ZLW-PC\Administrator
7 years ago
12 changed files with 1613 additions and 13 deletions
-
31app/Common/Factory.php
-
172app/Common/RedisSession.php
-
19app/Common/ReturnData.php
-
889app/Common/WxComponent.php
-
4app/Common/aes/ReadMe.txt
-
40app/Common/aes/demo.php
-
35app/Common/aes/errorCode.php
-
166app/Common/aes/pkcs7Encoder.php
-
36app/Common/aes/sha1.php
-
150app/Common/aes/wxBizMsgCrypt.php
-
54app/Common/aes/xmlparse.php
-
30lqycms.sql
@ -0,0 +1,31 @@ |
|||
<?php |
|||
// +----------------------------------------------------------------------
|
|||
// | PHP设计模式-单例模式
|
|||
// | 单例模式解决的是如何在整个项目中创建唯一对象实例的问题
|
|||
// +----------------------------------------------------------------------
|
|||
namespace app\common\lib; |
|||
|
|||
class Factory |
|||
{ |
|||
private static $Factory; |
|||
|
|||
private function __construct() |
|||
{ |
|||
|
|||
} |
|||
|
|||
public static function getInstance($className, $options = null) |
|||
{ |
|||
if(!isset(self::$Factory[$className]) || !self::$Factory[$className]) |
|||
{ |
|||
self::$Factory[$className] = new $className($options); |
|||
} |
|||
|
|||
return self::$Factory[$className]; |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 示例 |
|||
* Factory::getInstance(\app\api\controller\Oauth::class); |
|||
*/ |
|||
@ -0,0 +1,172 @@ |
|||
<?php |
|||
namespace App\Common; |
|||
|
|||
//通过Redis实现Session共享
|
|||
class RedisSession |
|||
{ |
|||
/** |
|||
* 保存session的数据库表的信息 |
|||
*/ |
|||
private $_options = array( |
|||
'handler' => null, //数据库连接句柄
|
|||
'host' => null, |
|||
'port' => null, |
|||
'lifeTime' => null, |
|||
'prefix' => 'PHPREDIS_SESSION:' |
|||
); |
|||
|
|||
/** |
|||
* 构造函数 |
|||
* @param $options 设置信息数组 |
|||
*/ |
|||
public function __construct($options=array()) |
|||
{ |
|||
if(!class_exists("redis", false)){ |
|||
die("必须安装redis扩展"); |
|||
} |
|||
if(!isset($options['lifeTime']) || $options['lifeTime'] <= 0){ |
|||
$options['lifeTime'] = ini_get('session.gc_maxlifetime'); |
|||
} |
|||
$this->_options = array_merge($this->_options, $options); |
|||
} |
|||
|
|||
/** |
|||
* 开始使用该驱动的session |
|||
*/ |
|||
public function begin() |
|||
{ |
|||
if($this->_options['host'] === null || $this->_options['port'] === null || $this->_options['lifeTime'] === null) |
|||
{ |
|||
return false; |
|||
} |
|||
|
|||
//设置session处理函数
|
|||
session_set_save_handler( |
|||
array($this, 'open'), |
|||
array($this, 'close'), |
|||
array($this, 'read'), |
|||
array($this, 'write'), |
|||
array($this, 'destory'), |
|||
array($this, 'gc') |
|||
); |
|||
} |
|||
|
|||
/** |
|||
* 自动开始回话或者session_start()开始回话后第一个调用的函数 |
|||
* 类似于构造函数的作用 |
|||
* @param $savePath 默认的保存路径 |
|||
* @param $sessionName 默认的参数名，PHPSESSID |
|||
*/ |
|||
public function open($savePath, $sessionName) |
|||
{ |
|||
if(is_resource($this->_options['handler'])) return true; |
|||
//连接redis
|
|||
$redisHandle = new Redis(); |
|||
$redisHandle->connect($this->_options['host'], $this->_options['port']); |
|||
if(!$redisHandle){ |
|||
return false; |
|||
} |
|||
|
|||
$this->_options['handler'] = $redisHandle; |
|||
// $this->gc(null);
|
|||
return true; |
|||
} |
|||
|
|||
/** |
|||
* 类似于析构函数，在write之后调用或者session_write_close()函数之后调用 |
|||
*/ |
|||
public function close() |
|||
{ |
|||
return $this->_options['handler']->close(); |
|||
} |
|||
|
|||
/** |
|||
* 读取session信息 |
|||
* @param $sessionId 通过该Id唯一确定对应的session数据 |
|||
* @return session信息/空串 |
|||
*/ |
|||
public function read($sessionId) |
|||
{ |
|||
