Payios.php 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735
  1. <?php
  2. namespace app\api\controller;
  3. use app\common\controller\Api;
  4. use think\Db;
  5. use addons\epay\library\Service;
  6. /**
  7. * 充值配置与充值订单
  8. */
  9. class Payios extends Api
  10. {
  11. protected $noNeedLogin = ['auto_renewal_vip_notify'];
  12. protected $noNeedRight = ['*'];
  13. //vip ios用的
  14. public function vip_config_ios(){
  15. $list = Db::name('payvip_config_ios')->field('id,money,days,title,info,bundle_id,is_lianxu')->where('is_show',1)->order('weight asc,id asc')->select();
  16. $data['vipconfig'] = $list;
  17. $data['vip_endtime'] = model('wallet')->getWallet($this->auth->id,'vip_endtime');
  18. $data['is_vip'] = $data['vip_endtime'] > time() ? 1 : 0;
  19. $data['avatar'] = localpath_to_netpath($this->auth->avatar);
  20. $this->success('success',$data);
  21. }
  22. //vip用的,创建订单
  23. public function vip_recharge_ios(){
  24. $rc_id = input('rc_id',0);
  25. $platform = 'app';
  26. $uid = $this->auth->id;
  27. if(!$rc_id){
  28. $this->error('请选择会员套餐');
  29. }
  30. if(!$this->user_auth_limit()){
  31. $this->error('请先完成实名认证');
  32. }
  33. //赋值money
  34. $recharge_config = Db::name('payvip_config_ios')->where('id',$rc_id)->find();
  35. $money = $recharge_config['money'];
  36. if($money<=0)
  37. {
  38. $this->error('支付金额必须大于0');
  39. }
  40. if($money > 10000){
  41. $this->error('支付金额太大');
  42. }
  43. //创建订单
  44. $data = [];
  45. $data['user_id'] = $uid;
  46. $data['out_trade_no'] = createUniqueNo('V',$uid); // 数据库订单号加密
  47. $data['order_amount'] = $money;
  48. $data['createtime'] = time();
  49. $data['pay_type'] = 'ios';
  50. $data['platform'] = $platform;
  51. $data['order_status'] = 0;
  52. $data['table_name'] = 'vip_recharge';
  53. $data['table_id'] = 0;
  54. $data['args'] = json_encode(['days'=>$recharge_config['days']]);
  55. $data['bundle_id'] = $recharge_config['bundle_id'];
  56. $data['is_lianxu'] = $recharge_config['is_lianxu'];
  57. $orderid = Db::name('pay_order')->insertGetId($data);
  58. $this->success('success',$data['out_trade_no']);
  59. }
  60. //vip,苹果内购支付回调
  61. //因前端不传入订单号,作废,且与gold_notify_iosnew 已完成合并
  62. public function vip_notify_ios(){
  63. //苹果内购的验证收据
  64. $receipt_data = input('apple_receipt', '', 'trim');
  65. $order_no = input('order_no', '', 'trim');
  66. filePut('VIP ios充值:参数apple_receipt='.$receipt_data.',order_no='.$order_no);
  67. if (!$receipt_data || !$order_no) {
  68. $this->error('缺少参数');
  69. }
  70. Db::startTrans();
  71. // 查找订单
  72. $order_info = Db::name('pay_order')->where(['out_trade_no' => $order_no])->lock(true)->find();
  73. if (!$order_info) {
  74. Db::rollback();
  75. filePut('VIP ios充值:订单丢失out_trade_no='.$order_no);
  76. $this->error('订单丢失');
  77. }
  78. if ($order_info['order_status'] == 1) {
  79. Db::rollback();
  80. $this->success('充值成功');
  81. }
  82. // 验证支付状态
  83. $result = $this->validate_apple_pay($receipt_data);
  84. if (!$result['status']) {// 验证不通过
  85. Db::rollback();
  86. filePut('VIP ios充值:验证out_trade_no='.$order_no.','.$result['message']);
  87. $this->error($result['message']);
  88. }
  89. $count = count($result['data']['receipt']['in_app']);
  90. $use_count = $count - 1;
  91. $args = json_decode($order_info['args'],true);
