银联网页支付-PHP源码-PHP中文网

银联wap支付功能，仅限消费功能。

http://www.360us.net/article/25.html

<?php
namespace common\services;

class UnionPay
{
	/**
	 * 支付配置
	 * @var array
	 */
	public $config = [];
	
	/**
	 * 支付参数，提交到银联对应接口的所有参数
	 * @var array
	 */
	public $params = [];
	
	/**
	 * 自动提交表单模板
	 * @var string
	 */
	private $formTemplate = <<<'HTML'
<!DOCTYPE HTML>
<html>
<head>
    <meta charset="utf-8">
	<title>支付</title>
</head>
<body>
	<p style="text-align:center">跳转中...</p>
	<form id="pay_form" name="pay_form" action="%s" method="post">
		%s
	</form>
    <script type="text/javascript">
	    document.onreadystatechange = function(){
            if(document.readyState == "complete") {
                document.pay_form.submit();
            }
        };
	</script>
</body>
</html>
HTML;
	
	/**
	 * 构建自动提交HTML表单
	 * @return string
	 */
	public function createPostForm()
	{
	    $this->params['signature'] = $this->sign();
	    $input = '';
	    foreach($this->params as $key => $item) {
	    	$input .= "\t\t<input type=\"hidden\" name=\"{$key}\" value=\"{$item}\">\n";
	    }
	    
	    return sprintf($this->formTemplate, $this->config['frontUrl'], $input);
	}
	
	/**
	 * 验证签名
	 * 验签规则：
	 * 除signature域之外的所有项目都必须参加验签
	 * 根据key值按照字典排序，然后用&拼接key=value形式待验签字符串；
	 * 然后对待验签字符串使用sha1算法做摘要；
	 * 用银联公钥对摘要和签名信息做验签操作
	 * 
	 * @throws \Exception
	 * @return bool
	 */
	public function verifySign()
	{
		$publicKey = $this->getVerifyPublicKey();
		$verifyArr = $this->filterBeforSign();
		ksort($verifyArr);
		$verifyStr = $this->arrayToString($verifyArr);
		$verifySha1 = sha1($verifyStr);
		$signature = base64_decode($this->params['signature']);
		$result = openssl_verify($verifySha1, $signature, $publicKey);
		if($result === -1) {
			throw new \Exception('Verify Error:'.openssl_error_string());
		}
		
		return $result === 1 ? true : false;
	}
	
	/**
	 * 取签名证书ID(SN)
	 * @return string
	 */
	public function getSignCertId()
	{
		return $this->getCertIdPfx($this->config['signCertPath']);
	}	
	
	/**
	 * 签名数据
	 * 签名规则:
	 * 除signature域之外的所有项目都必须参加签名
	 * 根据key值按照字典排序，然后用&拼接key=value形式待签名字符串；
	 * 然后对待签名字符串使用sha1算法做摘要；
	 * 用银联颁发的私钥对摘要做RSA签名操作
	 * 签名结果用base64编码后放在signature域
	 * 
	 * @throws \InvalidArgumentException
	 * @return multitype|string
	 */
	private function sign() {
		$signData = $this->filterBeforSign();
		ksort($signData);
		$signQueryString = $this->arrayToString($signData);
		
		if($this->params['signMethod'] == 01) {
			//签名之前先用sha1处理
			//echo $signQueryString;exit;
			$datasha1 = sha1($signQueryString);
			$signed = $this->rsaSign($datasha1);
		} else {
			throw new \InvalidArgumentException('Nonsupport Sign Method');
		}
				
		return $signed;
		
	}
	
	/**
	 * 数组转换成字符串
	 * @param array $arr
	 * @return string
	 */
	private function arrayToString($arr)
	{
		$str = '';
		foreach($arr as $key => $value) {
			$str .= $key.'='.$value.'&';
		}
		return substr($str, 0, strlen($str) - 1);
	}
	
	/**
	 * 过滤待签名数据
	 * signature域不参加签名
	 * 
	 * @return array
	 */
	private function filterBeforSign()
	{
		$tmp = $this->params;
		unset($tmp['signature']);
		return $tmp;
	}
	
	/**
	 * RSA签名数据，并base64编码
	 * @param string $data 待签名数据
	 * @return mixed
	 */
	private function rsaSign($data)
	{
		$privatekey = $this->getSignPrivateKey();
		$result = openssl_sign($data, $signature, $privatekey);
		if($result) {
			return base64_encode($signature);
		}
		return false;
	}
	
	/**
	 * 取.pfx格式证书ID(SN)
	 * @return string
	 */
	private function getCertIdPfx($path)
	{
		$pkcs12certdata = file_get_contents($path);
		openssl_pkcs12_read($pkcs12certdata, $certs, $this->config['signCertPwd']);
		$x509data = $certs['cert'];
		openssl_x509_read($x509data);
		$certdata = openssl_x509_parse($x509data);
		return $certdata['serialNumber'];
	}
	
