데모코드 : warapay.php
warapay.php
<?php
require_once 'config.php';
class warapay{
public $currency,$qrpay;
private $appid,$warapay_public_key,$app_private_key,$gatewayUrl,$queryUrl;
public function __construct() {
global $config;
foreach($config as $k=>$v){
if(trim($v)==''){
die('config.php field:'.$k.' NO Setting.');
}
}
$this->appid = $config['appid'];
$this->warapay_public_key=$config['warapay_public_key'];
$this->app_private_key=$config['app_private_key'];
$this->gatewayUrl=$config['gatewayUrl'];
$this->queryUrl=$config['queryUrl'];
}
// certificate signing
public function qrpay($data){
$data['appid']=$this->appid;
$data['version']='2.0';
$data['ip']=self::_get_client_ip();
$data['time']=time();
$data['return_url']=urlencode(self::_get_url());
ksort($data);
$data['sign']=self::rsa_sign($data);
$result=$this->_post($this->gatewayUrl, 500000, http_build_query($data));
$arr=json_decode($result,320);
if($arr['code']===0){
$param=$arr['data'];
$sign=$param['sign'];
unset($param['sign']);
ksort($param);
$result=self::rsa_sign(http_build_query($param),$sign,"CHECK");
if($result){
return $param;
}else{
return false;
}
}else{
die("request was fail");
}
}
// Query for checking
public function queryTrade($data){
$data['appid']=$this->appid;
$data['version']='2.0';
$data['time']=time();
ksort($data);
$data['sign']=self::rsa_sign($data);
$result=$this->_post($this->queryUrl, 500000, http_build_query($data));
$arr=json_decode($result,320);
if($arr['code']===0){
$param=$arr['data'];
$sign=$param['sign'];
unset($param['sign']);
ksort($param);
$result=self::rsa_sign(http_build_query($param),$sign,"CHECK");
if($result){
return $param;
}else{
return false;
}
}else{
die("request was fail");
}
}
// Check Signing
public function checkSign($data){
$sign=$data['sign'];
if($sign){
unset($data['sign']);
ksort($data);
if(self::rsa_sign(http_build_query($data),$sign,"CHECK")){
return $data;
}
}
return false;
}
final private function rsa_sign($string,$sign="",$type=""){
if($type!=="CHECK"){
///////////////////////////////warapay private signing////////////////////////
//$private_content=file_get_contents(private key file);
$private_key=openssl_pkey_get_private($this->app_private_key);
if(!$private_key) die('warapay_private_key is empty or error.');
$original_str=is_array($string)?http_build_query($string):$string;//original value
openssl_sign($original_str,$sign,$private_key);
openssl_free_key($private_key);
return base64_encode($sign);//after signing
}elseif($type==="CHECK"){
$sign=trim($sign);
if(!$sign) die('The signature string is empty');
///////////////////////////////warapay public signing////////////////////////
//$public_content=file_get_contents(publick key file);
$public_key=openssl_pkey_get_public($this->warapay_public_key);
if(!$public_key) die('app_public_key is empty or error.');
$sign=base64_decode($sign);//signing
$original_str=is_array($string)?http_build_query($string):$string;//after signing
$result=(bool)openssl_verify($original_str,$sign,$public_key);
openssl_free_key($public_key);
return $result;
}
}
public function currency(){
return $array=array(
"KER"=>"Korean Won(₩)",
/*"CNY"=>"人民币(¥)",
"VND"=>"VIỆT NAM ĐỒNG(₫)",
"USD"=>"Dollar($)",
"GBP"=>"Pound(£)",
"EUR"=>"Euro(€)",
"HKD"=>"港幣(HK$)",
"TWD"=>"新臺幣(NT$)",
"JPY"=>"円(JPY¥)",*/
);
}
/**
* request post
* @param string $url post URL
* @param int $limit limited of return length
* @param string $post post variables ( ex> username='dalarge'&password='123456' )
* @param string $cookie cookie ( ex> username='dalarge'&password='123456' )