  92. if ($result['data']['receipt']['in_app'][$use_count]['product_id'] != $order_info['bundle_id']) {
  93. Db::rollback();
  94. filePut('VIP ios充值:非法请求,请立刻停止out_trade_no='.$order_no.','.$result['message'].','.$result['data']['receipt']['in_app'][$use_count]['product_id'].'!='.$order_info['bundle_id']);
  95. $this->error('非法请求,请立刻停止');
  96. }
  97. //逻辑开始
  98. //先充值
  99. $user_info = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->lock(true)->find();
  100. if($user_info['vip_endtime'] < time()){
  101. //过期了
  102. $vip_endtime = time() + (intval($args['days']) * 86400);
  103. }else{
  104. //追加vip
  105. $vip_endtime = $user_info['vip_endtime'] + (intval($args['days']) * 86400);
  106. }
  107. $update_data = [
  108. 'vip_endtime'=>$vip_endtime,
  109. ];
  110. $result = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->update($update_data);
  111. if($result === false)
  112. {
  113. Db::rollback();
  114. filePut('VIP ios充值:验证out_trade_no='.$order_no.',逻辑续费vip时间失败');
  115. $this->error('充值失败');
  116. }
  117. // 修改订单状态
  118. $ros = Db::name('pay_order')->where(['out_trade_no' => $order_no])->update(['order_status'=>1,'notifytime'=>time()]);
  119. if($ros === false) {
  120. filePut('VIP ios充值:充值失败out_trade_no='.$order_no.','.$result['message'].','.'修改订单状态失败');
  121. Db::rollback();
  122. $this->error('充值失败');
  123. }
  124. Db::commit();
  125. $this->success('充值成功');
  126. //逻辑结束
  127. }
  128. ////////////////////////////////
  129. //金币充值
  130. public function gold_config_ios(){
  131. $list = Db::name('paygold_webcon_ios')->field('id,money,gold,bundle_id')->where('is_show',1)->order('weigh asc,id asc')->select();
  132. $data['goldconfig'] = $list;
  133. $wallet = model('wallet')->getWallet($this->auth->id);
  134. $data['wallet'] = $wallet;
  135. $data['money_to_gold'] = config('site.money_to_gold');
  136. $this->success('success',$data);
  137. }
  138. //充值金币 创建订单
  139. public function gold_recharge_ios(){
  140. $rc_id = input_post('rc_id',0);
  141. $pay_type = 'ios';
  142. $platform = 'app';
  143. $uid = $this->auth->id;
  144. if(!$rc_id){
  145. $this->error('请选择充值金额');
  146. }
  147. if(!$this->user_auth_limit()){
  148. $this->error('请先完成实名认证');
  149. }
  150. //赋值money
  151. $recharge_config = Db::name('paygold_webcon_ios')->where('id',$rc_id)->find();
  152. $money = $recharge_config['money'] ?: 0;
  153. $gold = $recharge_config['gold'] ?: 0;
  154. //
  155. if($money<=0)
  156. {
  157. $this->error('支付金额必须大于0');
  158. }
  159. if($money > 10000){
  160. $this->error('支付金额太大');
  161. }
  162. //创建订单
  163. $data['user_id'] = $uid;
  164. $data['out_trade_no'] = createUniqueNo('P',$uid); // 数据库订单号加密
  165. $data['order_amount'] = $money;
  166. $data['createtime'] = time();
  167. $data['pay_type'] = $pay_type;
  168. $data['platform'] = $platform;
  169. $data['order_status'] = 0;
  170. $data['table_name'] = 'gold_recharge';
  171. $data['table_id'] = 0;
  172. $data['args'] = json_encode(['gold'=>$gold]);
  173. $data['bundle_id'] = $recharge_config['bundle_id'];
  174. $orderid = Db::name('pay_order')->insertGetId($data);
  175. $this->success('success',$data['out_trade_no']);
  176. }
  177. //订阅信息处理
  178. public function expires(){
  179. //苹果订阅的验证收据
  180. $original_transaction_id = input('original_transaction_id','','trim');
