From c94f1e1fae2b44c1cf45b8d4cbdf4ddb05c97928 Mon Sep 17 00:00:00 2001
From: gyw <584683237@qq.com>
Date: Mon, 15 Apr 2024 14:28:14 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E5=B0=8F=E7=A8=8B=E5=BA=8F?=
 =?UTF-8?q?=E6=94=AF=E4=BB=98=20=E6=A0=A1=E9=AA=8C=E6=8E=A5=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Change-Id: I0efdbcddc99bb050aee35f26c292fc15a96b96bd
---
 show/get.php | 1162 ++++++++++++++++++++++++++++----------------------
 1 file changed, 647 insertions(+), 515 deletions(-)

diff --git a/show/get.php b/show/get.php
index 51b7bd6..9352a19 100644
--- a/show/get.php
+++ b/show/get.php
@@ -3,649 +3,781 @@ require_once(dirname(__FILE__)."/common.php");
 $act = trim($_GET['act']);
 
 //if(!in_array($act,array("hkface_get_face_data","get_face"))) {
-    if($_SERVER["HTTP_GYHFTIPFSDX"]) {
-        $ip = trim(addslashes(current(explode(',', $_SERVER['HTTP_GYHFTIPFSDX']))));
-    } else {
-        $ip = $_SERVER["REMOTE_ADDR"];
-    }
-    $chk_server_log_table = $db->get_one("show tables like 'tb_show_get_log'");
-    if($chk_server_log_table){
-        $request = serialize($_REQUEST);
-        $sql = "insert into tb_show_get_log set act = '".$act."', ip = '".addslashes($ip)."', request = '".addslashes($request)."', record_datetime = now()";
-        $db->query($sql);
-    }
+if($_SERVER["HTTP_GYHFTIPFSDX"]) {
+  $ip = trim(addslashes(current(explode(',', $_SERVER['HTTP_GYHFTIPFSDX']))));
+} else {
+  $ip = $_SERVER["REMOTE_ADDR"];
+}
+$chk_server_log_table = $db->get_one("show tables like 'tb_show_get_log'");
+if($chk_server_log_table){
+  $request = serialize($_REQUEST);
+  $sql = "insert into tb_show_get_log set act = '".$act."', ip = '".addslashes($ip)."', request = '".addslashes($request)."', record_datetime = now()";
+  $db->query($sql);
+}
 //}
 
 if($act == 'getTakeCount') {
-	$hids = array(1 => '信息大厦饭堂', 2 => '魁奇饭堂');
-	$d = date("Y-m-d");
+  $hids = array(1 => '信息大厦饭堂', 2 => '魁奇饭堂');
+  $d = date("Y-m-d");
 
-	$data = array();
-	foreach($hids as $hid => $hname) {
-		$st = strtotime($d." 11:30:00");
-		$et = strtotime($d." 13:00:00");
-		$x = array();
-		$y = array();
-		while($st < $et) {
-			$st1 = date("Y-m-d H:i:s", $st);
-			$st += 300;
-			$et1 = date("Y-m-d H:i:s", $st-1);
-			$sql = "select count(*) from tb_order a,tb_date b where a.date_id = b.id and b.dining_hall_id={$hid} and type=1 and take_food_time >= '{$st1}' and take_food_time <= '{$et1}' and state_id=3";
-			$c = $db->get_colume($sql);
-			/*$x[] = array(
-				'start_time' => $st1,
-				'end_time' => $et1,
-				'take_count' => $c,
-			);*/
-			if(count($x)%2 == 0) $x[] = substr($st1, 11, 5);
-			else $x[] = '';
-			$y[] = $c;
-		}
-		//$x[count($x)-1] = substr($st1, 11, 5);
-		$data[] = array('ftid' => $hid, 'ftname' => $hname,'x' => $x, 'y' => $y, 'title' => date("n")."月".date("j")."日");
-	}
-	echo json_encode($data);
+  $data = array();
+  foreach($hids as $hid => $hname) {
+    $st = strtotime($d." 11:30:00");
+    $et = strtotime($d." 13:00:00");
+    $x = array();
+    $y = array();
+    while($st < $et) {
+      $st1 = date("Y-m-d H:i:s", $st);
+      $st += 300;
+      $et1 = date("Y-m-d H:i:s", $st-1);
+      $sql = "select count(*) from tb_order a,tb_date b where a.date_id = b.id and b.dining_hall_id={$hid} and type=1 and take_food_time >= '{$st1}' and take_food_time <= '{$et1}' and state_id=3";
+      $c = $db->get_colume($sql);
+      /*$x[] = array(
+        'start_time' => $st1,
+        'end_time' => $et1,
+        'take_count' => $c,
+      );*/
+      if(count($x)%2 == 0) $x[] = substr($st1, 11, 5);
+      else $x[] = '';
+      $y[] = $c;
+    }
+    //$x[count($x)-1] = substr($st1, 11, 5);
+    $data[] = array('ftid' => $hid, 'ftname' => $hname,'x' => $x, 'y' => $y, 'title' => date("n")."月".date("j")."日");
+  }
+  echo json_encode($data);
 }
 
 
 
 
 if($act == 'getQRCode') {
-	$takecode = trim($_GET['takecode']);
-	if(!$takecode) exit;
+  $takecode = trim($_GET['takecode']);
+  if(!$takecode) exit;
 
-    $px = trim($_GET['px']);
-    if($px){
-        $size = $px*(1/29);
-    }else{
-        $size = 7;
-    }
+  $px = trim($_GET['px']);
+  if($px){
+    $size = $px*(1/29);
+  }else{
+    $size = 7;
+  }
 
-    $original = trim($_GET['original']);
-    if($original == '1'){
-        // 用原来的数据
-        $data = $takecode;
-    }else{
-        // 拼接，原来的付款码
-        $data = getEncodeStr($takecode);
-    }
+  $original = trim($_GET['original']);
+  if($original == '1'){
+    // 用原来的数据
+    $data = $takecode;
+  }else{
+    // 拼接，原来的付款码
+    $data = getEncodeStr($takecode);
+  }
 
-    require 'include/qrcode/qrlib.php';
-	$t = "qr_".time()."_".rand().".png";
-	QRcode::png($data, $t, 'L',$size , 0);
-	header("Content-Type: image/png");
-	echo file_get_contents($t);
-	@unlink($t);
+  require 'include/qrcode/qrlib.php';
+  $t = "qr_".time()."_".rand().".png";
+  QRcode::png($data, $t, 'L',$size , 0);
+  header("Content-Type: image/png");
+  echo file_get_contents($t);
+  @unlink($t);
 
-	exit;
+  exit;
 }
 
 
 if($act == 'wxpay_unifiedorder') {
-	$type = $_GET['type'];
-	$isjsapi = ($type == 'jsapi' || strstr($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger'));
-	$user = check_token();
-	$uid = $user['id'];
-	//$uid = 3;
-	$total_fee = round(floatval($_GET['total_fee'])*100);
-	if($total_fee <= 0) exit;
+  $type = $_GET['type'];
+  $isjsapi = ($type == 'jsapi' || strstr($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger'));
+  $user = check_token();
+  $uid = $user['id'];
+  //$uid = 3;
+  $total_fee = round(floatval($_GET['total_fee'])*100);
+  if($total_fee <= 0) exit;
 
-	$company_id = $user['company_id'];
-	if(!$company_id) exit;
-	$cInfo = $db->get_one("select * from tb_company where id=". $company_id);
-	if(!$cInfo) exit;
+  $company_id = $user['company_id'];
+  if(!$company_id) exit;
+  $cInfo = $db->get_one("select * from tb_company where id=". $company_id);
+  if(!$cInfo) exit;
 
