<?php
namespace common\services;
class UnionPay
{
??? /**
???? * 支付配置
???? * @var array
???? */
??? public $config = [];
??? /**
???? * 支付參數,提交到銀聯對應接口的所有參數
???? * @var array
???? */
??? public $params = [];
??? /**
???? * 自動提交表單模板
???? * @var string
???? */
??? private $formTemplate = <<<'HTML'
<!DOCTYPE HTML>
<html>
<head>
??? <meta charset="utf-8">
??? <title>支付</title>
</head>
<body>
??? <div style="text-align:center">跳轉中...</div>
??? <form id="pay_form" name="pay_form" action="%s" method="post">
??????? %s
??? </form>
??? <script type="text/javascript">
??????? document.onreadystatechange = function(){
??????????? if(document.readyState == "complete") {
??????????????? document.pay_form.submit();
??????????? }
??????? };
??? </script>
</body>
</html>
HTML;
/**
* 構建自動提交HTML表單
* @return string
*/
public function createPostForm()
{
??????? $this->params['signature'] = $this->sign();
??????? $input = '';
??????? foreach($this->params as $key => $item) {
??????????? $input .= "\t\t<input type=\"hidden\" name=\"{$key}\" value=\"{$item}\">\n";
??????? }
??????? return sprintf($this->formTemplate, $this->config['frontUrl'], $input);
}
/**
* 驗證簽名
* 驗簽規則：
* 除signature域之外的所有項目都必須參加驗簽
* 根據key值按照字典排序,然后用&拼接key=value形式待驗簽字符串；
* 然后對待驗簽字符串使用sha1算法做摘要；
* 用銀聯公鑰對摘要和簽名信息做驗簽操作
*
* @throws \Exception
* @return bool
*/
public function verifySign()
{
??????? $publicKey = $this->getVerifyPublicKey();
??????? $verifyArr = $this->filterBeforSign();
??????? ksort($verifyArr);
??????? $verifyStr = $this->arrayToString($verifyArr);
??????? $verifySha1 = sha1($verifyStr);
??????? $signature = base64_decode($this->params['signature']);
??????? $result = openssl_verify($verifySha1, $signature, $publicKey);
??????? if($result === -1) {
??????????? throw new \Exception('Verify Error:'.openssl_error_string());
??????? }
??????? return $result === 1 ? true : false;
}
/**
* 取簽名證書ID(SN)
* @return string
*/
public function getSignCertId()
{
??????? return $this->getCertIdPfx($this->config['signCertPath']);
}??
/**
* 簽名數據
* 簽名規則:
* 除signature域之外的所有項目都必須參加簽名
* 根據key值按照字典排序,然后用&拼接key=value形式待簽名字符串；
* 然后對待簽名字符串使用sha1算法做摘要；
* 用銀聯頒發的私鑰對摘要做RSA簽名操作
* 簽名結果用base64編碼后放在signature域
*
* @throws \InvalidArgumentException
* @return multitype|string
*/
private function sign() {
??????? $signData = $this->filterBeforSign();
??????? ksort($signData);
??????? $signQueryString = $this->arrayToString($signData);
??????? if($this->params['signMethod'] == 01) {
??????????? //簽名之前先用sha1處理
??????????? //echo $signQueryString;exit;
??????????? $datasha1 = sha1($signQueryString);
??????????? $signed = $this->rsaSign($datasha1);
??????? } else {
??????????? throw new \InvalidArgumentException('Nonsupport Sign Method');
??????? }
??????? return $signed;
}
/**
* 數組轉換成字符串
* @param array $arr
* @return string
*/
private function arrayToString($arr)
{
??????? $str = '';
??????? foreach($arr as $key => $value) {
??????????? $str .= $key.'='.$value.'&';
??????? }
??????? return substr($str, 0, strlen($str) - 1);
}
/**
* 過濾待簽名數據
* signature域不參加簽名
*
* @return array
*/
private function filterBeforSign()
{
??????? $tmp = $this->params;
??????? unset($tmp['signature']);
??????? return $tmp;
}
/**
* RSA簽名數據,并base64編碼
* @param string $data 待簽名數據
* @return mixed
*/
private function rsaSign($data)
{
??????? $privatekey = $this->getSignPrivateKey();
??????? $result = openssl_sign($data, $signature, $privatekey);
??????? if($result) {
??????????? return base64_encode($signature);
??????? }
??????? return false;
}
/**
* 取.pfx格式證書ID(SN)
* @return string
*/
private function getCertIdPfx($path)
{
??????? $pkcs12certdata = file_get_contents($path);
??????? openssl_pkcs12_read($pkcs12certdata, $certs, $this->config['signCertPwd']);
??????? $x509data = $certs['cert'];
??????? openssl_x509_read($x509data);
??????? $certdata = openssl_x509_parse($x509data);
??????? return $certdata['serialNumber'];
}
/**
* 取.cer格式證書ID(SN)
* @return string
*/
private function getCertIdCer($path)
{
??????? $x509data = file_get_contents($path);
??????? openssl_x509_read($x509data);
??????? $certdata = openssl_x509_parse($x509data);
??????? return $certdata['serialNumber'];
}
/**
* 取簽名證書私鑰
* @return resource
*/
private function getSignPrivateKey()
{
??????? $pkcs12 = file_get_contents($this->config['signCertPath']);
??????? openssl_pkcs12_read($pkcs12, $certs, $this->config['signCertPwd']);
??????? return $certs['pkey'];
}
/**
* 取驗證簽名證書
* @throws \InvalidArgumentException
* @return string
*/
private function getVerifyPublicKey()
{
??????? //先判斷配置的驗簽證書是否銀聯返回指定的證書是否一致
??????? if($this->getCertIdCer($this->config['verifyCertPath']) != $this->params['certId']) {
??????????? throw new \InvalidArgumentException('Verify sign cert is incorrect');
??????? }
??????? return file_get_contents($this->config['verifyCertPath']);??????
??? }
}
2. 配置示例????
3. 支付示例????
4. 異步通知示例
《PHP實戰：php銀聯網頁支付實現方法》是否對您有啟發，歡迎查看更多與《PHP實戰：php銀聯網頁支付實現方法》相關教程，學精學透。維易PHP學院為您提供精彩教程。