  181. $receipt_data = input('apple_receipt', '', 'trim');
  182. $transaction_id = input('transaction_id', '', 'trim');
  183. if (!$receipt_data || !$original_transaction_id || !$transaction_id) {
  184. $this->error('缺少参数');
  185. }
  186. filePut("\r\n\r\n".'新请求VIP订阅');
  187. $prefix = 'iosVIP订阅'.',传入original_transaction_id:'.$original_transaction_id.',传入transaction_id:'.$transaction_id.'。';
  188. // filePut($prefix.'参数apple_receipt:'.$receipt_data);
  189. //检查重复订单
  190. $check_map = [
  191. 'original_transaction_id' => $original_transaction_id,
  192. 'transaction_id' => $transaction_id,
  193. ];
  194. $check_order = Db::name('user_vipxufei_task')->where($check_map)->find();
  195. if($check_order){
  196. filePut($prefix.'续费早已完成');
  197. $this->success('充值已完成');
  198. }
  199. Db::startTrans();
  200. //查找订单
  201. $order_map = [
  202. 'original_transaction_id' => $original_transaction_id,
  203. ];
  204. $order_info = Db::name('user_vipxufei_task')->where($order_map)->order('expires_date_ms desc')->lock(true)->find();
  205. if (!$order_info) {
  206. Db::rollback();
  207. filePut($prefix.'不存在的订单');
  208. $this->error('不存在的订单');
  209. }
  210. // 验证支付状态
  211. $result = $this->validate_apple_pay($receipt_data);
  212. if (!$result['status']) {// 验证不通过
  213. Db::rollback();
  214. filePut($prefix.'验证'.$result['message']);
  215. $this->error($result['message']);
  216. }
  217. $in_app = $result['data']['receipt']['in_app'];
  218. $only_trans = [];
  219. foreach($in_app as $key => $trans){
  220. //非订阅信息,原始信息
  221. if($trans['transaction_id'] == $transaction_id && $original_transaction_id == $trans['original_transaction_id'] && $trans['product_id'] == $order_info['bundle_id']){
  222. $only_trans = $trans;
  223. break;
  224. }
  225. }
  226. if(empty($only_trans)){
  227. Db::rollback();
  228. filePut($prefix.'未找到匹配的交易,产品id'.$order_info['bundle_id']);
  229. $this->error('未找到匹配的交易,产品id'.$order_info['bundle_id']);
  230. }
  231. //验证时间
  232. if($only_trans['purchase_date_ms'] <= $order_info['purchase_date_ms'] || $only_trans['expires_date_ms'] <= $order_info['expires_date_ms']){
  233. Db::rollback();
  234. filePut($prefix.'时间对不上,返回成功,finish掉');
  235. $this->success(1);
  236. }
  237. //逻辑开始
  238. //先充值
  239. $user_info = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->lock(true)->find();
  240. if($user_info['vip_endtime'] < time()){
  241. //过期了
  242. $vip_endtime = time() + (intval($order_info['days']) * 86400);
  243. }else{
  244. //追加vip
  245. $vip_endtime = $user_info['vip_endtime'] + (intval($order_info['days']) * 86400);
  246. }
  247. $update_data = [
  248. 'vip_endtime'=>$vip_endtime,
  249. ];
  250. $result = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->update($update_data);
  251. if($result === false)
  252. {
  253. filePut($prefix.'逻辑续费vip时间失败');
  254. Db::rollback();
  255. $this->error('充值失败');
  256. }
  257. //添加新的一个task
  258. $task_data = $order_info;
  259. $task_data['createtime'] = time();
  260. $task_data['apple_receipt'] = $receipt_data;
  261. $task_data['in_app_one'] = json_encode($only_trans);
  262. $task_data['transaction_id'] = $transaction_id;
  263. $task_data['times'] = $order_info['times'] + 1;
  264. $task_data['purchase_date_ms'] = $only_trans['purchase_date_ms'];
  265. $task_data['expires_date_ms'] = $only_trans['expires_date_ms'];