$sessionId = $this->_options['prefix'].$sessionId; |
|||
return $this->_options['handler']->get($sessionId); |
|||
} |
|||
|
|||
/** |
|||
* 写入或者修改session数据 |
|||
* @param $sessionId 要写入数据的session对应的id |
|||
* @param $sessionData 要写入的数据，已经序列化过了 |
|||
*/ |
|||
public function write($sessionId, $sessionData) |
|||
{ |
|||
$sessionId = $this->_options['prefix'].$sessionId; |
|||
return $this->_options['handler']->setex($sessionId, $this->_options['lifeTime'], $sessionData); |
|||
} |
|||
|
|||
/** |
|||
* 主动销毁session会话 |
|||
* @param $sessionId 要销毁的会话的唯一id |
|||
*/ |
|||
public function destory($sessionId) |
|||
{ |
|||
$sessionId = $this->_options['prefix'].$sessionId; |
|||
// $array = $this->print_stack_trace();
|
|||
// log::write($array);
|
|||
return $this->_options['handler']->delete($sessionId) >= 1 ? true : false; |
|||
} |
|||
|
|||
/** |
|||
* 清理绘画中的过期数据 |
|||
* @param 有效期 |
|||
*/ |
|||
public function gc($lifeTime) |
|||
{ |
|||
//获取所有sessionid，让过期的释放掉
|
|||
//$this->_options['handler']->keys("*");
|
|||
return true; |
|||
} |
|||
|
|||
//打印堆栈信息
|
|||
public function print_stack_trace() |
|||
{ |
|||
$array = debug_backtrace(); |
|||
//截取用户信息
|
|||
$var = $this->read(session_id()); |
|||
$s = strpos($var, "index_dk_user|"); |
|||
$e = strpos($var, "}authId|"); |
|||
$user = substr($var,$s+14,$e-13); |
|||
$user = unserialize($user); |
|||
//print_r($array);//信息很齐全
|
|||
unset ( $array [0] ); |
|||
|
|||
if(!empty($user)) |
|||
{ |
|||
$traceInfo = $user['id'].'|'.$user['user_name'].'|'.$user['user_phone'].'|'.$user['presona_name'].'++++++++++++++++\n'; |
|||
} |
|||
else |
|||
{ |
|||
$traceInfo = '++++++++++++++++\n'; |
|||
} |
|||
|
|||
$time = date ( "y-m-d H:i:m" ); |
|||
foreach ( $array as $t ) |
|||
{ |
|||
$traceInfo .= '[' . $time . '] ' . $t ['file'] . ' (' . $t ['line'] . ') '; |
|||
$traceInfo .= $t ['class'] . $t ['type'] . $t ['function'] . '('; |
|||
$traceInfo .= implode ( ', ', $t ['args'] ); |
|||
$traceInfo .= ")\n"; |
|||
} |
|||
|
|||
$traceInfo .= '++++++++++++++++'; |
|||
return $traceInfo; |
|||
} |
|||
} |
|||
|
|||
//-------------------------------------------
|
|||
//示例
|
|||
//入口处调用
|
|||
|
|||
/* $handler = new redisSession(array( |
|||
'host' => "127.0.0.1", |
|||
'port' => "6379" |
|||
)); |
|||
$handler->begin(); */ |
|||
@ -0,0 +1,889 @@ |
|||
<?php |
|||
namespace App\Common; |
|||
|
|||
if (!class_exists("WXBizMsgCrypt")) |
|||
{ |
|||
include_once "aes/wxBizMsgCrypt.php"; |
|||
} |
|||
|
|||
/** |
|||
* 微信第三方平台代小程序或者公众号 |
|||
*/ |
|||
class WxComponent |
|||
{ |
|||
const API_URL_PREFIX = 'https://api.weixin.qq.com/cgi-bin/component'; |
|||
const GET_ACCESS_TOKEN_URL = '/api_component_token'; |
|||
const GET_PREAUTHCODE_URL = '/api_create_preauthcode?component_access_token='; |
|||
const GET_WX_AUTH_INFO_URL = '/api_query_auth?component_access_token='; |
|||
const GET_WX_ACCESS_TOKEN_URL = '/api_authorizer_token?component_access_token='; |
|||
const GET_WX_ACCOUNT_INFO_URL = '/api_get_authorizer_info?component_access_token='; |
|||
const GET_WX_OPTION_INFO_URL = '/api_get_authorizer_option?component_access_token='; |
|||
const SET_WX_OPTION_INFO_URL = '/api_set_authorizer_option?component_access_token='; |
|||
const WX_AUTH_CB_URL = 'https://mp.weixin.qq.com/cgi-bin/componentloginpage?'; |
|||
|
|||
// 代公众号发起网页授权相关
|
|||
// 在{网页开发域名}或者下级域名 $APPID$.{网页开发域名} 的形式,可以代公众号发起网页授权。
|
|||
const OAUTH_PREFIX = 'https://open.weixin.qq.com/connect/oauth2'; |
|||
const OAUTH_AUTHORIZE_URL = '/authorize?'; |