 
 
-	$wxpay_mch_id = $cInfo['wxpay_mch_id'];
-	$wxpay_appid = $cInfo['wxpay_appid'];
-	$wxpay_key = $cInfo['wxpay_key'];
-	$wxpay_sub_mch_id = $cInfo['wxpay_sub_mch_id'];
+  $wxpay_mch_id = $cInfo['wxpay_mch_id'];
+  $wxpay_appid = $cInfo['wxpay_appid'];
+  $wxpay_key = $cInfo['wxpay_key'];
+  $wxpay_sub_mch_id = $cInfo['wxpay_sub_mch_id'];
 
-	if(!$wxpay_mch_id || !$wxpay_appid || !$wxpay_key) {
-		echoRs(0, '不支持微信支付！');
-	}
+  if(!$wxpay_mch_id || !$wxpay_appid || !$wxpay_key) {
+    echoRs(0, '不支持微信支付！');
+  }
 
-	$openid = '';
-	if($isjsapi) {
-		$openid = $user['weixin_openid'];
-		if(!$openid) {
-			echoRs(0, '非微信注册用户！不能使用公众号支付！');
-		}
-	}
-	$host = $_SERVER['HTTP_HOST'];
-	$protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
-	//$row = $db->get_one("select * from tb_recharge_pay_weixin where uid={$uid} and state=0 and total_fee=".($total_fee/100)." and addtime>'".date('YmdHis', time()-300)."'");
-	if(false) {
-		$prepay_id = $row['prepay_id'];
-		$code = $row['code'];
-		$mweb_url = $row['mweb_url'];
-	} else {
-		$code = get_code('tb_recharge_pay_weixin', 'code', 12, 'num', "FTDC".date("Ymd"));
-		$time_expire = date("YmdHis", time()+600);
-		$data = array();
-		$data['appid'] = $wxpay_appid;
-		$data['body'] = '订餐系统-充值'.($total_fee/100)."元";
-		$data['mch_id'] = $wxpay_mch_id;
-		$data['nonce_str'] = md5(time()."_".rand());
-		$data['notify_url'] = "https://yzms.fsecity.com/show/wxpay_recv.php";
-		$data['out_trade_no'] = $code;
-		$data['spbill_create_ip'] = $_SERVER['REMOTE_ADDR'];
-		$data['total_fee'] = $total_fee;
-		$data['time_expire'] = $time_expire;
-		$trade_type = $isjsapi?'JSAPI':'MWEB';;
-		$data['trade_type'] = $trade_type;
-		if($openid) $data['openid'] = $openid;
-		if($wxpay_sub_mch_id) $data['sub_mch_id'] = $wxpay_sub_mch_id;
+  $openid = '';
+  if($isjsapi) {
+    $openid = $user['weixin_openid'];
+    if(!$openid) {
+      echoRs(0, '非微信注册用户！不能使用公众号支付！');
+    }
+  }
+  $host = $_SERVER['HTTP_HOST'];
+  $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
+  //$row = $db->get_one("select * from tb_recharge_pay_weixin where uid={$uid} and state=0 and total_fee=".($total_fee/100)." and addtime>'".date('YmdHis', time()-300)."'");
+  if(false) {
+    $prepay_id = $row['prepay_id'];
+    $code = $row['code'];
+    $mweb_url = $row['mweb_url'];
+  } else {
+    $code = get_code('tb_recharge_pay_weixin', 'code', 12, 'num', "FTDC".date("Ymd"));
+    $time_expire = date("YmdHis", time()+600);
+    $data = array();
+    $data['appid'] = $wxpay_appid;
+    $data['body'] = '订餐系统-充值'.($total_fee/100)."元";
+    $data['mch_id'] = $wxpay_mch_id;
+    $data['nonce_str'] = md5(time()."_".rand());
+    $data['notify_url'] = "https://yzms.fsecity.com/show/wxpay_recv.php";
+    $data['out_trade_no'] = $code;
+    $data['spbill_create_ip'] = $_SERVER['REMOTE_ADDR'];
+    $data['total_fee'] = $total_fee;
+    $data['time_expire'] = $time_expire;
+    $trade_type = $isjsapi?'JSAPI':'MWEB';;
+    $data['trade_type'] = $trade_type;
+    if($openid) $data['openid'] = $openid;
+    if($wxpay_sub_mch_id) $data['sub_mch_id'] = $wxpay_sub_mch_id;
 
-		ksort($data);
-		$s1 = '';
-		foreach($data as $key => $item) {
-			if($s1 != '') $s1 .= "&";
-			$s1 .= $key."=".$item;
-		}
-		$s1 .= "&key=".$wxpay_key;
-		$sign = strtoupper(md5($s1));
-		$xml = "<xml>\n";
-		foreach($data as $key => $item) {
-			$xml .= "\t<{$key}>{$item}</{$key}>\n";
-		}
-		$xml .= "\t<sign>".$sign."</sign>\n";
-		$xml .= "</xml>\n";
+    ksort($data);
+    $s1 = '';
+    foreach($data as $key => $item) {
+      if($s1 != '') $s1 .= "&";
+      $s1 .= $key."=".$item;
+    }
+    $s1 .= "&key=".$wxpay_key;
+    $sign = strtoupper(md5($s1));
+    $xml = "<xml>\n";
+    foreach($data as $key => $item) {
+      $xml .= "\t<{$key}>{$item}</{$key}>\n";
+    }
+    $xml .= "\t<sign>".$sign."</sign>\n";
+    $xml .= "</xml>\n";
 
-		$prepay_id = '';
-		$c = gquery("https://api.mch.weixin.qq.com/pay/unifiedorder", $xml);//echo $xml;exit;
-		if($c) {
-			preg_match("/<prepay_id>(.+)<\/prepay_id>/i", $c, $m);
-			if($m[1]) {
-				$prepay_id = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+    $prepay_id = '';
+    $c = gquery("https://api.mch.weixin.qq.com/pay/unifiedorder", $xml);//echo $xml;exit;
+    if($c) {
+      preg_match("/<prepay_id>(.+)<\/prepay_id>/i", $c, $m);
+      if($m[1]) {
+        $prepay_id = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
 
-				$mweb_url = '';
-				preg_match("/<mweb_url>(.+)<\/mweb_url>/i", $c, $m);
-				if($m[1]) {
-					$mweb_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
-				}
+        $mweb_url = '';
+        preg_match("/<mweb_url>(.+)<\/mweb_url>/i", $c, $m);
+        if($m[1]) {
+          $mweb_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+        }
 
-				$code_url = '';
-				preg_match("/<code_url>(.+)<\/code_url>/i", $c, $m);
-				if($m[1]) {
-					$code_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
-				}
-			}
-		}
-		if(!$prepay_id) {
-			echoRs(0, '下单失败！请重试1！');
-		}
+        $code_url = '';
+        preg_match("/<code_url>(.+)<\/code_url>/i", $c, $m);
+        if($m[1]) {
+          $code_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+        }
+      }
+    }
+    if(!$prepay_id) {
+      echoRs(0, '下单失败！请重试1！');
+    }
 
