244 lines
8.3 KiB
PHP
244 lines
8.3 KiB
PHP
|
<?
|
|||
|
|
require_once(dirname(__FILE__)."/common.php");
|
|||
|
|
|
|||
|
|
function verifySign($data, $sign, $cer_data)
|
|||
|
|
{
|
|||
|
|
$s = base64_encode($cer_data);
|
|||
|
|
$s = "-----BEGIN CERTIFICATE-----\n".wordwrap($s, 64, "\n", true)."\n-----END CERTIFICATE-----\n";
|
|||
|
|
//$cert = openssl_x509_read($s);
|
|||
|
|
$pubkey = openssl_get_publickey($s);
|
|||
|
|
//var_dump($pubkey);
|
|||
|
|
|
|||
|
|
return openssl_verify($data, base64_decode($sign), $pubkey, OPENSSL_ALGO_SHA1);
|
|||
|
|
}
|
|||
|
|
function cancel_order($order_ids){
|
|||
|
|
global $db;
|
|||
|
|
foreach ($order_ids as $v){
|
|||
|
|
$order_id = $v;
|
|||
|
|
// 删除order 和 order_detail
|
|||
|
|
$oInfo = $db->get_one("select * from tb_order where id=".$order_id);
|
|||
|
|
$date_id = $oInfo['date_id'];
|
|||
|
|
$data = $db->get_one("select * from tb_order_detail where order_id=".$order_id);
|
|||
|
|
foreach ($data as $item){
|
|||
|
|
$db->update("tb_date_dish", array('book_num'=>"book_num"-$item['dish_amount']), "date_id='{$date_id}' and dish_id='{$item['dish_id']}'");
|
|||
|
|
}
|
|||
|
|
$db->delete("tb_order_detail", "order_id='{$order_id}'");
|
|||
|
|
$db->delete("tb_order", "id='{$order_id}'");
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
function update_order($order_ids, $data){
|
|||
|
|
global $db;
|
|||
|
|
if(!is_array($order_ids)){
|
|||
|
|
$order_ids = explode(',', $order_ids);
|
|||
|
|
}
|
|||
|
|
foreach ($order_ids as $k => $v){
|
|||
|
|
$db->update("tb_order", $data, "id='{$v}'");
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
function clear_cart($uid){
|
|||
|
|
global $db;
|
|||
|
|
$db->delete("tb_cart", "uid='{$uid}'");
|
|||
|
|
}
|
|||
|
|
function createReceiveMealNum($dish_ids, $company_id, $date_id, $oid, $uid){
|
|||
|
|
global $db;
|
|||
|
|
$info = $db->get_one("select * from tb_dish_receive_meal where status='1' and company_id='{$company_id}'");
|
|||
|
|
if(empty($info)){
|
|||
|
|
return "";
|
|||
|
|
}
|
|||
|
|
$serialNumDish = explode(',', $info['dish_ids']);
|
|||
|
|
$dish_ids_arr = explode(',', $dish_ids);
|
|||
|
|
$jiaoji = array_intersect($serialNumDish, $dish_ids_arr);
|
|||
|
|
if(empty($jiaoji)){
|
|||
|
|
return "";
|
|||
|
|
}
|
|||
|
|
// 获取已经编号的
|
|||
|
|
$getSerialInfo = $db->get_one("select max(serial_num) max_num from tb_dish_receive_meal_num where company_id='{$company_id}' and date_id='{$date_id}'");
|
|||
|
|
// 生成编号
|
|||
|
|
$serialArr = array(
|
|||
|
|
'company_id' => $company_id,
|
|||
|
|
'oid' => $oid,
|
|||
|
|
'serial_num' => $getSerialInfo['max_num']+1,
|
|||
|
|
'date_id' => $date_id,
|
|||
|
|
'add_time' => date('Y-m-d H:i:s'),
|
|||
|
|
'uid' => $uid,
|
|||
|
|
);
|
|||
|
|
$insertDataStr = "";
|
|||
|
|
foreach ($serialArr as $k => $v){
|
|||
|
|
$insertDataStr .= ",{$k}='{$v}'";
|
|||
|
|
}
|
|||
|
|
$insertDataStr = substr($insertDataStr, 1, strlen($insertDataStr)-1);
|
|||
|
|
$db->query("insert into tb_dish_receive_meal_num set {$insertDataStr}", 'SILENT');
|
|||
|
|
return $db->affected_rows();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
//function err_log($outTradeNo, $fee, $msg, $json){
|
|||
|
|
// global $db;
|
|||
|
|