|||
const API_BASE_URL_PREFIX = 'https://api.weixin.qq.com'; //以下API接口URL需要使用此前缀
|
|||
const OAUTH_TOKEN_URL = '/sns/oauth2/component/access_token?'; |
|||
const OAUTH_REFRESH_URL = '/sns/oauth2/component/refresh_token?'; |
|||
const OAUTH_USERINFO_URL = '/sns/userinfo?'; |
|||
const OAUTH_AUTH_URL = '/sns/auth?'; |
|||
// 代实现小程序
|
|||
const API_URL_PREFIX_MINI_PROGRAM = 'https://api.weixin.qq.com'; // 小程序
|
|||
const SET_DOMAIN = '/wxa/modify_domain'; |
|||
const BIND_TEST_USER = '/wxa/bind_tester'; // 绑定小程序体验者
|
|||
const UNBIND_TEST_USER = '/wxa/unbind_tester'; |
|||
const GET_DRAFT_TEMPLATE = '/wxa/gettemplatedraftlist'; |
|||
const AUDIT_DRAFT_TEMPLATE = '/wxa/addtotemplate'; |
|||
const TEMPLATE_LIST = '/wxa/gettemplatelist'; |
|||
const DELETE_TEMPLATE = '/wxa/deletetemplate'; |
|||
const UPLOAD_TEMPLATE = '/wxa/commit'; |
|||
const TEST_QR_CODE = '/wxa/get_qrcode'; |
|||
const GET_CATEGORY = '/wxa/get_category'; |
|||
const GET_PAGES = '/wxa/get_page'; |
|||
const AUDIT_TEMPLATE = '/wxa/submit_audit'; |
|||
const PUBLISH_TEMPLATE = '/wxa/release'; |
|||
const AUDIT_STATUS = '/wxa/get_auditstatus'; |
|||
|
|||
public $component_appid; |
|||
public $component_appsecret; |
|||
public $component_verify_ticket; |
|||
public $encodingAesKey = ""; |
|||
public $token = ""; |
|||
|
|||
public $debug = false; |
|||
public $errCode = 40001; |
|||
public $errMsg = "no access"; |
|||
private $_logcallback; |
|||
|
|||
/** |
|||
* 构造函数，填入配置信息 |
|||
* @param string $component_appid 平台appId |
|||
* @param string $component_appsecret 平台appsecret |
|||
* @param string $component_verify_ticket 平台票据，微信服务器定时推送过来 |
|||
* @param string $encodingAesKey 公众号消息加解密Key |
|||
* @param string $token 公众号消息校验Token |
|||
*/ |
|||
public function __construct($component_appid, $component_appsecret, $component_verify_ticket, $encodingAesKey, $token) |
|||
{ |
|||
$this->component_appid = $component_appid; |
|||
$this->component_appsecret = $component_appsecret; |
|||
$this->component_verify_ticket = $component_verify_ticket; |
|||
$this->encodingAesKey = $encodingAesKey; |
|||
$this->token = $token; |
|||
} |
|||
|
|||
/** |
|||
* @return mixed |
|||
*/ |
|||
public function getLogcallback() |
|||
{ |
|||
return $this->_logcallback; |
|||
} |
|||
|
|||
/** |
|||
* @param callable $logcallback |
|||
*/ |
|||
public function setLogcallback($logcallback) |
|||
{ |
|||
$this->_logcallback = $logcallback; |
|||
return $this; |
|||
} |
|||
|
|||
/** |
|||
* 设置新的票据 |
|||
* @param $component_verify_ticket |
|||
*/ |
|||
public function setComponentVerifyTicket($component_verify_ticket) |
|||
{ |
|||
$this->component_verify_ticket = $component_verify_ticket; |
|||
} |
|||
|
|||
/** |
|||
* 得到公众号服务授权的URL |
|||
* @param string $pre_auth_code |
|||
* @param string $redirect_uri |
|||
* @return string |
|||
*/ |
|||
public function getAuthCbUrl($pre_auth_code, $redirect_uri) |
|||
{ |
|||
return self::WX_AUTH_CB_URL . "component_appid=" . urlencode($this->component_appid) |
|||
. "&pre_auth_code=" . urlencode($pre_auth_code) . "&redirect_uri=" . urlencode($redirect_uri); |
|||
} |
|||
|
|||
/** |
|||
* 获得服务访问授权key |
|||
* @return bool|mixed { |
|||
* "component_access_token":"61W3mEpU66027wgNZ_MhGHNQDHnFATkDa9-2llqrMBjUwxRSNPbVsMmyD-yq8wZETSoE5NQgecigDrSHkPtIYA", |
|||
* "expires_in":7200 |
|||
* } |
|||
*/ |
|||
public function getAccessToken() |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, |
|||
'component_appsecret' => $this->component_appsecret, |