	/**
	 * 取.cer格式证书ID(SN)
	 * @return string
	 */
	private function getCertIdCer($path)
	{
		$x509data = file_get_contents($path);
		openssl_x509_read($x509data);
		$certdata = openssl_x509_parse($x509data);
		return $certdata['serialNumber'];
	}
	
	/**
	 * 取签名证书私钥
	 * @return resource
	 */
	private function getSignPrivateKey()
	{
		$pkcs12 = file_get_contents($this->config['signCertPath']);
		openssl_pkcs12_read($pkcs12, $certs, $this->config['signCertPwd']);
		return $certs['pkey'];
	}
	
	/**
	 * 取验证签名证书
	 * @throws \InvalidArgumentException
	 * @return string
	 */
	private function getVerifyPublicKey()
	{
		//先判断配置的验签证书是否银联返回指定的证书是否一致
		if($this->getCertIdCer($this->config['verifyCertPath']) != $this->params['certId']) {
			throw new \InvalidArgumentException('Verify sign cert is incorrect');
		}
		return file_get_contents($this->config['verifyCertPath']);		
	}
}

登录后复制

2. [代码]配置示例

去日租网站系统

去日租程序是一款具有强大的功能的基于.NET+SQL2000+AJAX构架的房屋出租管理系统。日租网站管理系统,采用ASP.NET2.0语言开发，它集成租房模块、文章模块、订单模块、邮箱短信模块、用户模板、SEO优化模块、房间模块、支付模块等多项强大功能。系统有多年经验的高级工程师采用三层架构开发，页面代码全部采用DIV+CSS，完全符合SEO标准，有利于搜索引擎关键排名优化。日租网站

查看详情

   //银联支付设置
	'unionpay' => [
		//测试环境参数
	    'frontUrl' => 'https://101.231.204.80:5000/gateway/api/frontTransReq.do', //前台交易请求地址
	    //'singleQueryUrl' => 'https://101.231.204.80:5000/gateway/api/queryTrans.do', //单笔查询请求地址
	    'signCertPath' => __DIR__.'/../keys/unionpay/test/sign/700000000000001_acp.pfx', //签名证书路径
	    'signCertPwd' => '000000', //签名证书密码
	    'verifyCertPath' => __DIR__.'/../keys/unionpay/test/verify/verify_sign_acp.cer', //验签证书路径
	    'merId' => 'xxxxxxx',
	    
		//正式环境参数
		//'frontUrl' => 'https://101.231.204.80:5000/gateway/api/frontTransReq.do', //前台交易请求地址
		//'singleQueryUrl' => 'https://101.231.204.80:5000/gateway/api/queryTrans.do', //单笔查询请求地址
		//'signCertPath' => __DIR__.'/../keys/unionpay/test/sign/PM_700000000000001_acp.pfx', //签名证书路径
		//'signCertPwd' => '000000', //签名证书密码
		//'verifyCertPath' => __DIR__.'/../keys/unionpay/test/verify/verify_sign_acp.cer', //验签证书路径
	    //'merId' => 'xxxxxxxxx', //商户代码
	],

登录后复制

3. [代码]支付示例

$unionPay = new UnionPay();
$unionPay->config = Yii::$app->params['unionpay'];//上面的配置
		
$unionPay->params = [
	'version' => '5.0.0', //版本号
	'encoding' => 'UTF-8', //编码方式
	'certId' => $unionPay->getSignCertId(), //证书ID
	'signature' => '', //签名
	'signMethod' => '01', //签名方式
	'txnType' => '01', //交易类型
	'txnSubType' => '01', //交易子类
	'bizType' => '000201', //产品类型
	'channelType' => '08',//渠道类型
	'frontUrl' => Url::toRoute(['payment/unionpayreturn'], true), //前台通知地址
	'backUrl' => Url::toRoute(['payment/unionpaynotify'], true), //后台通知地址
	//'frontFailUrl' => Url::toRoute(['payment/unionpayfail'], true), //失败交易前台跳转地址
	'accessType' => '0', //接入类型
	'merId' => Yii::$app->params['unionpay']['merId'], //商户代码
	'orderId' => $orderNo, //商户订单号
	'txnTime' => date('YmdHis'), //订单发送时间
	'txnAmt' => $sum * 100, //交易金额，单位分
	'currencyCode' => '156', //交易币种
];
		
$html = $unionPay->createPostForm();

登录后复制

4. [代码]异步通知示例

$unionPay = new UnionPay();
$unionPay->config = Yii::$app->params['unionpay'];
		
$unionPay->params = Yii::$app->request->post(); //银联提交的参数
if(empty($unionPay->params)) {
    return 'fail!';
}
if($unionPay->verifySign() && $unionPay->params['respCode'] == '00') {
    //.......
}

登录后复制