  266. $task_id = Db::name('user_vipxufei_task')->insertGetId($task_data);
  267. if(!$task_id)
  268. {
  269. filePut($prefix.'用户添加vipxufei_task失败');
  270. Db::rollback();
  271. $this->error('充值失败');
  272. }
  273. Db::commit();
  274. filePut($prefix.'充值成功');
  275. $this->success('充值成功');
  276. //逻辑结束
  277. }
  278. //金币+vip,苹果内购支付回调,app请求的接口
  279. public function gold_notify_iosnew(){
  280. $original_transaction_id = input('original_transaction_id','','trim');
  281. if(!empty($original_transaction_id)){
  282. //订阅信息
  283. $this->expires();
  284. }
  285. //苹果内购的验证收据
  286. $receipt_data = input('apple_receipt', '', 'trim');
  287. $out_trade_no = input('out_trade_no', '', 'trim');
  288. $transaction_id = input('transaction_id', '', 'trim');
  289. if (!$receipt_data || !$out_trade_no || !$transaction_id) {
  290. $this->error('缺少参数');
  291. }
  292. filePut("\r\n\r\n".'新请求');
  293. $prefix = 'ios充值,登录user_id:'.$this->auth->id.',out_trade_no:'.$out_trade_no.',传入transaction_id:'.$transaction_id.'。';
  294. // filePut($prefix.'参数apple_receipt:'.$receipt_data);
  295. Db::startTrans();
  296. // 查找订单
  297. $order_map = [
  298. // 'user_id' => $this->auth->id,
  299. 'out_trade_no' => $out_trade_no,
  300. ];
  301. $order_info = Db::name('pay_order')->where($order_map)->lock(true)->find();
  302. if (!$order_info) {
  303. Db::rollback();
  304. filePut($prefix.'不存在的订单');
  305. $this->error('不存在的订单');
  306. }
  307. if ($order_info['order_status'] == 1) {
  308. Db::rollback();
  309. filePut($prefix.'充值早已完成');
  310. $this->success('充值已完成');
  311. }
  312. // 验证支付状态
  313. $result = $this->validate_apple_pay($receipt_data);
  314. if (!$result['status']) {// 验证不通过
  315. Db::rollback();
  316. filePut($prefix.'验证'.$result['message']);
  317. $this->error($result['message']);
  318. }
  319. $in_app = $result['data']['receipt']['in_app'];
  320. $only_trans = [];
  321. foreach($in_app as $key => $trans){
  322. //非订阅信息,原始信息
  323. // $trans['transaction_id'] == $transaction_id 这个不重要,重要的是后面2个。应该也重要,保证这次处理的是初始交易
  324. if($trans['transaction_id'] == $transaction_id && $transaction_id == $trans['original_transaction_id'] && $trans['product_id'] == $order_info['bundle_id']){
  325. $only_trans = $trans;
  326. break;
  327. }
  328. }
  329. if(empty($only_trans)){
  330. Db::rollback();
  331. filePut($prefix.'未找到匹配的交易,产品id'.$order_info['bundle_id'].',原始交易id'.$transaction_id);
  332. $this->error('未找到匹配的交易,产品id'.$order_info['bundle_id'].',原始交易id'.$transaction_id);
  333. }
  334. /*
  335. $count = count($result['data']['receipt']['in_app']);
  336. $use_count = $count - 1;
  337. $product_id = $result['data']['receipt']['in_app'][$use_count]['product_id'];
  338. $my_transaction_id = $result['data']['receipt']['in_app'][$use_count]['transaction_id'];
  339. if($product_id != $order_info['bundle_id']){
  340. Db::rollback();
  341. filePut($prefix.'验证'.'非法请求,请立刻停止product_id:'.$product_id.'!='.$order_info['bundle_id']);
  342. $this->error('非法请求,请立刻停止,产品id错误');
  343. }
  344. if($my_transaction_id != $transaction_id){
  345. Db::rollback();
  346. filePut($prefix.'验证'.'非法请求,请立刻停止transaction_id:'.$my_transaction_id.'!='.$transaction_id);
  347. $this->error('非法请求,请立刻停止,交易id错误');
  348. }*/
  349. //逻辑开始
  350. $args = json_decode($order_info['args'],true);