|||
'component_verify_ticket' => $this->component_verify_ticket, |
|||
); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_ACCESS_TOKEN_URL, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 获得预授权码 |
|||
* @param $access_token |
|||
* @return bool|mixed{ |
|||
* "pre_auth_code":"Cx_Dk6qiBE0Dmx4EmlT3oRfArPvwSQ-oa3NL_fwHM7VI08r52wazoZX2Rhpz1dEw", |
|||
* "expires_in":600 |
|||
* } |
|||
*/ |
|||
public function getPreauthCode($access_token) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_PREAUTHCODE_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 使用授权码换取公众号的授权信息 |
|||
* @param $access_token |
|||
* @param $auth_code |
|||
* @return bool|mixed{ "authorization_info": { |
|||
* "authorizer_appid": "wxf8b4f85f3a794e77", |
|||
* "authorizer_access_token": "QXjUqNqfYVH0yBE1iI_7vuN_9gQbpjfK7hYwJ3P7xOa88a89-Aga5x1NMYJyB8G2yKt1KCl0nPC3W9GJzw0Zzq_dBxc8pxIGUNi_bFes0qM", |
|||
* "expires_in": 7200, |
|||
* "authorizer_refresh_token": "dTo-YCXPL4llX-u1W1pPpnp8Hgm4wpJtlR6iV0doKdY", |
|||
* "func_info": [{ "funcscope_category": { "id": 1 } }, |
|||
* {"funcscope_category": {"id": 2 }}, |
|||
* {"funcscope_category": {"id": 3}}] |
|||
* } |
|||
*/ |
|||
public function getWxAuthInfo($access_token, $auth_code) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, 'authorization_code' => $auth_code); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_WX_AUTH_INFO_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->log('test--------------' . $result); |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 获取（刷新）授权公众号的令牌 |
|||
* @param $access_token |
|||
* @param $authorizer_appid |
|||
* @param $authorizer_refresh_token |
|||
* @return bool|mixed { |
|||
* "authorizer_access_token": "aaUl5s6kAByLwgV0BhXNuIFFUqfrR8vTATsoSHukcIGqJgrc4KmMJ-JlKoC_-NKCLBvuU1cWPv4vDcLN8Z0pn5I45mpATruU0b51hzeT1f8", |
|||
* "expires_in": 7200, |
|||
* "authorizer_refresh_token": "BstnRqgTJBXb9N2aJq6L5hzfJwP406tpfahQeLNxX0w" |
|||
* } |
|||
*/ |
|||
public function getWxAccessToken($access_token, $authorizer_appid, $authorizer_refresh_token) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, |
|||
'authorizer_appid' => $authorizer_appid, |
|||
'authorizer_refresh_token' => $authorizer_refresh_token); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_WX_ACCESS_TOKEN_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 获取授权方的账户信息 |
|||
* @param $access_token |
|||
* @param $authorizer_appid |
|||
* @return bool|mixed {"authorizer_info": { |
|||
* "nick_name": "微信SDK Demo Special", |
|||
* "head_img": "http://wx.qlogo.cn/mmopen/GPyw0pGicibl5Eda4GmSSbTguhjg9LZjumHmVjybjiaQXnE9XrXEts6ny9Uv4Fk6hOScWRDibq1fI0WOkSaAjaecNTict3n6EjJaC/0", |
|||
* "service_type_info": { "id": 2 }, |
|||
* "verify_type_info": { "id": 0 }, |
|||
* "user_name":"gh_eb5e3a772040", |
|||
* "alias":"paytest01" |
|||
* }, |
|||
* "authorization_info": { |
|||
* "appid": "wxf8b4f85f3a794e77", |
|||
* "func_info": [ { "funcscope_category": { "id": 1 } }, { "funcscope_category": { "id": 2 } }, { "funcscope_category": { "id": 3 } }] |
|||
* }} |
|||
*/ |
|||
public function getWxAccountInfo($access_token, $authorizer_appid) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, |
|||
'authorizer_appid' => $authorizer_appid); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_WX_ACCOUNT_INFO_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->log('test###--------------' . $result); |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 获取授权方的选项信息 |
|||
* @param $access_token |