-		//临时增加redirect_url
-		$ua = $_SERVER['HTTP_USER_AGENT'];
-		if(!stristr($ua, "android")) $mweb_url.= "&redirect_url=".urlencode($protocol.$host."/m/wx.html");
-		$sql = "insert into tb_recharge_pay_weixin set code='{$code}', trade_type='{$trade_type}', uid={$uid}, prepay_id='{$prepay_id}', mweb_url='".addslashes($mweb_url)."', total_fee=".($total_fee/100).", time_expire='{$time_expire}', state=0, addtime=now()";
-		//echo $sql;
-		$db->query($sql, 'SILENT');
-		if($db->affected_rows() != 1) {
-			echoRs(0, '下单失败！请重试2！');
-		}
-	}
-	$data = array();
-	if($isjsapi) {
+    //临时增加redirect_url
+    $ua = $_SERVER['HTTP_USER_AGENT'];
+    if(!stristr($ua, "android")) $mweb_url.= "&redirect_url=".urlencode($protocol.$host."/m/wx.html");
+    $sql = "insert into tb_recharge_pay_weixin set code='{$code}', trade_type='{$trade_type}', uid={$uid}, prepay_id='{$prepay_id}', mweb_url='".addslashes($mweb_url)."', total_fee=".($total_fee/100).", time_expire='{$time_expire}', state=0, addtime=now()";
+    //echo $sql;
+    $db->query($sql, 'SILENT');
+    if($db->affected_rows() != 1) {
+      echoRs(0, '下单失败！请重试2！');
+    }
+  }
+  $data = array();
+  if($isjsapi) {
 
-		$return_url = "https://yzms.fsecity.com/m/recharge.html?code=".$code;
-		$sign = md5($prepay_id."_".date("Y-m-d")."_vfj389umk9o3");
-		$data['mweb_url'] = "https://dc.fsecity.com/show/wxpay/ft_pay.php?prepay_id=".urlencode($prepay_id)."&return_url=".urlencode($return_url)."&sign=".$sign;
-	} else {
-		$data['mweb_url'] = $mweb_url;
-	}
-	$data['code'] = $code;
-	echoRs(1, 'ok', array('data' => $data));
+    $return_url = "https://yzms.fsecity.com/m/recharge.html?code=".$code;
+    $sign = md5($prepay_id."_".date("Y-m-d")."_vfj389umk9o3");
+    $data['mweb_url'] = "https://dc.fsecity.com/show/wxpay/ft_pay.php?prepay_id=".urlencode($prepay_id)."&return_url=".urlencode($return_url)."&sign=".$sign;
+  } else {
+    $data['mweb_url'] = $mweb_url;
+  }
+  $data['code'] = $code;
+  echoRs(1, 'ok', array('data' => $data));
 
-	exit;
+  exit;
 }
 
+if($act == 'applet_unifiedorder') {
+  $type = $_GET['type'];
+  $isjsapi = ($type == 'jsapi' || strstr($_SERVER['HTTP_USER_AGENT'], 'MicroMessenger'));
+  $user = check_token();
+  $uid = $user['id'];
+  //$uid = 3;
+  $total_fee = round(floatval($_GET['total_fee'])*100);
+  if($total_fee <= 0) exit;
+
+  $company_id = $user['company_id'];
+  if(!$company_id) exit;
+  $cInfo = $db->get_one("select * from tb_company where id=". $company_id);
+  if(!$cInfo) exit;
+
+
+  $applet_mch_id = $cInfo['wxpay_mch_id'];
+  $applet_appid = $cInfo['wxpay_appid'];
+  $applet_key = $cInfo['wxpay_key'];
+
+  if(!$applet_mch_id || !$applet_appid || !$applet_key) {
+    echoRs(0, '不支持小程序支付！');
+  }
+
+  $openid = '';
+  if($isjsapi) {
+    $openid = $user['applet_openid'];
+    if(!$openid) {
+      echoRs(0, '非小程序注册用户！不能使用小程序支付！');
+    }
+  }
+  $host = $_SERVER['HTTP_HOST'];
+  $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
+
+  $code = get_code('tb_recharge_pay_weixin', 'code', 12, 'num', "FTDC".date("Ymd"));
+  $time_expire = date("YmdHis", time()+600);
+  $data = array();
+  $data['appid'] = $applet_mch_id;
+  $data['body'] = '订餐系统-充值'.($total_fee/100)."元";
+  $data['mch_id'] = $applet_appid;
+  $data['nonce_str'] = md5(time()."_".rand());
+  $data['notify_url'] = "https://yzms.fsecity.com/show/wxpay_recv.php";
+  $data['out_trade_no'] = $code;
+  $data['spbill_create_ip'] = $_SERVER['REMOTE_ADDR'];
+  $data['total_fee'] = $total_fee;
+  $data['time_expire'] = $time_expire;
+  $trade_type = $isjsapi?'JSAPI':'MWEB';;
+  $data['trade_type'] = $trade_type;
+  if($openid) $data['openid'] = $openid;
+//    if($wxpay_sub_mch_id) $data['sub_mch_id'] = $wxpay_sub_mch_id;
+
+  ksort($data);
+  $s1 = '';
+  foreach($data as $key => $item) {
+    if($s1 != '') $s1 .= "&";
+    $s1 .= $key."=".$item;
+  }
+  $s1 .= "&key=".$applet_key;
+  $sign = strtoupper(md5($s1));
+  $xml = "<xml>\n";
+  foreach($data as $key => $item) {
+    $xml .= "\t<{$key}>{$item}</{$key}>\n";
+  }
+  $xml .= "\t<sign>".$sign."</sign>\n";
+  $xml .= "</xml>\n";
+
+  $prepay_id = '';
+  $c = gquery("https://api.mch.weixin.qq.com/pay/unifiedorder", $xml);//echo $xml;exit;
+  if($c) {
+    preg_match("/<prepay_id>(.+)<\/prepay_id>/i", $c, $m);
+    if($m[1]) {
+      $prepay_id = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+
+//        $mweb_url = '';
+//        preg_match("/<mweb_url>(.+)<\/mweb_url>/i", $c, $m);
+//        if($m[1]) {
+//          $mweb_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+//        }
+//
+//        $code_url = '';
+//        preg_match("/<code_url>(.+)<\/>/i", $c, $m);
+//        if($m[1]) {
+//          $code_url = str_replace(array('<![CDATA[', ']]>'), '', $m[1]);
+//        }
+    }
+  }
+  if(!$prepay_id) {
+    echoRs(0, '下单失败！请重试1！');
+  }
+
+  //临时增加redirect_url
+  $ua = $_SERVER['HTTP_USER_AGENT'];
+//    if(!stristr($ua, "android")) $mweb_url.= "&redirect_url=".urlencode($protocol.$host."/m/wx.html");
+  $sql = "insert into tb_recharge_pay_weixin set code='{$code}', trade_type='{$trade_type}', uid={$uid}, prepay_id='{$prepay_id}', total_fee=".($total_fee/100).", time_expire='{$time_expire}', state=0, is_applet=1, addtime=now()";
+  //echo $sql;
+  $db->query($sql, 'SILENT');
+  if($db->affected_rows() != 1) {
+    echoRs(0, '下单失败！请重试2！');
+  }
+  $data = array();
+//  if($isjsapi) {
+//
+//    $return_url = "https://yzms.fsecity.com/m/recharge.html?code=".$code;
+//    $sign = md5($prepay_id."_".date("Y-m-d")."_vfj389umk9o3");
+//    $data['mweb_url'] = "https://dc.fsecity.com/show/wxpay/ft_pay.php?prepay_id=".urlencode($prepay_id)."&return_url=".urlencode($return_url)."&sign=".$sign;
+//  } else {
+//    $data['mweb_url'] = $mweb_url;
+//  }
+  $data['code'] = $code;
+//  $data['prepay_id'] = $prepay_id;
+
+  $signData['appId'] = $applet_mch_id;
+  $signData['timeStamp'] = time();
+  $signData['nonceStr'] = md5(time()."_".rand());
+  $signData['package'] = "prepay_id=".$prepay_id;
+  $signData['signType'] = "MD5";
+  ksort($signData);
+  $s2 = '';
+  foreach($signData as $key => $item) {
+    if($s2 != '') $s2 .= "&";
+    $s2 .= $key."=".$item;
+  }
+  $s2 .= "&key=".$applet_key;
+  $signData['paySign'] = strtoupper(md5($s2));
+
+  unset($signData['appId']);
+  $data['requestPayment'] = $signData;
+  echoRs(1, 'ok', array('data' => $data));
+
+  exit;
+}
+
+
 if($act == 'get_wxpay_status') {
-	$code = trim($_GET['code']);
-	if(!$code) exit;
-	$orderInfo = $db->get_one("select * from tb_recharge_pay_weixin where code = '{$code}'");
-	if(!$orderInfo) {
-		echoRs(0, '订单不存在！');
-	}
-	if($orderInfo['state'] == 1) {
-		echoRs(1, '支付成功！');
-	}
+  $code = trim($_GET['code']);
+  if(!$code) exit;
+  $orderInfo = $db->get_one("select * from tb_recharge_pay_weixin where code = '{$code}'");
+  if(!$orderInfo) {
+    echoRs(0, '订单不存在！');
+  }
+  if($orderInfo['state'] == 1) {
+    echoRs(1, '支付成功！');
+  }
 
