buy_index.php 5.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
  1. <?
  2. include("../../../config/conn.php");
  3. include("../../../config/function.php");
  4. function curl_post_https($url,$data){ // 模拟提交数据函数
  5. $curl = curl_init(); // 启动一个CURL会话
  6. curl_setopt($curl, CURLOPT_URL, $url); // 要访问的地址
  7. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0); // 对认证证书来源的检查
  8. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 1); // 从证书中检查SSL加密算法是否存在
  9. curl_setopt($curl, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']); // 模拟用户使用的浏览器
  10. curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1); // 使用自动跳转
  11. curl_setopt($curl, CURLOPT_AUTOREFERER, 1); // 自动设置Referer
  12. curl_setopt($curl, CURLOPT_POST, 1); // 发送一个常规的Post请求
  13. curl_setopt($curl, CURLOPT_POSTFIELDS, $data); // Post提交的数据包
  14. curl_setopt($curl, CURLOPT_TIMEOUT, 30); // 设置超时限制防止死循环
  15. curl_setopt($curl, CURLOPT_HEADER, 0); // 显示返回的Header区域内容
  16. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); // 获取的信息以文件流的形式返回
  17. $tmpInfo = curl_exec($curl); // 执行操作
  18. if (curl_errno($curl)) {
  19. echo 'Errno'.curl_error($curl);//捕抓异常
  20. }
  21. curl_close($curl); // 关闭CURL会话
  22. return $tmpInfo; // 返回数据,json格式
  23. }
  24. function getIp(){
  25. $ip = '';
  26. if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){
  27. $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
  28. }elseif(isset($_SERVER['HTTP_CLIENT_IP'])){
  29. $ip = $_SERVER['HTTP_CLIENT_IP'];
  30. }else{
  31. $ip = $_SERVER['REMOTE_ADDR'];
  32. }
  33. $ip_arr = explode(',', $ip);
  34. return $ip_arr[0];
  35. }
  36. $sqluser="select * from yjcode_user where uid='".$_SESSION[SHOPUSER]."'";mysql_query("SET NAMES 'GBK'");$resuser=mysql_query($sqluser);
  37. if(!$rowuser=mysql_fetch_array($resuser)){php_toheader(weburl."m/reg/");}
  38. $userid=$rowuser[id];
  39. $sj=date("Y-m-d H:i:s");
  40. include("../../../user/buycheck.php");
  41. if(sqlzhuru($_POST[jvs])=="carpay"){
  42. if($needmoney<=$usermoney){Audit_alert("您的可用余额充足,请用余额直接支付。",weburl."m/user/carpay.php?carid=".$carid);}
  43. zwzr();
  44. $bh=time();
  45. $uip=getIp();
  46. $ddbh=time().$userid.rnd_num(99999);
  47. $money1=sprintf("%.2f",$needmoney-$usermoney);
  48. $money=$money1*100;
  49. intotable("yjcode_dingdang","bh,ddbh,userid,sj,uip,money1,ddzt,alipayzt,bz,ifok,carid,sxf","'".$bh."','".$ddbh."',".$rowuser[id].",'".$sj."','".$uip."',".$money1.",'wait','','wx-h5',0,'".$caridarr."',".$sxf."");
  50. }
  51. $wxpay=preg_split("/,/",$rowcontrol[wxpay]);
  52. $userip =$uip; //获得用户设备IP 自己网上百度去
  53. $appid = $wxpay[0];//微信给的
  54. $mch_id = $wxpay[1];//微信官方的
  55. $key = $wxpay[2];//自己设置的微信商家key
  56. $out_trade_no = $ddbh;//平台内部订单号
  57. $nonce_str=MD5($out_trade_no);//随机字符串
  58. $body = "weixin";//内容
  59. $total_fee = $money; //金额
  60. $spbill_create_ip = $userip; //IP
  61. $notify_url = weburl."m/user/wxpay/example/buy_notify.php"; //回调地址
  62. $trade_type = 'MWEB';//交易类型 具体看API 里面有详细介绍
  63. $scene_info ='{"h5_info":{"type":"Wap","wap_url":"'.weburl.'","wap_name":"支付"}}';//场景信息 必要参数
  64. $signA ="appid=$appid&body=$body&mch_id=$mch_id&nonce_str=$nonce_str&notify_url=$notify_url&out_trade_no=$out_trade_no&scene_info=$scene_info&spbill_create_ip=$spbill_create_ip&total_fee=$total_fee&trade_type=$trade_type";
  65. $strSignTmp = $signA."&key=$key"; //拼接字符串 注意顺序微信有个测试网址 顺序按照他的来 直接点下面的校正测试 包括下面XML 是否正确
  66. $sign = strtoupper(MD5($strSignTmp)); // MD5 后转换成大写
  67. $post_data = "<xml>
  68. <appid>$appid</appid>
  69. <body>$body</body>
  70. <mch_id>$mch_id</mch_id>
  71. <nonce_str>$nonce_str</nonce_str>
  72. <notify_url>$notify_url</notify_url>
  73. <out_trade_no>$out_trade_no</out_trade_no>
  74. <scene_info>$scene_info</scene_info>
  75. <spbill_create_ip>$spbill_create_ip</spbill_create_ip>
  76. <total_fee>$total_fee</total_fee>
  77. <trade_type>$trade_type</trade_type>
  78. <sign>$sign</sign>
  79. </xml>";//拼接成XML 格式
  80. $url = "https://api.mch.weixin.qq.com/pay/unifiedorder";//微信传参地址
  81. $dataxml = curl_post_https($url,$post_data); //后台POST微信传参地址 同时取得微信返回的参数 POST 方法我写下面了
  82. $objectxml = (array)simplexml_load_string($dataxml, 'SimpleXMLElement', LIBXML_NOCDATA); //将微信返回的XML 转换成数组
  83. $a1=preg_split("/prepay_id=/",$objectxml["mweb_url"]);
  84. $a2=preg_split("/&/",$a1[1]);
  85. $b1=preg_split("/package=/",$objectxml["mweb_url"]);
  86. php_toheader("https://wx.tenpay.com/cgi-bin/mmpayweb-bin/checkmweb?prepay_id=".$a2[0]."&package=".$b1[1]."&redirect_url=".urlencode($notify_url));
  87. ?>