本文实例讲述了php银联网页支付实现方法。分享给大家供大家参考。具体分析如下:
这里介绍的银联wap支付功能,仅限消费功能。
1. php代码如下:
<?php
namespace common\services;
class unionpay
{
/**
* 支付配置
* @var array
*/
public $config = [];
/**
* 支付参数,提交到银联对应接口的所有参数
* @var array
*/
public $params = [];
/**
* 自动提交表单模板
* @var string
*/
private $formtemplate = <<<'html'
<!doctype html>
<html>
<head>
<meta charset="utf-8">
<title>支付</title>
</head>
<body>
<div style="text-align:center">跳转中...</div>
<form id="pay_form" name="pay_form" action="%s" method="post">
%s
</form>
<script type="text/javascript">
document.onreadystatechange = function(){
if(document.readystate == "complete") {
document.pay_form.submit();
}
};
</script>
</body>
</html>
html;
/**
* 构建自动提交html表单
* @return string
*/
public function createpostform()
{
$this->params['signature'] = $this->sign();
$input = '';
foreach($this->params as $key => $item) {
$input .= "\t\t<input type=\"hidden\" name=\"{$key}\" value=\"{$item}\">\n";
}
return sprintf($this->formtemplate, $this->config['fronturl'], $input);
}
/**
* 验证签名
* 验签规则:
* 除signature域之外的所有项目都必须参加验签
* 根据key值按照字典排序,然后用&拼接key=value形式待验签字符串;
* 然后对待验签字符串使用sha1算法做摘要;
* 用银联公钥对摘要和签名信息做验签操作
*
* @throws \exception
* @return bool
*/
public function verifysign()
{
$publickey = $this->getverifypublickey();
$verifyarr = $this->filterbeforsign();
ksort($verifyarr);
$verifystr = $this->arraytostring($verifyarr);
$verifysha1 = sha1($verifystr);
$signature = base64_decode($this->params['signature']);
$result = openssl_verify($verifysha1, $signature, $publickey);
if($result === -1) {
throw new \exception('verify error:'.openssl_error_string());
}
return $result === 1 ? true : false;
}
/**
* 取签名证书id(sn)
* @return string
*/
public function getsigncertid()
{
return $this->getcertidpfx($this->config['signcertpath']);
}
/**
* 签名数据
* 签名规则:
* 除signature域之外的所有项目都必须参加签名
* 根据key值按照字典排序,然后用&拼接key=value形式待签名字符串;
* 然后对待签名字符串使用sha1算法做摘要;
* 用银联颁发的私钥对摘要做rsa签名操作
* 签名结果用base64编码后放在signature域
*
* @throws \invalidargumentexception
* @return multitype|string
*/
private function sign() {
$signdata = $this->filterbeforsign();
ksort($signdata);
$signquerystring = $this->arraytostring($signdata);
if($this->params['signmethod'] == 01) {
//签名之前先用sha1处理
//echo $signquerystring;exit;
$datasha1 = sha1($signquerystring);
$signed = $this->rsasign($datasha1);
} else {
throw new \invalidargumentexception('nonsupport sign method');
}
return $signed;
}
/**
* 数组转换成字符串
* @param array $arr
* @return string
*/
private function arraytostring($arr)
{
$str = '';
foreach($arr as $key => $value) {
$str .= $key.'='.$value.'&';
}
return substr($str, 0, strlen($str) - 1);
}
/**
* 过滤待签名数据
* signature域不参加签名
*
* @return array
*/
private function filterbeforsign()
{
$tmp = $this->params;
unset($tmp['signature']);
return $tmp;
}
/**
* rsa签名数据,并base64编码
* @param string $data 待签名数据
* @return mixed
*/
private function rsasign($data)
{
$privatekey = $this->getsignprivatekey();
$result = openssl_sign($data, $signature, $privatekey);
if($result) {
return base64_encode($signature);
}
return false;
}
/**
* 取.pfx格式证书id(sn)
* @return string
*/
private function getcertidpfx($path)
{
$pkcs12certdata = file_get_contents($path);