-	$uid = $orderInfo['uid'];
-	$user = $db->get_one("select * from tb_user where id=". $uid);
+  $uid = $orderInfo['uid'];
+  $user = $db->get_one("select * from tb_user where id=". $uid);
 
-	$company_id = $user['company_id'];
-	if(!$company_id) exit;
-	$cInfo = $db->get_one("select * from tb_company where id=". $company_id);
-	if(!$cInfo) exit;
+  $company_id = $user['company_id'];
+  if(!$company_id) exit;
+  $cInfo = $db->get_one("select * from tb_company where id=". $company_id);
+  if(!$cInfo) exit;
 
 
-	$wxpay_mch_id = $cInfo['wxpay_mch_id'];
-	$wxpay_appid = $cInfo['wxpay_appid'];
-	$wxpay_key = $cInfo['wxpay_key'];
-	$wxpay_sub_mch_id = $cInfo['wxpay_sub_mch_id'];
+  $wxpay_mch_id = $cInfo['wxpay_mch_id'];
+  $wxpay_appid = $cInfo['wxpay_appid'];
+  $wxpay_key = $cInfo['wxpay_key'];
+  $wxpay_sub_mch_id = $cInfo['wxpay_sub_mch_id'];
 
-	if(!$wxpay_mch_id || !$wxpay_appid || !$wxpay_key) {
-		echoRs(0, '不支持微信支付！');
-	}
+  if(!$wxpay_mch_id || !$wxpay_appid || !$wxpay_key) {
+    echoRs(0, '不支持微信支付！');
+  }
 
-	//$port = $db->get_colume("select value from tb_config where class='PORT'");
+  //$port = $db->get_colume("select value from tb_config where class='PORT'");
 
-	$data = array();
-	$data['appid'] = $wxpay_appid;
-	$data['mch_id'] = $wxpay_mch_id;
-	$data['nonce_str'] = md5(time()."_".rand());
-	$data['out_trade_no'] = $code;
-	if($wxpay_sub_mch_id) $data['sub_mch_id'] = $wxpay_sub_mch_id;
-	ksort($data);
-	$s1 = '';
-	foreach($data as $key => $item) {
-		if($item != '') {
-			if($s1 != '') $s1 .= "&";
-			$s1 .= $key."=".$item;
-		}
-	}
-	$s1 .= "&key=".$wxpay_key;
-	$sign = strtoupper(md5($s1));
+  $data = array();
+  $data['appid'] = $wxpay_appid;
+  $data['mch_id'] = $wxpay_mch_id;
+  $data['nonce_str'] = md5(time()."_".rand());
+  $data['out_trade_no'] = $code;
+  if($wxpay_sub_mch_id) $data['sub_mch_id'] = $wxpay_sub_mch_id;
+  ksort($data);
+  $s1 = '';
+  foreach($data as $key => $item) {
+    if($item != '') {
+      if($s1 != '') $s1 .= "&";
+      $s1 .= $key."=".$item;
+    }
+  }
+  $s1 .= "&key=".$wxpay_key;
+  $sign = strtoupper(md5($s1));
 
-	$xml = "<xml>\n";
-	foreach($data as $key => $item) {
-		$xml .= "\t<{$key}>{$item}</{$key}>\n";
-	}
-	$xml .= "\t<sign>".$sign."</sign>\n";
-	$xml .= "</xml>\n";
+  $xml = "<xml>\n";
+  foreach($data as $key => $item) {
+    $xml .= "\t<{$key}>{$item}</{$key}>\n";
+  }
+  $xml .= "\t<sign>".$sign."</sign>\n";
+  $xml .= "</xml>\n";
 
-	$c = gquery("https://api.mch.weixin.qq.com/pay/orderquery", $xml);
-	if(!$c) {
-		echoRs(0, '查询失败！请重试！');
-	}
-	$wxpay_recvxml = $c;
-	$wxrecv_isinclude = true;
-	require("wxpay_recv.php");
-	//gquery("http://127.0.0.1:{$port}/show/wxpay_recv.php", $c);
-	$orderInfo = $db->get_one("select * from tb_recharge_pay_weixin where id=". $orderInfo['id']);
-	if($orderInfo['state'] == 1) {
-		echoRs(1, '支付成功！');
-	} else {
-		echoRs(0, '未支付！');
-	}
+  $c = gquery("https://api.mch.weixin.qq.com/pay/orderquery", $xml);
+  if(!$c) {
+    echoRs(0, '查询失败！请重试！');
+  }
+  $wxpay_recvxml = $c;
+  $wxrecv_isinclude = true;
+  require("wxpay_recv.php");
+  //gquery("http://127.0.0.1:{$port}/show/wxpay_recv.php", $c);
+  $orderInfo = $db->get_one("select * from tb_recharge_pay_weixin where id=". $orderInfo['id']);
+  if($orderInfo['state'] == 1) {
+    echoRs(1, '支付成功！');
+  } else {
+    echoRs(0, '未支付！');
+  }
 }
 
 if($act == 'get_yzfpay_status') {
-    $code = trim($_GET['code']);
-    if(!$code) exit;
-    $orderInfo = $db->get_one("select * from tb_recharge_pay where ORDERSEQ = '{$code}'");
-    if(!$orderInfo) {
-        echoRs(0, '订单不存在！');
+  $code = trim($_GET['code']);
+  if(!$code) exit;
+  $orderInfo = $db->get_one("select * from tb_recharge_pay where ORDERSEQ = '{$code}'");
+  if(!$orderInfo) {
+    echoRs(0, '订单不存在！');
+  }
+  if($orderInfo['RETNCODE'] == 'SUCCESS') {
+    $pay_suc = $db->get_one("select * from tb_recharge_pay_suc where ORDERSEQ = '{$code}'");
+    if(empty($pay_suc)){
+      echoRs(0, '订单没有支付成功记录！');
+    }else{
+      echoRs(1, '支付成功！');
     }
-    if($orderInfo['RETNCODE'] == 'SUCCESS') {
-        $pay_suc = $db->get_one("select * from tb_recharge_pay_suc where ORDERSEQ = '{$code}'");
-        if(empty($pay_suc)){
-            echoRs(0, '订单没有支付成功记录！');
-        }else{
-            echoRs(1, '支付成功！');
-        }
-    }
-    echoRs(0, '订单支付失败！');
+  }
+  echoRs(0, '订单支付失败！');
 }
 
