How to write Alipay callback in php

First make sure the callback address written when paying is correct!!!!!!

Be sure to make sure the callback address written refers to you. Put the one that writes the callback verification inside. Don’t go back and find the error later. It’s too difficult.

Find the signature verification class encapsulated by Alipay, rsaCheckV1 (this is also In the app2.0 interface)

This is the class that Alipay has encapsulated: (Recommended learning: PHP video tutorial)

/** rsaCheckV1 & rsaCheckV2<br/>* 验证签名<br/>* 在使用本方法前，必须初始化AopClient且传入公钥参数。<br/>* 公钥是否是读取字符串还是读取文件，是根据初始化传入的值判断的。<br/>**/<br/>public function rsaCheckV1($params, $rsaPublicKeyFilePath,$signType=&#39;RSA&#39;) {<br/>$sign = $params[&#39;sign&#39;];<br/>$params[&#39;sign_type&#39;] = null;<br/>$params[&#39;sign&#39;] = null;<br/>$this->alipayrsaPublicKey = $rsaPublicKeyFilePath;<br/><br/>return $this->verify($this->getSignContent($params), $sign, $rsaPublicKeyFilePath,$signType);<br/>}<br/>public function rsaCheckV2($params, $rsaPublicKeyFilePath, $signType=&#39;RSA&#39;) {<br/>$sign = $params[&#39;sign&#39;];<br/>$params[&#39;sign&#39;] = null;<br/>return $this->verify($this->getSignContent($params), $sign, $rsaPublicKeyFilePath, $signType);<br/>}<br/>function verify($data, $sign, $rsaPublicKeyFilePath, $signType = &#39;RSA&#39;) {<br/><br/>if($this->checkEmpty($this->alipayPublicKey)){<br/><br/>$pubKey= $this->alipayrsaPublicKey;<br/>$res = "-----BEGIN PUBLIC KEY-----\n" .<br/>wordwrap($pubKey, 64, "\n", true) .<br/>"\n-----END PUBLIC KEY-----";<br/>}else {<br/>//读取公钥文件<br/>$pubKey = file_get_contents($rsaPublicKeyFilePath);<br/>//转换为openssl格式密钥<br/>$res = openssl_get_publickey($pubKey);<br/>}<br/><br/>($res) or die(&#39;支付宝RSA公钥错误。请检查公钥文件格式是否正确&#39;); <br/><br/>//调用openssl内置方法验签，返回bool值<br/>if ("RSA2" == $signType) {<br/>$result = (bool)openssl_verify($data, base64_decode($sign), $res, OPENSSL_ALGO_SHA256);<br/>} else {<br/>$result = (bool)openssl_verify($data, base64_decode($sign), $res);<br/>}<br/><br/>if(!$this->checkEmpty($this->alipayPublicKey)) {<br/>//释放资源<br/>openssl_free_key($res);<br/>}<br/><br/>return $result;<br/>}L<br/>SQLite<br/>SQLite3<br/>SQLSRV <br/>Sybase<br/>tokyo_tyrant<br/>

Also, don’t use these two The two methods are confused. The former needs to pass signtype, but the latter does not (the first two methods will call the third method). Another important point is that this method itself extracts the public key from the file, but I It is passed directly, so I modified this method slightly so that it can directly read the public key I passed. This signature verification method returns (bool) true or (bool) false to determine whether the signature verification is successful.

Three points should be noted here:

1—注意公钥的正确性,还有用的是支付宝公钥不是你当初生成的公钥<br/>2—区别这里的方法和支付宝接口本身方法的公钥获取方式<br/>3—注意接口方法本身的注释,很重要<br/>

Alipay’s callback parameters are returned in the form of post, but when testing, we can write the callback url directly in in the address bar, and then use the get method to accept it, so there is no need to spell the parameters, the result is the same (the callback URL can be recorded in the log file) , and when verifying the signature, all return parameters need to be intact You can automatically verify the signature, and here you can just accept whatever parameters you need. I won’t go into details here, it’s just a matter of accepting parameters normally. The following is the code I use to check the order amount and merchant number when verifying parameters, for reference only (I use tp5):

public function check($receipt_amount,$buyer_pay_amount,$order_price,$app_id,$seller_email){<br/>  if($receipt_amount !== $order_price || $buyer_pay_amount !== $order_price){<br/>//    echo 1;<br/>   return $this->log(&#39;订单支付金额有误!&#39;);<br/>  }<br/>  //支付宝支付的所有参数<br/>  $alipay_config = Config::get(&#39;alipay_config&#39;);<br/>  if($app_id !== $alipay_config[&#39;appid&#39;]){<br/>//   echo 2;<br/>    return $this->log(&#39;商家编号有误!&#39;);<br/>  }<br/> <br/>  //验证收款商家是否正确<br/>  if($seller_email !== $alipay_config[&#39;seller_id&#39;]){<br/>//   echo 3;<br/>   return $this->log(&#39;收款商家有误!&#39;);<br/>  }<br/>  return &#39;success&#39;;<br/> }<br/>

Check order

here The main thing is to check the inventory. It is best to use transaction processing here (although your order volume may not necessarily return to this point). My code is given below for reference only (tp5):

public function index($order_sn=&#39;&#39;)<br/> {<br/>  if(isset($_POST[&#39;order_sn&#39;]) && empty($order_sn)){<br/>   $order_sn = $_POST[&#39;order_sn&#39;];<br/>  }<br/> <br/>  $table = self::order_info($order_sn);<br/>  if($table == &#39;failure&#39;){return &#39;false&#39;;}<br/>  $oid = $table[&#39;order_id&#39;];<br/>  //通过订单id $oid 查询出订单中物品的id<br/>  $goodsTable = Db::name(&#39;goods&#39;);<br/>  $allgoods = Db::name("test1")->where(&#39;o_id&#39;, $oid)->field(&#39;g_id,g_num&#39;)->select();<br/>  foreach ($allgoods as $k => $v) {<br/>   //事务处理<br/>   $goodsTable->startTrans();//事物开始<br/>   try {<br/>    //判断库存数量<br/>    $goodsTable->query(&#39;update test2 set g_num = g_num-&#39; . $v[&#39;g_num&#39;] . &#39; where g_num >= &#39; . $v[&#39;g_num&#39;] . &#39; and gid =&#39; . $v[&#39;g_id&#39;]);<br/> <br/>   } catch (\Exception $e) {<br/>    $goodsTable->rollBack();//事物回滚<br/>   }<br/> <br/>   $goodsTable->commit();// 事物提交<br/>  }<br/> <br/>  //修改订单<br/>  $res = Db::name(&#39;test3&#39;)->where(&#39;order_sn&#39;,$order_sn)->update([&#39;order_state&#39; => &#39;1&#39;,&#39;pay_time&#39;=>time()]);<br/>  if($res != 0){<br/>   return &#39;success&#39;;<br/>  }<br/> }<br/>

Next Just return the result to Alipay. Failure: return 'failure'; success: return 'success'; It ends here.

The above is the detailed content of How to write Alipay callback in php. For more information, please follow other related articles on the PHP Chinese website!