WooYun.org

<?php
// 模拟第三方支付向服务器发包
// 自行修改商户私密KEY，以及抓包的字符串，其它代码不要动。
// 代码已做兼容处理，web支付和wap支付已做过测试。app的后边有实际案例我再加。
// 我是商户私密KEY
define("KEY", 'allen');
// 支付抓包的值放到这里
$str = <<<STR
version=1.0&oid_partner=201504271000301507&user_id=9096&timestamp=20150810030459&sign_type=MD5&sign=339443b3fbf59c6bde2c6b2601604618&busi_partner=101001&no_order=143914709943409096&dt_order=20150810030459&name_goods=%E8%B4%A6%E5%8F%B7%E5%85%85%E5%80%BC&info_order=&money_order=10000&notify_url=http%3A%2F%2Fwww.xyd.net.cn%2Fmodules%2Faccount%2Fpayclasses%2Flianlian%2Fnotify_url.php&url_return=http%3A%2F%2Fwww.xyd.net.cn%2Fmodules%2Faccount%2Fpayclasses%2Flianlian%2Freturn_url.php&userreq_ip=&url_order=&valid_order=10080&bank_code=&pay_type=&no_agree=&shareing_data=&risk_item=&id_type=0&id_no=&acct_name=&flag_modify=&card_no=&back_url=
STR;
// ====================以下代码不必修改=================================
$arr = json_decode($str, true);
if (json_last_error()) {
    $str = urldecode($str);
    parse_str($str, $str);
    $str = json_encode($str);
    $arr = json_decode($str, true);
}
$acct_name = $arr['acct_name'];//真实姓名
$id_no = $arr['id_no']; // 身份证号
$no_agree = $arr['no_agree']; // 签约协议号
$info_order = $arr['info_order']; // 订单描述信息
$money_order = $arr['money_order']; // 交易金额
$no_order = $arr['no_order']; // 商户唯一订单号
$dt_order = $arr['dt_order']; // 商户订单时间
$sign_type = $arr['sign_type']; // 签名方式
$oid_partner = $arr['oid_partner']; // 商户唯一编号
$pay_type = $arr['pay_type'] == '1' ? 1 : 2; // 2：快捷支付 （默认）D：认证支付
$bank_code = isset($arr['bank_code']) ? $arr['bank_code'] : ""; // 银行代码 
$settle_date = date("Y-m-d"); // 清算日期
$result_pay = 'SUCCESS'; // 支付结果
$oid_paybill = ''; // 连连支付支付单号
$id_type = 0;
$key = KEY;
// 签名
$_acct_name = unicode_encode($acct_name, 'utf-8', true, 'u', '');
$_acct_name = $_acct_name == 'u' ? "" : $_acct_name;
$_info_order = unicode_encode($info_order, 'utf-8', true, 'u', '');
$_info_order = $_info_order == 'u' ? "" : $_info_order;
$sign = "info_order={$_info_order}&bank_code={$bank_code}&acct_name={$_acct_name}&dt_order={$dt_order}&id_no={$id_no}&id_type={$id_type}&money_order={$money_order}&no_agree={$no_agree}&no_order={$no_order}&oid_partner={$oid_partner}&pay_type={$pay_type}&result_pay={$result_pay}&settle_date={$settle_date}&sign_type={$sign_type}";
parse_str($sign, $sign);
$sign = paraFilter($sign);
ksort($sign);
reset($sign);
echo $sign = createLinkstring($sign) . "&key={$key}";
echo "\n";
echo $sign = md5($sign); // 签名
$url = $arr['notify_url']; // 商户后台通知地址
$fields = json_encode(array(
    'oid_partner' => $oid_partner,
    'sign_type' => $sign_type,
    'sign' => $sign,
    'dt_order' => $dt_order,
    'no_order' => $no_order,
    'oid_paybill' => $oid_paybill,
    'money_order' => $money_order,
    'result_pay' => $result_pay,
    'settle_date' => $settle_date,
    'info_order' => $info_order,
    'pay_type' => $pay_type,
    'bank_code' => $bank_code,
    'no_agree' => $no_agree,
    'id_type' => $id_type,
    'id_no' => $id_no,
    'acct_name' =>$acct_name,
));
$fields = (is_array($fields)) ? http_build_query($fields) : $fields;   
print_r($fields);
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'POST');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Length: ' . strlen($fields)));   
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);   
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);   
$re=curl_exec($ch);   
curl_close($ch);   
echo $re;
/**
 * 除去数组中的空值和签名参数
 * @param $para 签名参数组
 * return 去掉空值与签名参数后的新签名参数组
 */
function paraFilter($para) {
    $para_filter = array();
    while (list ($key, $val) = each ($para)) {
        if($key == "sign" || $val == "")continue;
        else    $para_filter[$key] = $para[$key];
    }
    return $para_filter;
}
/**
 * 汉字转Unicode编码
 * @param string $str 原始汉字的字符串
 * @param string $encoding 原始汉字的编码
 * @param boot $ishex 是否为十六进制表示（支持十六进制和十进制）
 * @param string $prefix 编码后的前缀
 * @param string $postfix 编码后的后缀
 */
function unicode_encode($str, $encoding = 'UTF-8', $ishex = false, $prefix = '&#', $postfix = ';') {
    $str = iconv($encoding, 'UCS-2', $str);
    $arrstr = str_split($str, 2);
    $unistr = '';
    for($i = 0, $len = count($arrstr); $i < $len; $i++) {
        $dec = $ishex ? bin2hex($arrstr[$i]) : hexdec(bin2hex($arrstr[$i]));
        $unistr .= $prefix . $dec . $postfix;
    }
    return $unistr;
}
/**
 * 把数组所有元素，按照“参数=参数值”的模式用“&”字符拼接成字符串
 * @param $para 需要拼接的数组
 * return 拼接完成以后的字符串
 */
function createLinkstring($para) {
    $arg  = "";
    while (list ($key, $val) = each ($para)) {
        $arg.=$key."=".$val."&";
    }
    $arg = substr($arg,0,count($arg)-2);
    //如果存在转义字符，那么去掉转义
    if(get_magic_quotes_gpc()){$arg = stripslashes($arg);}
    return $arg;
}
/* End of file */