  351. //先充值
  352. if($order_info['table_name'] == 'gold_recharge'){
  353. $result = model('Wallet')->lockChangeAccountRemain($order_info['user_id'],'gold',$args['gold'],10, '金币充值','pay_order',$order_info['id']);
  354. if($result['status']===false)
  355. {
  356. filePut($prefix.'逻辑添加金币失败');
  357. Db::rollback();
  358. $this->error('充值失败');
  359. }
  360. }
  361. //先充值
  362. if($order_info['table_name'] == 'vip_recharge'){
  363. $user_info = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->lock(true)->find();
  364. if($user_info['vip_endtime'] < time()){
  365. //过期了
  366. $vip_endtime = time() + (intval($args['days']) * 86400);
  367. }else{
  368. //追加vip
  369. $vip_endtime = $user_info['vip_endtime'] + (intval($args['days']) * 86400);
  370. }
  371. $update_data = [
  372. 'vip_endtime'=>$vip_endtime,
  373. ];
  374. $result = Db::name('user_wallet')->where('user_id',$order_info['user_id'])->update($update_data);
  375. if($result === false)
  376. {
  377. filePut($prefix.'逻辑续费vip时间失败');
  378. Db::rollback();
  379. $this->error('充值失败');
  380. }
  381. //订阅vip需要多加的逻辑
  382. if($order_info['is_lianxu'] == 1){
  383. $task_data = [
  384. 'order_id' => $order_info['id'],
  385. 'user_id' => $order_info['user_id'],
  386. 'bundle_id' => $order_info['bundle_id'],
  387. 'days' => $args['days'],
  388. 'createtime' => time(),
  389. 'apple_receipt' => $receipt_data,
  390. 'in_app_one' => json_encode($only_trans),
  391. 'original_transaction_id' => $only_trans['original_transaction_id'],
  392. 'transaction_id' => $only_trans['transaction_id'],
  393. 'status' => 1,
  394. 'times' => 1,
  395. //'notification_type' => 'INITIAL_BUY'.',首次订阅',
  396. 'original_purchase_date_ms' => $only_trans['original_purchase_date_ms'],
  397. 'purchase_date_ms' => $only_trans['purchase_date_ms'],
  398. 'expires_date_ms' => $only_trans['purchase_date_ms'], //第一次借用购买时间戳
  399. ];
  400. $task_id = Db::name('user_vipxufei_task')->insertGetId($task_data);
  401. if(!$task_id)
  402. {
  403. filePut($prefix.'用户添加vipxufei_task失败');
  404. Db::rollback();
  405. $this->error('充值失败');
  406. }
  407. }
  408. }
  409. // 修改订单状态
  410. $update_order = [
  411. 'notifytime'=>time(),
  412. 'order_status'=>1,
  413. 'original_transaction_id' => $only_trans['original_transaction_id'],//理论上与 transaction_id 相等
  414. 'in_app_one' => json_encode($only_trans),
  415. ];
  416. $ros = Db::name('pay_order')->where(['id' => $order_info['id']])->update($update_order);
  417. if($ros === false) {
  418. filePut($prefix.'修改订单状态失败');
  419. Db::rollback();
  420. $this->error('充值失败');
  421. }
  422. Db::commit();
  423. filePut($prefix.'充值成功');
  424. $this->success('充值成功');
  425. //逻辑结束
  426. }
  427. //因前端不传入订单号,作废
  428. public function gold_notify_ios(){
  429. //苹果内购的验证收据
  430. $receipt_data = input('apple_receipt', '', 'trim');
  431. $order_no = input('order_no', '', 'trim');
  432. filePut('金币 ios充值:参数apple_receipt='.$receipt_data.',order_no='.$order_no);
  433. if (!$receipt_data || !$order_no) {
  434. $this->error('缺少参数');
  435. }
  436. Db::startTrans();
  437. // 查找订单
  438. $order_info = Db::name('pay_order')->where(['out_trade_no' => $order_no])->lock(true)->find();
  439. if (!$order_info) {
  440. Db::rollback();
  441. filePut('金币 ios充值:订单丢失out_trade_no='.$order_no);