|||
* @param $authorizer_appid |
|||
* @param $option_name |
|||
* @return bool|mixed { "authorizer_appid":"wx7bc5ba58cabd00f4", |
|||
* "option_name":"voice_recognize", |
|||
* "option_value":"1" } |
|||
*/ |
|||
public function getWxOptionInfo($access_token, $authorizer_appid, $option_name) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, |
|||
'authorizer_appid' => $authorizer_appid, |
|||
'option_name' => $option_name); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::GET_WX_OPTION_INFO_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 设置授权方的选项信息 |
|||
* @param $access_token |
|||
* @param $authorizer_appid |
|||
* @param $option_name |
|||
* @param $option_value |
|||
* @return bool|mixed { "errcode":0, "errmsg":"ok" } |
|||
*/ |
|||
public function setWxOptionInfo($access_token, $authorizer_appid, $option_name, $option_value) |
|||
{ |
|||
$arr = array('component_appid' => $this->component_appid, |
|||
'authorizer_appid' => $authorizer_appid, |
|||
'option_name' => $option_name, |
|||
'option_value' => $option_value); |
|||
$result = $this->httpPost(self::API_URL_PREFIX . self::SET_WX_OPTION_INFO_URL . $access_token, json_encode($arr)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || $json['errcode'] > 0) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 处理component_verify_ticket |
|||
* |
|||
*/ |
|||
|
|||
/** |
|||
* @return array|bool |
|||
* <xml> |
|||
* <AppId> </AppId> |
|||
* <CreateTime>1413192605 </CreateTime> |
|||
* <InfoType> </InfoType> |
|||
* <ComponentVerifyTicket> </ComponentVerifyTicket> |
|||
* </xml> |
|||
*/ |
|||
public function processEventNotify($raw = '') |
|||
{ |
|||
if ($_SERVER['REQUEST_METHOD'] == "POST") { |
|||
$dec_msg = ""; |
|||
|
|||
$postStr = $raw ?? file_get_contents("php://input"); |
|||
if (!$postStr) { |
|||
$postStr = $GLOBALS['HTTP_RAW_POST_DATA']; |
|||
} |
|||
|
|||
if (!$postStr) { |
|||
return false; |
|||
} |
|||
|
|||
$pc = new \WXBizMsgCrypt($this->token, $this->encodingAesKey, $this->component_appid); |
|||
$ret = $pc->decryptMsg($_GET['msg_signature'], $_GET['timestamp'], $_GET['nonce'], $postStr, $dec_msg); |
|||
if ($ret === 0) { |
|||
$arr = (array) simplexml_load_string($dec_msg, 'SimpleXMLElement', LIBXML_NOCDATA); |
|||
return $arr; |
|||
} else { |
|||
return false; |
|||
} |
|||
} else { |
|||
return false; |
|||
} |
|||
} |
|||
|
|||
public function responseEvent() |
|||
{ |
|||
die("success"); |
|||
} |
|||
|
|||
/** |
|||
* 代公众号发起网页授权 oauth 授权跳转接口 |
|||
* @param string $appid 公众号appId |
|||
* @param string $callback 跳转URL |
|||
* @param string $state 状态信息，最多128字节 |
|||
* @param string $scope 授权作用域 snsapi_base或者snsapi_userinfo 或者 snsapi_base,snsapi_userinfo |
|||
* @return string |
|||
*/ |
|||
public function getOauthRedirect($appid, $callback, $state = '', $scope = 'snsapi_base') |
|||
{ |
|||
return self::OAUTH_PREFIX . self::OAUTH_AUTHORIZE_URL . 'appid=' . $appid . '&redirect_uri=' . urlencode($callback) . |
|||
'&response_type=code&scope=' . $scope . '&state=' . $state . '&component_appid=' . urlencode($this->component_appid) |
|||
. '#wechat_redirect'; |
|||
} |
|||
|
|||
/** |
|||
* 代公众号发起网页授权 回调URL时，通过code获取Access Token |
|||
* @return array|boolean {access_token,expires_in,refresh_token,openid,scope} |
|||
*/ |
|||
public function getOauthAccessToken($appid, $component_access_token) |
|||
{ |
|||
$code = isset($_GET['code']) ? $_GET['code'] : ''; |
|||
if (!$code) { |
|||
return false; |
|||
} |
|||
|
|||