// $log = array(
|
|||
|
|
// 'orderNo' => $outTradeNo,
|
|||
|
|
// 'ftid' => 0,
|
|||
|
|
// 'channelid' => 0,
|
|||
|
|
// 'payfee' => $fee,
|
|||
|
|
// 'code' => '',
|
|||
|
|
// 'errorMsg' => $msg,
|
|||
|
|
// 'raw_str' => $json,
|
|||
|
|
// 'ip' => '',
|
|||
|
|
// 'addtime' => date('Y-m-d H:i:s'),
|
|||
|
|
// );
|
|||
|
|
// $db->insert("tb_yzf_paylog", $log);
|
|||
|
|
//}
|
|||
|
|
function err_log($uid, $outTradeNo, $msg, $json){
|
|||
|
|
global $db;
|
|||
|
|
$log = array(
|
|||
|
|
'uid' => $uid,
|
|||
|
|
'outTradeNo' => $outTradeNo,
|
|||
|
|
'msg' => $msg,
|
|||
|
|
'json' => $json,
|
|||
|
|
'ip' => $_SERVER['REMOTE_ADDR'],
|
|||
|
|
'add_time' => date('Y-m-d H:i:s'),
|
|||
|
|
);
|
|||
|
|
$db->insert("tb_yzf_err_log", $log);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$json = file_get_contents("php://input");
|
|||
|
|
|
|||
|
|
if($json){
|
|||
|
|
$a = json_decode($json, true);
|
|||
|
|
|
|||
|
|
$ORDERSEQ = $a['outTradeNo'];
|
|||
|
|
$ORDERAMOUNT = $a['tradeAmt'];
|
|||
|
|
$tradeNo = $a['tradeNo'];
|
|||
|
|
|
|||
|
|
$row = $db->get_one("select * from tb_recharge_pay where ORDERSEQ='{$ORDERSEQ}'");
|
|||
|
|
if(!$row) {
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "no order", $json);
|
|||
|
|
echo "no order";
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
$uid = $row['uid'];
|
|||
|
|
$rList = array();
|
|||
|
|
$order_ids = array();
|
|||
|
|
if(!empty($row['rList'])){
|
|||
|
|
$rList = unserialize($row['rList']);
|
|||
|
|
$order_ids = array_column($rList, 'oid');
|
|||
|
|
}else{
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "no rList", $json);
|
|||
|
|
echo "no rList";
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$cInfo = $db->get_one("select a.*,b.cellphone,c.merchantNo, c.institutionCode, c.yzf_p12, c.yzf_p12_pass, c.yzf_cer, c.allow_pay from
|
|||
|
|
tb_dining_hall a
|
|||
|
|
left join tb_user b on a.id=b.dining_hall_id
|
|||
|
|
left join tb_certificate c on a.id=c.dining_hall_id and c.company_id=b.company_id
|
|||
|
|
where
|
|||
|
|
b.id='{$uid}' and a.enabled=1 and b.enabled=1");
|
|||
|
|
if(!$cInfo || !$cInfo['merchantNo'] || !$cInfo['institutionCode'] || !$cInfo['yzf_p12'] || !$cInfo['yzf_p12_pass'] || !$cInfo['yzf_cer'] || !strstr(','.$cInfo['allow_pay'].',', ',yzf,')){
|
|||
|
|
echo "USER ERROR";
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "USER ERROR", $json);
|
|||
|
|
exit;
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
$merid = $cInfo['merchantNo'];
|
|||
|
|
$yzf_cer = $cInfo['yzf_cer'];
|
|||
|
|
|
|||
|
|
$sign = $a['sign'];
|
|||
|
|
if(!$sign){
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "no sign", $json);
|
|||
|
|
cancel_order($order_ids);
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
unset($a['sign']);
|
|||
|
|
foreach($a as $key => $item) {
|
|||
|
|
if($item === null) $a[$key] = 'null';
|
|||
|
|
}
|
|||
|
|
ksort($a);
|
|||
|
|
$tosign = get_kvstr($a);
|
|||
|
|
$r = verifySign($tosign, $sign, $yzf_cer);
|
|||
|
|
|
|||
|
|
if(!$r){
|
|||
|
|
cancel_order($order_ids);
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "sign err", $json);
|
|||
|
|
die("sign err!");
|
|||
|
|
};
|
|||
|
|
if(round($row['AMOUNT']*100) != $ORDERAMOUNT) {