 if($act == 'getAllUser') {
-	$ip = $_SERVER['REMOTE_ADDR'];
-	//if(substr($ip, 0, 7) != '172.16.' && $ip != '36.111.42.57' && $ip != '59.36.172.164') exit;
-	ini_set("memory_limit", '512M');
-	$data = $db->get_all("select a.id, a.type_id, a.username, a.cellphone, a.cellphone2, b.short_name as deptname, a.enabled from tb_user a, tb_company b where a.company_id=b.id");
-	$s = gzcompress(serialize($data));
-	$s = aes_encrypt($s, '8e1xkkv921xiaOFA', '', true);
-	echo $s;
-	exit;
+  $ip = $_SERVER['REMOTE_ADDR'];
+  //if(substr($ip, 0, 7) != '172.16.' && $ip != '36.111.42.57' && $ip != '59.36.172.164') exit;
+  ini_set("memory_limit", '512M');
+  $data = $db->get_all("select a.id, a.type_id, a.username, a.cellphone, a.cellphone2, b.short_name as deptname, a.enabled from tb_user a, tb_company b where a.company_id=b.id");
+  $s = gzcompress(serialize($data));
+  $s = aes_encrypt($s, '8e1xkkv921xiaOFA', '', true);
+  echo $s;
+  exit;
 }
 
 if($act == 'sgo' || $act == 'sga' || $act == 'sq') {
-	$ip = $_SERVER['REMOTE_ADDR'];
-	//if(substr($ip, 0, 7) != '172.16.' && $ip != '36.111.42.57' && $ip != '59.36.172.164' && $ip != '127.0.0.1') exit;
-	$ps = file_get_contents("php://input");
-	if(!$ps) exit;
-	$enkey = '8e1xkkv921xiaOFA';
-	$sql = aes_decrypt($ps, $enkey, '', true);
-	if(!$sql) exit;
+  $ip = $_SERVER['REMOTE_ADDR'];
+  //if(substr($ip, 0, 7) != '172.16.' && $ip != '36.111.42.57' && $ip != '59.36.172.164' && $ip != '127.0.0.1') exit;
+  $ps = file_get_contents("php://input");
+  if(!$ps) exit;
+  $enkey = '8e1xkkv921xiaOFA';
+  $sql = aes_decrypt($ps, $enkey, '', true);
+  if(!$sql) exit;
 
-	if(!$sql) exit;
-	if($act == 'sq') {
-		$rs = $db->query($sql);
-		$id = $db->insert_id();
-		$data = array('rs' => $rs, 'id' => $id);
-	}
-	else if($act == 'sga') $data = $db->get_all($sql);
-	else if($act == 'sgo') $data = $db->get_one($sql);
-	$s = gzcompress(serialize($data));
-	$s = aes_encrypt($s, $enkey, '', true);
-	echo $s;
-	exit;
+  if(!$sql) exit;
+  if($act == 'sq') {
+    $rs = $db->query($sql);
+    $id = $db->insert_id();
+    $data = array('rs' => $rs, 'id' => $id);
+  }
+  else if($act == 'sga') $data = $db->get_all($sql);
+  else if($act == 'sgo') $data = $db->get_one($sql);
+  $s = gzcompress(serialize($data));
+  $s = aes_encrypt($s, $enkey, '', true);
+  echo $s;
+  exit;
 }
 
 if($act == 'get_rest') {
-	$ftid = intval($_GET['ftid']);
-	$date = date("Y-m-d");
-	$time = date("H:i:s");
-	$dateList = $db->get_all("select a.*, b.name as meal_name from tb_date a, tb_meal_type b where a.dc_type=b.id and a.dining_hall_id = {$ftid} and dc_date = '{$date}' and b.start_time<='{$time}' and b.end_time>='{$time}'  order by a.id ");
-	$restList = array();
-	foreach($dateList as $item) {
-		$date_id = $item['id'];
-		$row = $db->get_all("select c.id, c.dish_name, IFNULL(sum(b.dish_amount), 0) rest_num from (select c.id, c.dish_name from tb_dish c, tb_date_dish e where c.id = e.dish_id and e.date_id={$date_id} and c.dish_type) c
+  $ftid = intval($_GET['ftid']);
+  $date = date("Y-m-d");
+  $time = date("H:i:s");
+  $dateList = $db->get_all("select a.*, b.name as meal_name from tb_date a, tb_meal_type b where a.dc_type=b.id and a.dining_hall_id = {$ftid} and dc_date = '{$date}' and b.start_time<='{$time}' and b.end_time>='{$time}'  order by a.id ");
+  $restList = array();
+  foreach($dateList as $item) {
+    $date_id = $item['id'];
+    $row = $db->get_all("select c.id, c.dish_name, IFNULL(sum(b.dish_amount), 0) rest_num from (select c.id, c.dish_name from tb_dish c, tb_date_dish e where c.id = e.dish_id and e.date_id={$date_id} and c.dish_type) c
 			LEFT JOIN (select b.id, b.dish_id, b.dish_amount from tb_order a, tb_order_detail b where date_id = {$date_id} and a.id = b.order_id and  a.state_id=6 and a.type=1 ) b
 			on  b.dish_id = c.id
 			group by c.id");
-		foreach($row as $k=>$v) {
-			if(mb_strlen($v['dish_name'],"utf-8")>5) {
-				$row[$k]['dish_name'] = mb_substr($v['dish_name'],0,2,"utf-8")."*".mb_substr($v['dish_name'],mb_strlen($v['dish_name'],"utf-8") - 4,3,"utf-8");
-			}
-		}
+    foreach($row as $k=>$v) {
+      if(mb_strlen($v['dish_name'],"utf-8")>5) {
+        $row[$k]['dish_name'] = mb_substr($v['dish_name'],0,2,"utf-8")."*".mb_substr($v['dish_name'],mb_strlen($v['dish_name'],"utf-8") - 4,3,"utf-8");
+      }
+    }
 
-		$restList[] = array('meal_name' => $item['dc_date'].$item['meal_name'], 'date_id' => $date_id, 'rest_info' => $row);
-	}
-	echoRs(1, 'ok', array('restList' => $restList));
+    $restList[] = array('meal_name' => $item['dc_date'].$item['meal_name'], 'date_id' => $date_id, 'rest_info' => $row);
+  }
+  echoRs(1, 'ok', array('restList' => $restList));
 }
 
 
 function get_facecode($path, $rotate) {
-	$s = md5($path."_".$rotate, true);
-	$n = ord($s[0])."".ord($s[1])."".ord($s[2])."".ord($s[3])."".ord($s[4])."".ord($s[5])."".ord($s[6])."".ord($s[7])."".ord($s[8]);
-	$n = ltrim($n, "0");
-	if(strlen($n) > 8) $n = substr($n, 0, 8);
-	return $n;
+  $s = md5($path."_".$rotate, true);
+  $n = ord($s[0])."".ord($s[1])."".ord($s[2])."".ord($s[3])."".ord($s[4])."".ord($s[5])."".ord($s[6])."".ord($s[7])."".ord($s[8]);
+  $n = ltrim($n, "0");
+  if(strlen($n) > 8) $n = substr($n, 0, 8);
+  return $n;
 }
 
 if($act == 'hkface_get_face_list') {
-	if(function_exists('check_isfsip')) {
-		check_isfsip();
-	}
-	$dining_hall_id = intval($_GET['dining_hall_id']);
+  if(function_exists('check_isfsip')) {
+    check_isfsip();
+  }
+  $dining_hall_id = intval($_GET['dining_hall_id']);
 