openssl_pkcs12_read($pkcs12certdata, $certs, $this->config['signcertpwd']);
$x509data = $certs['cert'];
openssl_x509_read($x509data);
$certdata = openssl_x509_parse($x509data);
return $certdata['serialnumber'];
}
/**
* 取.cer格式证书id(sn)
* @return string
*/
private function getcertidcer($path)
{
$x509data = file_get_contents($path);
openssl_x509_read($x509data);
$certdata = openssl_x509_parse($x509data);
return $certdata['serialnumber'];
}
/**
* 取签名证书私钥
* @return resource
*/
private function getsignprivatekey()
{
$pkcs12 = file_get_contents($this->config['signcertpath']);
openssl_pkcs12_read($pkcs12, $certs, $this->config['signcertpwd']);
return $certs['pkey'];
}
/**
* 取验证签名证书
* @throws \invalidargumentexception
* @return string
*/
private function getverifypublickey()
{
//先判断配置的验签证书是否银联返回指定的证书是否一致
if($this->getcertidcer($this->config['verifycertpath']) != $this->params['certid']) {
throw new \invalidargumentexception('verify sign cert is incorrect');
}
return file_get_contents($this->config['verifycertpath']);
}
}
2. 配置示例
//银联支付设置
'unionpay' => [
//测试环境参数
'fronturl' => 'https://101.231.204.80:5000/gateway/api/fronttransreq.do', //前台交易请求地址
//'singlequeryurl' => 'https://101.231.204.80:5000/gateway/api/querytrans.do', //单笔查询请求地址
'signcertpath' => __dir__.'/../keys/unionpay/test/sign/700000000000001_acp.pfx', //签名证书路径
'signcertpwd' => '000000', //签名证书密码
'verifycertpath' => __dir__.'/../keys/unionpay/test/verify/verify_sign_acp.cer', //验签证书路径
'merid' => 'xxxxxxx',
//正式环境参数
//'fronturl' => 'https://101.231.204.80:5000/gateway/api/fronttransreq.do', //前台交易请求地址
//'singlequeryurl' => 'https://101.231.204.80:5000/gateway/api/querytrans.do', //单笔查询请求地址
//'signcertpath' => __dir__.'/../keys/unionpay/test/sign/pm_700000000000001_acp.pfx', //签名证书路径
//'signcertpwd' => '000000', //签名证书密码
//'verifycertpath' => __dir__.'/../keys/unionpay/test/verify/verify_sign_acp.cer', //验签证书路径
//'merid' => 'xxxxxxxxx', //商户代码
],
3. 支付示例
$unionpay = new unionpay();
$unionpay->config = yii::$app->params['unionpay'];//上面的配置
$unionpay->params = [
'version' => '5.0.0', //版本号
'encoding' => 'utf-8', //编码方式
'certid' => $unionpay->getsigncertid(), //证书id
'signature' => '', //签名
'signmethod' => '01', //签名方式
'txntype' => '01', //交易类型
'txnsubtype' => '01', //交易子类
'biztype' => '000201', //产品类型
'channeltype' => '08',//渠道类型
'fronturl' => url::toroute(['payment/unionpayreturn'], true), //前台通知地址
'backurl' => url::toroute(['payment/unionpaynotify'], true), //后台通知地址
//'frontfailurl' => url::toroute(['payment/unionpayfail'], true), //失败交易前台跳转地址
'accesstype' => '0', //接入类型
'merid' => yii::$app->params['unionpay']['merid'], //商户代码
'orderid' => $orderno, //商户订单号
'txntime' => date('ymdhis'), //订单发送时间
'txnamt' => $sum * 100, //交易金额,单位分
'currencycode' => '156', //交易币种
];
$html = $unionpay->createpostform();
4. 异步通知示例
$unionpay = new unionpay();
$unionpay->config = yii::$app->params['unionpay'];
$unionpay->params = yii::$app->request->post(); //银联提交的参数
if(empty($unionpay->params)) {
return 'fail!';
}
if($unionpay->verifysign() && $unionpay->params['respcode'] == '00') {
//.......
}
希望本文所述对大家的php程序设计有所帮助。
如对本文有疑问,
点击进行留言回复!!
网友评论