* @param string $ip ip address
* @param int $timeout connected time
* @param bool $block blocking mode
* @return string return values
*/
private function _post($url, $limit = 0, $post = '', $cookie = '', $ip = '', $timeout = 15, $block = true) {
$return = '';
$matches = parse_url($url);
$host = $matches['host'];
$path = $matches['path'] ? $matches['path'].($matches['query'] ? '?'.$matches['query'] : '') : '/';
$port = !empty($matches['port']) ? $matches['port'] : 80;
$siteurl = $this->_get_url();
if($post) {
$out = "POST $path HTTP/1.1\r\n";
$out .= "Accept: */*\r\n";
$out .= "Referer: ".$siteurl."\r\n";
$out .= "Accept-Language: zh-cn\r\n";
$out .= "Content-Type: application/x-www-form-urlencoded\r\n";
$out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n";
$out .= "Host: $host\r\n" ;
$out .= 'Content-Length: '.strlen($post)."\r\n" ;
$out .= "Connection: Close\r\n" ;
$out .= "Cache-Control: no-cache\r\n" ;
$out .= "Cookie: $cookie\r\n\r\n" ;
$out .= $post ;
} else {
$out = "GET $path HTTP/1.1\r\n";
$out .= "Accept: */*\r\n";
$out .= "Referer: ".$siteurl."\r\n";
$out .= "Accept-Language: zh-cn\r\n";
$out .= "User-Agent: $_SERVER[HTTP_USER_AGENT]\r\n";
$out .= "Host: $host\r\n";
$out .= "Connection: Close\r\n";
$out .= "Cookie: $cookie\r\n\r\n";
}
$fp = @fsockopen(($ip ? $ip : $host), $port, $errno, $errstr, $timeout);
if(!$fp) return '';
stream_set_blocking($fp, $block);
stream_set_timeout($fp, $timeout);
@fwrite($fp, $out);
$status = stream_get_meta_data($fp);
if($status['timed_out']) return '';
while (!feof($fp)) {
if(($header = @fgets($fp)) && ($header == "\r\n" || $header == "\n")) break;
}
$stop = false;
while(!feof($fp) && !$stop) {
$data = fread($fp, ($limit == 0 || $limit > 8192 ? 8192 : $limit));
$return .= $data;
if($limit) {
$limit -= strlen($data);
$stop = $limit <= 0;
}
}
@fclose($fp);
$return_arr = explode("\n", $return);
if(isset($return_arr[1])) {
$return = trim($return_arr[1]);
}
unset($return_arr);
return $return;
}
/**
* get completed url
*/
private function _get_url() {
$sys_protocal = isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ? 'https://' : 'http://';
$php_self = $_SERVER['PHP_SELF'] ? $this->_safe_replace($_SERVER['PHP_SELF']) : $this->_safe_replace($_SERVER['SCRIPT_NAME']);
$path_info = isset($_SERVER['PATH_INFO']) ? $this->_safe_replace($_SERVER['PATH_INFO']) : '';
$relate_url = isset($_SERVER['REQUEST_URI']) ? $this->_safe_replace($_SERVER['REQUEST_URI']) : $php_self.(isset($_SERVER['QUERY_STRING']) ? '?'.$this->_safe_replace($_SERVER['QUERY_STRING']) : $path_info);
return $sys_protocal.(isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '').$relate_url;
}
/**
* replace strings for safety query
*
* @param $string
* @return string
*/
private function _safe_replace($string) {
$string = str_replace('%20','',$string);
$string = str_replace('%27','',$string);
$string = str_replace('%2527','',$string);
$string = str_replace('*','',$string);
$string = str_replace('"','"',$string);
$string = str_replace("'",'',$string);
$string = str_replace('"','',$string);
$string = str_replace(';','',$string);
$string = str_replace('<','<',$string);
$string = str_replace('>','>',$string);
$string = str_replace("{",'',$string);
$string = str_replace('}','',$string);
$string = str_replace('\\','',$string);
return $string;
}
private function _get_client_ip(){
$cip="unknown";
if($_SERVER['REMOTE_ADDR']){
$cip=$_SERVER['REMOTE_ADDR'];
}elseif(getenv('REMOTE_ADDR')){
$cip=$getenv['REMOTE_ADDR'];
}
return $cip;
}
function EXITJSON($array){
exit(json_encode($array));
}
}
Last updated