Detailed explanation of the php background interface of App WeChat Payment-PHP Tutorial-php.cn

This article will introduce to you the PHP (7.0) background payment and callback interface of the App WeChat Pay (2016.10.11). The framework is Thinkphp5.0: I hope it can help you.

Various parameters of the account
Order information
Request prepay_id
*Return to APP data processing
WeChat callback
Modify order status

Various parameters of the account

The various parameters of the account are like when WeChat applies for app payment, an email will be sent to your account mailbox, and there will be the corresponding WeChat payment allocation. The merchant number (MCHID), APPID and APPSECRET are returned when applying for app payment permissions, and the KEY needs to be set by the user in the merchant backend on WeChat. This is very important! Avoid leaks!

Order information

**The client will transfer the product data in the shopping cart to the backend, including user information, etc. After getting the data, you first need to verify the data. , the verification here generally determines the transmission rules with the client at the beginning of the project, such as transmission method, parameter name, and method of verifying parameters. The focus here is verification, and signature authentication is generally used:
//Signature Step 1: Sort parameters in lexicographic order;
The code example is given here (formatting parameters are formatted into url parameters):

/**
     * 格式化参数格式化成url参数
     */
    public function ToUrlParams()
    {
        $buff = "";
        foreach ($this->values as $k => $v)
        {            if($k != "sign" && $v != "" && !is_array($v)){
                $buff .= $k . "=" . $v . "&";
            }
        }

        $buff = trim($buff, "&");        return $buff;
    }

Copy after login

//Signature step 2: Add KEY after the string (this KEY is negotiated with the front-end personnel);
//Signature step three: MD5 encryption;
// Signature Step 4: Convert all characters to uppercase

It is best to encapsulate these in the early stages of the project, and you will only need to call them later. Just fine, for example:
(You only need $param = $this->request('parameter name')); later), and then pre-store the order information.

Request prepay_id

Here I will go directly to the code, (here is the interface document download address:), although there are many self-written request interfaces on the Internet, but since WeChat has been packaged, just use it:

$input = new \app\wxpay\WxPayUnifiedOrder();//这里引用微信的统一下单接口

$input->SetBody($data[&#39;gname&#39;][&#39;g_name&#39;]);//商品或支付单简要描述
$input->SetAttach($data[&#39;gname&#39;][&#39;g_name&#39;]);//置附加数据 
$input->SetOut_trade_no($order_sn); // 商户订单号
$input->SetTotal_fee(intval($data[&#39;data&#39;][&#39;order_price&#39;]*100)); 
$input->SetTime_start(date("YmdHis"));//订单生成时间
$input->SetTime_expire(date("YmdHis", time() + 600));//订单失效时间
$input->SetGoods_tag($data[&#39;gname&#39;][&#39;g_name&#39;]); //商品标记  
$input->SetNotify_url("http://www.weixin.qq.com/wxpay/notify.php"); // 支付成功后的回调地址,
$input->SetTrade_type("APP");
$order = \app\wxpay\WxPayApi::unifiedOrder($input);return $order[&#39;prepay_id&#39;];

Copy after login

Here is the WeChat official unified ordering interface description address:
https://pay.weixin.qq.com/wiki/doc/api/app/app.php?chapter=9_1

Return client information

$info = array();
//账号的信息一般都放在配置文件里面,用到的地方也很多
$info[&#39;appid&#39;] = config(&#39;APP_APPID&#39;);
$info[&#39;partnerid&#39;] = config(&#39;APP_MCHID&#39;);
$info[&#39;package&#39;] = config(&#39;APP_PACKAGE&#39;);
$info[&#39;noncestr&#39;] = $this->random_number();//生成随机数,下面有生成实例,统一下单接口需要
$info[&#39;timestamp&#39;] = time();
$info[&#39;prepayid&#39;] = $prepay_id;
$info[&#39;sign&#39;] = self::_makeSign($info);//生成签名return $info;

Copy after login

$info is the information the client needs
Generate random number instance

//生成随机数
    public function random_number($len=21,$format=&#39;ALL&#39; ){
        $is_abc = $is_numer = 0;
        $password = $tmp =&#39;&#39;;
        switch($format){
            case &#39;ALL&#39;:
            $chars=&#39;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789&#39;;            break;
            case &#39;CHAR&#39;:
            $chars=&#39;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz&#39;;            break;
            case &#39;NUMBER&#39;:
            $chars=&#39;0123456789&#39;;            break;
            default :
            $chars=&#39;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789&#39;;            break;
        } // www.jb51.net
        mt_srand((double)microtime()*1000000*getmypid());        while(strlen($password)<$len){
            $tmp =substr($chars,(mt_rand()%strlen($chars)),1);            if(($is_numer <> 1 && is_numeric($tmp) && $tmp >0 )|| $format == &#39;CHAR&#39;){
                $is_numer = 1;
            }            if(($is_abc <> 1 && preg_match(&#39;/[a-zA-Z]/&#39;,$tmp)) || $format == &#39;NUMBER&#39;){
                $is_abc = 1;
            }
            $password.= $tmp;
        }        if($is_numer <> 1 || $is_abc <> 1 || empty($password) ){
            $password = $this->random_number($len,$format);
        }        return $password;
        }

