '&' .
|
|
'BillNo=' . $_REQUEST['BillNo'] . '&' .
|
|
'OrderNo=' . $_REQUEST['OrderNo'] . '&' .
|
|
'Amount=' . $_REQUEST['Amount'] . '&' .
|
|
'Succeed=' . $_REQUEST['Succeed']
|
|
);
|
|
if ($sign_info != $_REQUEST['SignInfo']) {
|
|
die('sign error');
|
|
}
|
|
$nowtime = time();
|
|
$conn = $this->getMysql($_REQUEST['OrderNo']);
|
|
$conn->execScript("INSERT INTO notify_his(orderid, request_data, ipv4, createtime)" .
|
|
"VALUES(:orderid, :request_data, :ipv4, :createtime);",
|
|
array(
|
|
':orderid' => $_REQUEST['OrderNo'],
|
|
':request_data' => json_encode($_REQUEST),
|
|
':ipv4' => phpcommon\getIPv4(),
|
|
':createtime' => time()
|
|
));
|
|
if ($_REQUEST['Succeed'] == '88') {
|
|
$row = $conn->execQueryOne('SELECT orderid, accountid, sp_pay_result, status FROM orderinfo ' .
|
|
'WHERE orderid=:orderid;',
|
|
array(
|
|
'orderid' => $_REQUEST['OrderNo']
|
|
)
|
|
);
|
|
if ($row) {
|
|
if ($row['status'] == 0 && $row['sp_pay_result'] == 0) {
|
|
$ret = $conn->execScript('INSERT INTO confirmed_order(orderid, status, createtime)' .
|
|
'VALUES(:orderid, :status, :createtime);',
|
|
array(
|
|
':orderid' => $_REQUEST['OrderNo'],
|
|
':status' => 0,
|
|
':createtime' => 0,
|
|
));
|
|
if (!$ret) {
|
|
die('dberror');
|
|
}
|
|
$ret = $conn->execScript('UPDATE orderinfo SET ' .
|
|
' sp_pay_result = 1, ' .
|
|
' sp_confirm_time = :sp_confirm_time, ' .
|
|
' sp_orderid = :sp_orderid' .
|
|
'WHERE orderid=:orderid;',
|
|
array(
|
|
'orderid' => $_REQUEST['OrderNo'],
|
|
'sp_orderid' => $_REQUEST['BillNo'],
|
|
'sp_confirm_time' => $nowtime
|
|
));
|
|
if ($ret) {
|
|
die('ok');
|
|
}
|
|
}
|
|
}
|
|
}
|
|
die('sign error');
|
|
}
|
|
|
|
}
|