-	if(!$dining_hall_id) {
-		echoRs(0, '公司id不能为空');
-	}
+  if(!$dining_hall_id) {
+    echoRs(0, '公司id不能为空');
+  }
 
-	$trs = $db->get_one("select company_id from tb_dining_hall where id = ".$dining_hall_id);
-	$company_id = $trs['company_id'];
+  $trs = $db->get_one("select company_id from tb_dining_hall where id = ".$dining_hall_id);
+  $company_id = $trs['company_id'];
 
-	$data = $db->get_all("select a.id, a.user_id, a.card, a.facecode, b.cellphone, b.username,(select cardno from tb_user_idcard where user_id =b.id and state = '1' limit 1) as cardno from tb_user_face a, tb_user b where a.user_id=b.id and b.enabled not in (0, -99) and b.company_id = ".$company_id);
-	$list = array();
-	foreach($data as $item) {
-		$card = $item['card'];
-		unset($item['card']);
-		$list[$card] = $item;
-	}
-	echoRs(1, 'ok!', array('list' => $list));
+  $data = $db->get_all("select a.id, a.user_id, a.card, a.facecode, b.cellphone, b.username,(select cardno from tb_user_idcard where user_id =b.id and state = '1' limit 1) as cardno from tb_user_face a, tb_user b where a.user_id=b.id and b.enabled not in (0, -99) and b.company_id = ".$company_id);
+  $list = array();
+  foreach($data as $item) {
+    $card = $item['card'];
+    unset($item['card']);
+    $list[$card] = $item;
+  }
+  echoRs(1, 'ok!', array('list' => $list));
 }
 
 if($act == 'hkface_get_face_data' || $act == 'get_face') {
-	if(function_exists('check_isfsip')) {
-		check_isfsip();
-	}
-	if($act == 'hkface_get_face_data') {
-        if (is_numeric($_GET['uid']))$uid = intval($_GET['uid']);
-        else $uid = intval(dbdec($_GET['uid']));
+  if(function_exists('check_isfsip')) {
+    check_isfsip();
+  }
+  if($act == 'hkface_get_face_data') {
+    if (is_numeric($_GET['uid']))$uid = intval($_GET['uid']);
+    else $uid = intval(dbdec($_GET['uid']));
 //		$uid = intval($_GET['uid']);
-		$raw = intval($_GET['raw']);
-	} else {
-		$user = check_token();
-		$uid = $user['id'];
-		$raw = 1;
-	}
-	$info = $db->get_one("select a.* from tb_user_face a, tb_user b where a.user_id=b.id and b.enabled not in (0, -99) and a.user_id=".$uid);
-	if(!$info) exit;
+    $raw = intval($_GET['raw']);
+  } else {
+    $user = check_token();
+    $uid = $user['id'];
+    $raw = 1;
+  }
+  $info = $db->get_one("select a.* from tb_user_face a, tb_user b where a.user_id=b.id and b.enabled not in (0, -99) and a.user_id=".$uid);
+  if(!$info) exit;
 
-	$path = "../backstage/".$info['path'];
-	$rotate = $info['rotate'];
-	if($rotate == 0) {
-		if(!is_file($path)) {
-			exit;
-		}
-		$data = @file_get_contents($path);
-	} else {
-		$path2 = substr($path, 0, -4)."_{$rotate}.jpg";
-		if(is_file($path2)) {
-			$data = @file_get_contents($path2);
-		} else {
-			if($rotate == 1) $deg = 90;
-			else if($rotate == 2) $deg = -90;
-			else if($rotate == 3) $deg = 180;
-			else exit;
-			$img = @imagecreatefromjpeg($path);
-			if(!$img) {
-				exit;
-			}
-			$color = imagecolorallocate($img, 255, 255, 255);
-			$img = imagerotate($img, $deg, $color);
-			imagejpeg($img, $path2, 90);
-			imagedestroy($img);
-			if(!is_file($path2)) {
-				exit;
-			}
-			$data = @file_get_contents($path2);
-		}
-	}
-	if($raw) {
-		header("Content-Type: image/jpeg");
-		echo $data;
-		exit;
-	}
-	unset($info['path']);
-	$info['data'] = base64_encode($data);
-	echoRs(1, 'ok!', array('info' => $info));
+  $path = "../backstage/".$info['path'];
+  $rotate = $info['rotate'];
+  if($rotate == 0) {
+    if(!is_file($path)) {
+      exit;
+    }
+    $data = @file_get_contents($path);
+  } else {
+    $path2 = substr($path, 0, -4)."_{$rotate}.jpg";
+    if(is_file($path2)) {
+      $data = @file_get_contents($path2);
+    } else {
+      if($rotate == 1) $deg = 90;
+      else if($rotate == 2) $deg = -90;
+      else if($rotate == 3) $deg = 180;
+      else exit;
+      $img = @imagecreatefromjpeg($path);
+      if(!$img) {
+        exit;
+      }
+      $color = imagecolorallocate($img, 255, 255, 255);
+      $img = imagerotate($img, $deg, $color);
+      imagejpeg($img, $path2, 90);
+      imagedestroy($img);
+      if(!is_file($path2)) {
+        exit;
+      }
+      $data = @file_get_contents($path2);
+    }
+  }
+  if($raw) {
+    header("Content-Type: image/jpeg");
+    echo $data;
+    exit;
+  }
+  unset($info['path']);
+  $info['data'] = base64_encode($data);
+  echoRs(1, 'ok!', array('info' => $info));
 }
 if($act == 'upload_face') {
-	//$jsonpfunc = $_GET['uploadfunc'];
-	//if(!$jsonpfunc) exit;
+  //$jsonpfunc = $_GET['uploadfunc'];
+  //if(!$jsonpfunc) exit;
 
-	$user = check_token();
-	$uid = $user['id'];
+  $user = check_token();
+  $uid = $user['id'];
 
-	$row = $db->get_one("select * from tb_user_face where user_id = {$uid}");
-	if($row && $row['width'] > 100 && $row['height'] > 100 && $user['company_id'] != 54) {
-		echoRs(0, '系统中已经有您的照片，如需修改请到饭堂现场处理！');
-	}
+  $row = $db->get_one("select * from tb_user_face where user_id = {$uid}");
+  if($row && $row['width'] > 100 && $row['height'] > 100 && $user['company_id'] != 54) {
+    echoRs(0, '系统中已经有您的照片，如需修改请到饭堂现场处理！');
+  }
 
-	$data = stripslashes($_POST["data"]);
-	if(!$data) {
-		echoRs(0, '参数不完整！');
-	}
-	//$allow_ext = array('jpg', 'jpeg', 'png');
-	//$fn = $file['name'];
-	//if(!strstr($fn, ".")) echoRs(0, '文件名错误！');
-	//$ext = strtolower(end(explode(".", $fn)));
-	//if(!in_array($ext, $allow_ext)) echoRs(0, '只允许上传jpg或png图片文件！');
+  $data = stripslashes($_POST["data"]);
+  if(!$data) {
+    echoRs(0, '参数不完整！');
+  }
+  //$allow_ext = array('jpg', 'jpeg', 'png');
+  //$fn = $file['name'];
+  //if(!strstr($fn, ".")) echoRs(0, '文件名错误！');
+  //$ext = strtolower(end(explode(".", $fn)));
+  //if(!in_array($ext, $allow_ext)) echoRs(0, '只允许上传jpg或png图片文件！');
 