  442. $this->error('订单丢失');
  443. }
  444. if ($order_info['order_status'] == 1) {
  445. Db::rollback();
  446. $this->success('充值成功');
  447. }
  448. // 验证支付状态
  449. $result = $this->validate_apple_pay($receipt_data);
  450. if (!$result['status']) {// 验证不通过
  451. Db::rollback();
  452. filePut('金币 ios充值:验证out_trade_no='.$order_no.','.$result['message']);
  453. $this->error($result['message']);
  454. }
  455. $count = count($result['data']['receipt']['in_app']);
  456. $use_count = $count - 1;
  457. $args = json_decode($order_info['args'],true);
  458. if ($result['data']['receipt']['in_app'][$use_count]['product_id'] != $order_info['bundle_id']) {
  459. Db::rollback();
  460. filePut('金币 ios充值:非法请求,请立刻停止out_trade_no='.$order_no.','.$result['message'].','.$result['data']['receipt']['in_app'][$use_count]['product_id'].'!='.$order_info['bundle_id']);
  461. $this->error('非法请求,请立刻停止');
  462. }
  463. //逻辑开始
  464. //先充值
  465. $result = model('Wallet')->lockChangeAccountRemain($order_info['user_id'],'gold',$args['gold'],10, '金币充值','pay_order',$order_info['id']);
  466. if($result['status']===false)
  467. {
  468. filePut('金币 ios充值:验证out_trade_no='.$order_no.',逻辑添加金币失败');
  469. Db::rollback();
  470. return false;
  471. }
  472. // 修改订单状态
  473. $ros = Db::name('pay_order')->where(['out_trade_no' => $order_no])->update(['order_status'=>1,'notifytime'=>time()]);
  474. if($ros === false) {
  475. filePut('金币 ios充值:充值失败out_trade_no='.$order_no.','.$result['message'].','.'修改订单状态失败');
  476. Db::rollback();
  477. $this->error('充值失败');
  478. }
  479. Db::commit();
  480. $this->success('充值成功');
  481. //逻辑结束
  482. }
  483. ////////////////////////////////////
  484. //苹果自动扣费回调
  485. public function auto_renewal_vip_notify(){
  486. $this->notify_log_start('ios');
  487. }
  488. ///////////////////////////////////////////////////////////////////////////////////////////////
  489. //异步日志
  490. private function notify_log_start($paytype = 'ios'){
  491. //记录支付回调数据
  492. ignore_user_abort(); // run script in background
  493. set_time_limit(30);
  494. // 日志文件 start
  495. $log_base_dir = '../paylog/'.$paytype.'/';
  496. if (!is_dir($log_base_dir))
  497. {
  498. mkdir($log_base_dir, 0770, true);
  499. @chmod($log_base_dir, 0770);
  500. }
  501. $notify_file = $log_base_dir.'notify.txt';
  502. if(!file_exists($notify_file)) {
  503. @touch($notify_file);
  504. @chmod($notify_file, 0770);
  505. }
  506. if(filesize($notify_file)>5242880)//大于5M自动切换
  507. {
  508. rename($notify_file, $log_base_dir.'notify_'.date('Y_m_d_H_i_s').'.txt');
  509. }
  510. if(!file_exists($notify_file)) {
  511. @touch($notify_file);
  512. @chmod($notify_file, 0770);
  513. }
  514. // 日志文件 end
  515. //开始写入
  516. $_REQUEST = isset($_REQUEST) ? $_REQUEST : array();
  517. if($_REQUEST && $paytype == 'alipay') {
  518. file_put_contents($notify_file, "\r\n\r\n".date('Y-m-d H:i:s')." [notify][入口接收request]".json_encode($_REQUEST), FILE_APPEND);
  519. } else {
  520. $xml = file_get_contents("php://input");
  521. file_put_contents($notify_file, "\r\n\r\n".date('Y-m-d H:i:s')." [notify][入口接收php://input流原始数据] \n".$xml, FILE_APPEND);
  522. $xmlObj = simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA);
  523. file_put_contents($notify_file, "\r\n\r\n".date('Y-m-d H:i:s')." [notify][入口接收php://input流] ".json_encode($xmlObj), FILE_APPEND);