$result = $this->httpPost(self::API_BASE_URL_PREFIX . self::OAUTH_TOKEN_URL . 'appid=' . $appid |
|||
. '&code=' . $code . '&grant_type=authorization_code' |
|||
. '&component_appid=' . urlencode($this->component_appid) |
|||
. '&component_access_token=' . $component_access_token); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 代公众号发起网页授权 刷新access token并续期 |
|||
* @param string $refresh_token |
|||
* @return boolean|mixed |
|||
*/ |
|||
public function getOauthRefreshToken($appId, $refresh_token, $component_access_token) |
|||
{ |
|||
$result = $this->httpPost(self::API_BASE_URL_PREFIX . self::OAUTH_REFRESH_URL |
|||
. 'appid=' . $appId . '&grant_type=refresh_token&refresh_token=' . $refresh_token |
|||
. '&component_appid=' . urlencode($this->component_appid) |
|||
. '&component_access_token=' . $component_access_token |
|||
); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 获取授权后的用户资料 |
|||
* @param string $access_token |
|||
* @param string $openid |
|||
* @return array|boolean {openid,nickname,sex,province,city,country,headimgurl,privilege,[unionid]} |
|||
* 注意：unionid字段 只有在用户将公众号绑定到微信开放平台账号后，才会出现。建议调用前用isset()检测一下 |
|||
*/ |
|||
public function getOauthUserinfo($access_token, $openid) |
|||
{ |
|||
$result = $this->httpPost(self::API_BASE_URL_PREFIX . self::OAUTH_USERINFO_URL . 'access_token=' . $access_token . '&openid=' . $openid); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
/** |
|||
* 检验授权凭证是否有效 |
|||
* @param string $access_token |
|||
* @param string $openid |
|||
* @return boolean 是否有效 |
|||
*/ |
|||
public function getOauthAuth($access_token, $openid) |
|||
{ |
|||
$result = $this->httpPost(self::API_BASE_URL_PREFIX . self::OAUTH_AUTH_URL . 'access_token=' . $access_token . '&openid=' . $openid); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
|
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function setMiniProgramDomain($appID, $params, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::SET_DOMAIN . '?access_token=' . $accessToken, json_encode($params)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function uploadTemplate($params, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::UPLOAD_TEMPLATE . '?access_token=' . $accessToken, json_encode($params, JSON_UNESCAPED_UNICODE)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function getDraftTemplateList($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::GET_DRAFT_TEMPLATE . '?access_token=' . $accessToken, ''); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function getTemplateList($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::TEMPLATE_LIST . '?access_token=' . $accessToken, ''); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function auditDraftTemplate($accessToken, $draftID) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::AUDIT_DRAFT_TEMPLATE . '?access_token=' . $accessToken, json_encode(['draft_id' => $draftID])); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function deleteTemplate($accessToken, $templateID) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::DELETE_TEMPLATE . '?access_token=' . $accessToken, json_encode(['template_id' => $templateID])); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function getQrCode($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::TEST_QR_CODE . '?access_token=' . $accessToken, ''); |
|||
if ($result) { |
|||
return $result; // 图片二进制流
|
|||
} |
|||
return false; |
|||
} |
|||