-	$imgkey = md5(microtime()."_".rand());
-	$imgpath = "../backstage/uploadfiles/userfaces/".$imgkey.".jpg";
+  $imgkey = md5(microtime()."_".rand());
+  $imgpath = "../backstage/uploadfiles/userfaces/".$imgkey.".jpg";
 
 
-	$data = str_ireplace("data:image/jpeg;base64,", '', $data);
-	$data = str_ireplace("data:image/png;base64,", '', $data);
+  $data = str_ireplace("data:image/jpeg;base64,", '', $data);
+  $data = str_ireplace("data:image/png;base64,", '', $data);
 
-	$imgs = base64_decode($data);
-	if(!$imgs) echoRs(0, '上传失败！');
-	$img = @imagecreatefromstring($imgs);
-	if(!$img) {
-		echoRs(0, '图片解析错误！');
-	}
-	$maxsize = 600;
-	$width = imagesx($img);
-	$height = imagesy($img);
-	if($width >= $height) {
-		$height2 = $maxsize;
-		$width2 = ceil($width*$height2/$height);
-	} else {
-		$width2 = $maxsize;
-		$height2 = ceil($height*$width2/$width);
-	}
-	if($width2 >= $width || $height2 >= $height) {
-		$width2 = $width;
-		$height2 = $height;
-	}
-	$img2 = imagecreatetruecolor($width2, $height2);
-	imagecopyresized($img2, $img, 0, 0, 0, 0, $width2, $height2, $width, $height);
-	imagejpeg($img2, $imgpath, 90);
-	imagedestroy($img);
-	imagedestroy($img2);
+  $imgs = base64_decode($data);
+  if(!$imgs) echoRs(0, '上传失败！');
+  $img = @imagecreatefromstring($imgs);
+  if(!$img) {
+    echoRs(0, '图片解析错误！');
+  }
+  $maxsize = 600;
+  $width = imagesx($img);
+  $height = imagesy($img);
+  if($width >= $height) {
+    $height2 = $maxsize;
+    $width2 = ceil($width*$height2/$height);
+  } else {
+    $width2 = $maxsize;
+    $height2 = ceil($height*$width2/$width);
+  }
+  if($width2 >= $width || $height2 >= $height) {
+    $width2 = $width;
+    $height2 = $height;
+  }
+  $img2 = imagecreatetruecolor($width2, $height2);
+  imagecopyresized($img2, $img, 0, 0, 0, 0, $width2, $height2, $width, $height);
+  imagejpeg($img2, $imgpath, 90);
+  imagedestroy($img);
+  imagedestroy($img2);
 
 
-	if(!file_exists($imgpath) || filesize($imgpath) <= 0) {
-		//header('HTTP/1.1 500 err');
-		echoRs(0, '上传失败！');
-	}
+  if(!file_exists($imgpath) || filesize($imgpath) <= 0) {
+    //header('HTTP/1.1 500 err');
+    echoRs(0, '上传失败！');
+  }
 
-	$card = substr(md5("yzms".$uid), 10, 10);
-	$tfn = "uploadfiles/userfaces/".$imgkey.".jpg";
-	$facecode = get_facecode($tfn, 0);
+  $card = substr(md5("yzms".$uid), 10, 10);
+  $tfn = "uploadfiles/userfaces/".$imgkey.".jpg";
+  $facecode = get_facecode($tfn, 0);
 
 
-	if($row) {
-		$db->query("update tb_user_face set facecode = '{$facecode}', path = '{$tfn}', rotate = '0', `addtime` = now(),upload_from=2 where id=".$row['id']);
-	} else {
-		$db->query("insert into tb_user_face set user_id = {$uid}, card = '{$card}', facecode = '{$facecode}', path = '{$tfn}', rotate = '0', upload_from=2, width={$width2},height={$height2}, `addtime` = now()");
-	}
+  if($row) {
+    $db->query("update tb_user_face set facecode = '{$facecode}', path = '{$tfn}', rotate = '0', `addtime` = now(),upload_from=2 where id=".$row['id']);
+  } else {
+    $db->query("insert into tb_user_face set user_id = {$uid}, card = '{$card}', facecode = '{$facecode}', path = '{$tfn}', rotate = '0', upload_from=2, width={$width2},height={$height2}, `addtime` = now()");
+  }
 
-	echoRs(1, 'ok', array('url' => '/show/get.php?act=get_face&token='.$_GET['token']."&code=".$facecode));
+  echoRs(1, 'ok', array('url' => '/show/get.php?act=get_face&token='.$_GET['token']."&code=".$facecode));
 }
 
 if($act == 'is_push_check_box'){
-    $user = check_token();
-    $is_check = trim($_REQUEST['is_check']);
-    if(empty($user['id'])){
-        echoRs(0, '获取用户信息失败');
-    }
-    if($is_check === false){
-        echoRs(0, '参数缺失');
-    }
-    $list_info = $db->get_one("select * from tb_notice_push_blacklist where user_id='{$user['id']}'");
-    if(!empty($list_info)){
-        // 有记录，update
-        $db->query("update tb_notice_push_blacklist set is_receive='{$is_check}' where user_id='{$user['id']}'");
-    }else{
-        // 没记录,insert
-        $db->query("insert into tb_notice_push_blacklist set user_id='{$user['id']}', add_time='".date('Y-m-d H:i:s')."', is_receive='{$is_check}'");
-    }
-    echoRs(1, '设置成功');
+  $user = check_token();
+  $is_check = trim($_REQUEST['is_check']);
+  if(empty($user['id'])){
+    echoRs(0, '获取用户信息失败');
+  }
+  if($is_check === false){
+    echoRs(0, '参数缺失');
+  }
+  $list_info = $db->get_one("select * from tb_notice_push_blacklist where user_id='{$user['id']}'");
+  if(!empty($list_info)){
+    // 有记录，update
+    $db->query("update tb_notice_push_blacklist set is_receive='{$is_check}' where user_id='{$user['id']}'");
+  }else{
+    // 没记录,insert
+    $db->query("insert into tb_notice_push_blacklist set user_id='{$user['id']}', add_time='".date('Y-m-d H:i:s')."', is_receive='{$is_check}'");
+  }
+  echoRs(1, '设置成功');
 }
 
 if($act == 'cancel_account'){
-    $user = check_token();
-    if(!empty($user) && $user['enabled'] != 1){
-        echoRs(0, '该账号当前状态不能注销。');
-    }
+  $user = check_token();
+  if(!empty($user) && $user['enabled'] != 1){
+    echoRs(0, '该账号当前状态不能注销。');
+  }
 
-    $update = $db->query("update tb_user set enabled='0' where id=" . $user['id']);
-    if($update){
-        echoRs(1, '注销成功。');
-    }else{
-        echoRs(0, '注销失败，请联系管理员。');
-    }
+  $update = $db->query("update tb_user set enabled='0' where id=" . $user['id']);
+  if($update){
+    echoRs(1, '注销成功。');
+  }else{
+    echoRs(0, '注销失败，请联系管理员。');
+  }
 }
 
 if($act == 'download_cert') {
-	$company_id = intval($_REQUEST['company_id']);
-	$posid = intval($_REQUEST['posid']);
-	$channel_id = intval($_REQUEST['channel_id']);
-	$ft_id = intval($_REQUEST['ft_id']);
-	if(!$company_id && $ft_id) {
-		$row = $db->get_one("select * from tb_dining_hall where id = ".$ft_id);
-		if(!$row) exit;
-		$company_id = $row['company_id'];
-	}
-	$list = $db->get_all("select * from tb_hk_cert where company_id=".$company_id);
-	if(!$list) exit;
+  $company_id = intval($_REQUEST['company_id']);
+  $posid = intval($_REQUEST['posid']);
+  $channel_id = intval($_REQUEST['channel_id']);
+  $ft_id = intval($_REQUEST['ft_id']);
+  if(!$company_id && $ft_id) {
+    $row = $db->get_one("select * from tb_dining_hall where id = ".$ft_id);
+    if(!$row) exit;
+    $company_id = $row['company_id'];
+  }
+  $list = $db->get_all("select * from tb_hk_cert where company_id=".$company_id);
+  if(!$list) exit;
 