  524. }
  525. ini_set('display_errors','On');
  526. return $notify_file;
  527. }
  528. /**
  529. * 验证AppStore内付
  530. * @param string $receipt_data 付款后凭证
  531. * @return array 验证是否成功
  532. */
  533. function validate_apple_pay($receipt_data = '') {
  534. // 验证参数
  535. if (strlen($receipt_data) < 20) {
  536. $result = array(
  537. 'status' => false,
  538. 'message' => '非法参数'
  539. );
  540. return $result;
  541. }
  542. // 请求验证
  543. $html = $this->curl($receipt_data);
  544. $data = json_decode($html, true);
  545. $data['sandbox'] = '0';
  546. // p($data);die;
  547. if ($data['status'] == '21002') {
  548. $result = array(
  549. 'status' => false,
  550. 'message' => 'status:21002'
  551. );
  552. return $result;
  553. }
  554. // 如果是沙盒数据 则验证沙盒模式 21008;正式数据 21007
  555. if ($data['status'] == '21007') {
  556. // 请求验证
  557. $html = $this->curl($receipt_data, 1);
  558. $data = json_decode($html, true);
  559. $data['sandbox'] = '1';
  560. }
  561. if (isset($_GET['debug'])) {
  562. exit(json_encode($data));
  563. }
  564. if ($data['receipt']['bundle_id'] != 'com.huxiu.tken') {
  565. $result = array(
  566. 'status' => false,
  567. 'message' => '非法请求',
  568. 'data' => $data
  569. );
  570. return $result;
  571. }
  572. // 判断是否购买成功
  573. if (intval($data['status']) === 0) {
  574. $result = array(
  575. 'status' => true,
  576. 'message' => '购买成功',
  577. 'data' => $data
  578. );
  579. } else {
  580. $result = array(
  581. 'status' => false,
  582. 'message' => '购买失败 status:' . $data['status']
  583. );
  584. }
  585. return $result;
  586. }
  587. /**
  588. * 0 票据校验成功
  589. * 21000 App Store不能读取你提供的JSON对象25
  590. * 21002 receipt-data域的数据有问题
  591. * 21003 receipt无法通过验证
  592. * 21004 提供的shared secret不匹配你账号中的shared secret
  593. * 21005 receipt服务器当前不可用
  594. * 21006 receipt合法,但是订阅已过期。服务器接收到这个状态码时,receipt数据仍然会解码并一起发送
  595. * 21007 receipt是Sandbox receipt,但却发送至生产系统的验证服务
  596. * 21008 receipt是生产receipt,但却发送至Sandbox环境的验证服务
  597. */
  598. //苹果也是建议这个校验逻辑由服务端完成。服务器需要先去请求正式环境。如果receipt是正式环境的,那么这个时候苹果会返回(21007)告诉我们这个是沙盒的receipt,那么服务器再去请求sandbox环境。
  599. function curl($receipt_data,$sandbox = 0) {
  600. //小票信息
  601. $POSTFIELDS = [
  602. 'receipt-data' => $receipt_data,
  603. 'password' => '09ef214173a944808ac648b15fa02167'
  604. ];
  605. $POSTFIELDS = json_encode($POSTFIELDS, 320);
  606. //正式购买地址 沙盒购买地址
  607. $url_buy = "https://buy.itunes.apple.com/verifyReceipt";
  608. $url_sandbox = "https://sandbox.itunes.apple.com/verifyReceipt";
  609. //默认后台控制
  610. if (config('site.ios_pay_sandbox') > 0 ) {
  611. $url = $url_buy;
  612. } else {
  613. $url = $url_sandbox;
  614. }
  615. //强制沙盒
  616. if($sandbox == 1){
  617. $url = $url_sandbox;
  618. }
  619. $ch = curl_init($url);
  620. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  621. curl_setopt($ch, CURLOPT_POST, true);
  622. curl_setopt($ch, CURLOPT_POSTFIELDS, $POSTFIELDS);
  623. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); //这两行一定要加,不加会报SSL 错误
  624. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  625. $response = curl_exec($ch);
  626. $errno = curl_errno($ch);
  627. curl_close($ch);
  628. if ($errno != 0) {
  629. return $errno;
  630. } else {
  631. return $response;
  632. }
  633. }
  634. }