|
|||
|
|
cancel_order($order_ids);
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "AMOUNT ERROR", $json);
|
|||
|
|
echo "AMOUNT ERROR";
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
if($a['tradeStatus'] == 'SUCCESS') {
|
|||
|
|
$db->query("insert into tb_recharge_pay_suc set ORDERSEQ='{$ORDERSEQ}', AMOUNT='".($ORDERAMOUNT/100)."', addtime=now()", 'SILENT');
|
|||
|
|
if($db->affected_rows() == 1) {
|
|||
|
|
update_order($order_ids ,array('uid'=>$uid, 'yzf_code'=> $ORDERSEQ));
|
|||
|
|
clear_cart($uid);
|
|||
|
|
require_once("include/pay.inc.php");
|
|||
|
|
$payInfo = array(
|
|||
|
|
'ac_type' => '2',
|
|||
|
|
'rtype' => '1',
|
|||
|
|
'recharge_fund_type' => '1',
|
|||
|
|
'oid' => $row['id'],
|
|||
|
|
);
|
|||
|
|
$r = gpay_add_user_account_uid($uid, $row['AMOUNT'], $payInfo);
|
|||
|
|
$db->query("update tb_recharge_pay set UPTRANSEQ='{$tradeNo}', BANKID='', RETNCODE='SUCCESS', RETNINFO='', paytime=now(),notify_rs='".addslashes(trim(strip_tags($json)))."' where id=".$row['id']);
|
|||
|
|
// 已经在type_id=2 充值，之后进行消费记录tb_recharge
|
|||
|
|
if($rList) { //扣费
|
|||
|
|
$r = gpay_pay_user_account($uid, $rList, $updateInfo);
|
|||
|
|
if($r != 'suc') {
|
|||
|
|
foreach($rList as $item) { //支付失败，删除订单
|
|||
|
|
cancel_order($item['oid']);
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$pay_info = "";
|
|||
|
|
if($r == 'yebz') {
|
|||
|
|
$pay_info = "余额不足，下单失败";
|
|||
|
|
} else {
|
|||
|
|
$pay_info = "下单失败，请重试！";
|
|||
|
|
}
|
|||
|
|
$db->query("update tb_recharge_pay set pay_info='{$pay_info}' where id=".$row['id']);
|
|||
|
|
echo "yebz";
|
|||
|
|
err_log($row['uid'], $ORDERSEQ, "yebz", $json);
|
|||
|
|
exit;
|
|||
|
|
}else{
|
|||
|
|
// array('ac' => $total['total_price'], 'rtype' => RECHARGE_TYPE_PAY, 'ftid' => $date->dining_hall_id, 'oid' => $oid);
|
|||
|
|
foreach ($rList as $k => $v){
|
|||
|
|
$order_info = $db->get_one("select a.date_id,a.uid,a.id,group_concat(b.dish_id) dish_ids,c.company_id from tb_order a left join tb_order_detail b on a.id=b.order_id left join tb_user c on a.uid=c.id where a.id='{$v['oid']}' group by a.id");
|
|||
|
|
createReceiveMealNum($order_info['dish_ids'], $order_info['company_id'], $order_info['date_id'], $order_info['id'], $order_info['uid']);
|
|||
|
|
}
|
|||
|
|
update_order($order_ids ,array('uid'=>$uid, 'yzf_code'=> $ORDERSEQ));
|
|||
|
|
clear_cart($uid);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}else{
|
|||
|
|
|
|||
|
|
}
|
|||
|
|
$echo = "{
|
|||
|
|
\"success\":true,
|
|||
|
|
\"result\":
|
|||
|
|
{
|
|||
|
|
\"statusCode\": 200,
|
|||
|
|
\"outTradeNo\":\"{$ORDERSEQ}\",
|
|||
|
|
\"tradeNo\":\"{$tradeNo}\"
|
|||
|
|
}
|
|||
|
|
}";
|
|||
|
|
echo $echo;
|
|||
|
|
}
|
|||
|
|
exit;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
//header("location: ftdc://");
|
|||
|
|
//exit;
|
|||
|
|
//$result = $_GET['result'];
|
|||
|
|
//if($result) {
|
|||
|
|
// if(strstr($result, '成功')) {
|
|||
|
|
//// gredirect("../m/listOrder.html");
|
|||
|
|
// } else {
|
|||
|
|
//// gredirect("../m/");
|
|||
|
|
// }
|
|||
|
|
//} else {
|
|||
|
|
//// gredirect("../m/");
|
|||
|
|
//}
|
|||
|
|
?>
|
|||
|
|
<script>
|
|||
|
|
location.href = "ftdc://";
|
|||
|
|
</script>
|