-	$info = array();
-	foreach($list as $item) {
-		$info[$item['ftid']."_".$item['channel_id']."_".$item['posid']] = $item;
-	}
+  $info = array();
+  foreach($list as $item) {
+    $info[$item['ftid']."_".$item['channel_id']."_".$item['posid']] = $item;
+  }
 
-	$keys = array(
-		$ft_id ."_".  $channel_id ."_".  $posid,
-		$ft_id ."_".  $channel_id ."_0",
-		$ft_id ."_0_".  $posid,
-		"0_".  $channel_id ."_".  $posid,
-		$ft_id ."_0_0",
-		"0_".  $channel_id ."_0",
-		"0_0_".  $posid,
-		"0_0_0",
-	);
-	foreach($keys as $key) {
-		if($info[$key]) {
-			$row = $info[$key];
-			echo '"{""serial"":""'.$row['serial'].'"",""key"":""'.$row['key'].'""}"'."\n";
-			exit;
-		}
-	}
+  $keys = array(
+    $ft_id ."_".  $channel_id ."_".  $posid,
+    $ft_id ."_".  $channel_id ."_0",
+    $ft_id ."_0_".  $posid,
+    "0_".  $channel_id ."_".  $posid,
+    $ft_id ."_0_0",
+    "0_".  $channel_id ."_0",
+    "0_0_".  $posid,
+    "0_0_0",
+  );
+  foreach($keys as $key) {
+    if($info[$key]) {
+      $row = $info[$key];
+      echo '"{""serial"":""'.$row['serial'].'"",""key"":""'.$row['key'].'""}"'."\n";
+      exit;
+    }
+  }
 
-	exit;
+  exit;
 }
 
 if(substr($act, 0, 4) == 'jtj_') require_once("get_jtj.php");
 
 //记录人脸错误信息
 if($act == 'hk_fail') {
-    $s = file_get_contents("php://input");
+  $s = file_get_contents("php://input");
 
-    $info = $_REQUEST['info'];
+  $info = $_REQUEST['info'];
 
 
 
-    $a = json_decode($info, true);
+  $a = json_decode($info, true);
 
-    if(!$a['list']) exit;
-    $diningHallId = $a['ftID'];
-    $channelId = $a['posID'];
+  if(!$a['list']) exit;
+  $diningHallId = $a['ftID'];
+  $channelId = $a['posID'];
 
-    foreach($a['list'] as $item) {
-        $uniqueCode = $item['uniqueCode'];
-        $facecode = $item['facecode'];
-        $card = $item['uniqueCode'];
-        $status = $item['status'];
-        $sql = "INSERT tb_face_error (dining_hall_id,channel_id,card,facecode,datetime,status) VALUES ( '".addslashes($diningHallId). "' , '".addslashes($channelId)."' , '".addslashes($card)."' , '".addslashes($facecode)."' ,now() ".$status." ) ";
+  foreach($a['list'] as $item) {
+    $uniqueCode = $item['uniqueCode'];
+    $facecode = $item['facecode'];
+    $card = $item['uniqueCode'];
+    $status = $item['status'];
+    $sql = "INSERT tb_face_error (dining_hall_id,channel_id,card,facecode,datetime,status) VALUES ( '".addslashes($diningHallId). "' , '".addslashes($channelId)."' , '".addslashes($card)."' , '".addslashes($facecode)."' ,now() ".$status." ) ";
 
 
-        if(in_array($item['status'],array(3,4,5,7))) {
-            //echo "update tb_user_face set fail=1,fail_time=now() where card = '".addslashes($uniqueCode)."' and facecode = '".addslashes($facecode)."'\n";
-            $db->query("update tb_user_face set fail=1,fail_time=now() where card = '".addslashes($uniqueCode)."' and facecode = '".addslashes($facecode)."'", 'SILENT');
-            $db->query("INSERT tb_face_error (dining_hall_id,channel_id,card,facecode,datetime,status) VALUES ( '".addslashes($diningHallId). "' , '".addslashes($channelId)."' , '".addslashes($card)."' , '".addslashes($facecode)."' , now() , ".$status." ) ");
+    if(in_array($item['status'],array(3,4,5,7))) {
+      //echo "update tb_user_face set fail=1,fail_time=now() where card = '".addslashes($uniqueCode)."' and facecode = '".addslashes($facecode)."'\n";
+      $db->query("update tb_user_face set fail=1,fail_time=now() where card = '".addslashes($uniqueCode)."' and facecode = '".addslashes($facecode)."'", 'SILENT');
+      $db->query("INSERT tb_face_error (dining_hall_id,channel_id,card,facecode,datetime,status) VALUES ( '".addslashes($diningHallId). "' , '".addslashes($channelId)."' , '".addslashes($card)."' , '".addslashes($facecode)."' , now() , ".$status." ) ");
 
-        }
     }
+  }
 
-    echo 'ok';
+  echo 'ok';
 
 }
 
 if($act == 'saveEmail'){
-    $user = check_token();
-    $email = trim(addslashes($_POST['email']));
+  $user = check_token();
+  $email = trim(addslashes($_POST['email']));
 
-    if(empty($email)){
-        echoRs(0, '邮箱不能为空');
-    }
-    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
-        echoRs(0, '请输入一个有效的邮箱');
-    }
+  if(empty($email)){
+    echoRs(0, '邮箱不能为空');
+  }
+  if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
+    echoRs(0, '请输入一个有效的邮箱');
+  }
 
-    $check = $db->get_one("select * from tb_privacy_download where user_id='{$user['id']}' and add_time BETWEEN CURRENT_DATE and DATE_ADD(CURRENT_DATE,INTERVAL 1 day)");
-    if($check){
-        echoRs(0, '你今天已经提交过。');
-    }
+  $check = $db->get_one("select * from tb_privacy_download where user_id='{$user['id']}' and add_time BETWEEN CURRENT_DATE and DATE_ADD(CURRENT_DATE,INTERVAL 1 day)");
+  if($check){
+    echoRs(0, '你今天已经提交过。');
+  }
 
-    $userInfo = $db->get_one("select * from tb_user where enabled in (1, -1) and id='{$user['id']}'");
-    if(empty($userInfo)){
-        echoRs(0, '用户不存在。');
-    }
+  $userInfo = $db->get_one("select * from tb_user where enabled in (1, -1) and id='{$user['id']}'");
+  if(empty($userInfo)){
+    echoRs(0, '用户不存在。');
+  }
 
-    $insert_id = $db->query("insert into tb_privacy_download set cellphone='{$userInfo['cellphone']}', username='{$userInfo['username']}', email='{$email}', is_send=0, add_time=now(), user_id='{$user['id']}'");
+  $insert_id = $db->query("insert into tb_privacy_download set cellphone='{$userInfo['cellphone']}', username='{$userInfo['username']}', email='{$email}', is_send=0, add_time=now(), user_id='{$user['id']}'");
 
-    if($insert_id){
-        echoRs(1, '提交成功');
-    }else{
-        echoRs(0, '提交失败');
-    }
+  if($insert_id){
+    echoRs(1, '提交成功');
+  }else{
+    echoRs(0, '提交失败');
+  }
 }