Copy after login

WeChat callback

Payment result notification notify.php (here The address is the callback address filled in when placing an order, WeChat has already encapsulated it), the document download address
http://mch.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=11_1
In fact, the most important code of this page is only two lines

[php] view plain copy

    $notify = new PayNotifyCallBack();  
    $notify->Handle(false);

Copy after login

Most of the logic is processed in the Handle function to process the file WxPay.Notify.php

[php] view plain copy

    final public function Handle($needSign = true)  
        {  
            $msg = "OK";  
            //当返回false的时候，表示notify中调用NotifyCallBack回调失败获取签名校验失败，此时直接回复失败  
            $result = WxpayApi::notify(array($this, &#39;NotifyCallBack&#39;), $msg);  
            if($result == false){  
                $this->SetReturn_code("FAIL");  
                $this->SetReturn_msg($msg);  
                $this->ReplyNotify(false);  
                return;  
            } else {  
                //该分支在成功回调到NotifyCallBack方法，处理完成之后流程  
                $this->SetReturn_code("SUCCESS");  
                $this->SetReturn_msg("OK");  
            }  
            $this->ReplyNotify($needSign);  
        }

Copy after login

Main code:
[php] view plain copy

    $result = WxpayApi::notify(array($this, &#39;NotifyCallBack&#39;), $msg);

Copy after login

Track function notify file WxPay.Api.php

[ php] view plain copy

    public static function notify($callback, &$msg)  
        {  
            //获取通知的数据  
            $xml = $GLOBALS[&#39;HTTP_RAW_POST_DATA&#39;];  
            //如果返回成功则验证签名  
            try {  
                $result = WxPayResults::Init($xml);  
            } catch (WxPayException $e){  
                $msg = $e->errorMessage();  
                return false;  
            }  

            return call_user_func($callback, $result);  
        }

Copy after login

Get gay data through $GLOBALS['HTTP_RAW_POST_DATA']; and then use the Init function to verify the signature, etc. The signature verification is successful and the code is run.
It needs to be explained here that php7 itself does not support $GLOBALS['HTTP_RAW_POST_DATA']. You need to download a plug-in. You can Baidu for details. What I want to say is that you can use file_get_contents('php:/ /input'), for specific reasons, please refer to the blog below, which is very detailed (https://my.oschina.net/jiec/blog/485359)
[php] view plain copy

return call_user_func($callback, $result);

Copy after login

That is, a callback function is called, the NotifyCallBack() function and the parameter $result is passed. In the NotifyCallBack function, our rewritten NotifyProcess() function will be called (this function is rewritten in notify.php)

NotifyProcess( ) If there is no problem, it will set the xml information to return success

[php] view plain copy

$this->SetReturn_code("SUCCESS");  
$this->SetReturn_msg("OK");

Copy after login

and finally call the function this−>ReplyNotify(this−>ReplyNotify(needSign) ; echo success result

Function ReplyNotify needs to modify one code:

[php] view plain copy

final private function ReplyNotify($needSign = true)  
    {  
        //如果需要签名  
        if($needSign == true &&   
            $this->GetReturn_code($return_code) == "SUCCESS")  
        {  
            $this->SetSign();  
        }  
        WxpayApi::replyNotify($this->ToXml());  
    }

Copy after login

[php] view plain copy

$this->GetReturn_code($return_code) == "SUCCESS")

Copy after login

Change to

[php] view plain copy

$this->GetReturn_code() == "SUCCESS")

Copy after login

Then modify the order status based on the returned information, mainly where to modify, I am notifying. Create a new method

//修改订单状态
    public function updateState($data){        if($data){
            $order_sn = $data[&#39;out_trade_no&#39;];\

            $data = array();
            $data[&#39;order_id&#39;] = $order_id;
            //修改订单状态(用curlpost方法请求至thinkphp目录下的Controller里面控制器里面的方法,修改状态)
            $url = &#39;www.test.com&#39;;
            header(&#39;content-type:text/html;charset=utf8&#39;);
            $curl = curl_init();
            curl_setopt($curl, CURLOPT_URL, $url);
            curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($curl, CURLOPT_POST, true);
            curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
            $result = curl_exec($curl);
            curl_close($curl);            if($result == &#39;success&#39;){                return true;
            }else{                return false;
            }

        }
    }

Copy after login

in php and add

under

$notify = new PayNotifyCallBack();
$notify->Handle(false);

Copy after login

in notify.php

//接受参数,修改状态
$xml = file_get_contents("php://input");
$data = json_decode(json_encode(simplexml_load_string($xml, &#39;SimpleXMLElement&#39;, LIBXML_NOCDATA)), true);
$notify->updateState($data);

Copy after login