public function getCategory($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::GET_CATEGORY . '?access_token=' . $accessToken, ''); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function getPages($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::GET_PAGES . '?access_token=' . $accessToken, ''); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
return $json; |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function auditTemplate($params, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::AUDIT_TEMPLATE . '?access_token=' . $accessToken, json_encode($params, JSON_UNESCAPED_UNICODE)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return $json; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function bindTestUser($params, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::BIND_TEST_USER . '?access_token=' . $accessToken, json_encode($params)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function unbindTestUser($params, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::UNBIND_TEST_USER . '?access_token=' . $accessToken, json_encode($params)); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function publishTemplate($accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::PUBLISH_TEMPLATE . '?access_token=' . $accessToken, json_encode(new stdClass())); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return true; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
public function getAuditStatus($auditid, $accessToken) |
|||
{ |
|||
$result = $this->httpPost(static::API_URL_PREFIX_MINI_PROGRAM . static::AUDIT_STATUS . '?access_token=' . $accessToken, json_encode(['auditid' => $auditid])); |
|||
if ($result) { |
|||
$json = json_decode($result, true); |
|||
if (!$json || !empty($json['errcode'])) { |
|||
$this->errCode = $json['errcode']; |
|||
$this->errMsg = $json['errmsg']; |
|||
return false; |
|||
} else { |
|||
if ($json['errcode'] == 0) { |
|||
return $json; |
|||
} |
|||
} |
|||
} |
|||
return false; |
|||
} |
|||
|
|||
protected function log($log) |
|||
{ |
|||
if ($this->debug && is_callable($this->_logcallback)) { |
|||
if (is_array($log)) { |
|||
$log = print_r($log, true); |
|||
} |
|||
|
|||
return call_user_func($this->_logcallback, $log); |
|||
} |
|||
return true; |
|||
} |
|||
|
|||
/** |
|||
* POST 请求 |
|||
* @param string $url |
|||
* @param string|array $param |
|||
* @param boolean $post_file 是否文件上传 |
|||
* @return string content |
|||
*/ |
|||
private function httpPost($url, $param = "", $post_file = false) |
|||
{ |
|||
$oCurl = curl_init(); |
|||
if (stripos($url, "https://") !== false) { |
|||
curl_setopt($oCurl, CURLOPT_SSL_VERIFYPEER, false); |
|||
curl_setopt($oCurl, CURLOPT_SSL_VERIFYHOST, false); |
|||
curl_setopt($oCurl, CURLOPT_SSLVERSION, 1); //CURL_SSLVERSION_TLSv1
|
|||
} |
|||
if (is_string($param) || $post_file) { |
|||
$strPOST = $param; |
|||
} else { |
|||
$aPOST = array(); |
|||
foreach ($param as $key => $val) { |
|||
if (is_array($val)) { |
|||
foreach ($val as $_k => $_v) { |
|||
$aPOST[] = $key . "[]=" . urlencode($_v); |
|||
} |
|||
} else { |
|||
$aPOST[] = $key . "=" . urlencode($val); |
|||
} |
|||
} |
|||
$strPOST = join("&", $aPOST); |
|||
} |
|||
curl_setopt($oCurl, CURLOPT_URL, $url); |
|||
curl_setopt($oCurl, CURLOPT_RETURNTRANSFER, 1); |
|||
if ($strPOST != "") { |
|||
curl_setopt($oCurl, CURLOPT_POST, true); |
|||
curl_setopt($oCurl, CURLOPT_POSTFIELDS, $strPOST); |
|||
} |
|||
$sContent = curl_exec($oCurl); |
|||
$aStatus = curl_getinfo($oCurl); |
|||
curl_close($oCurl); |
|||
if (intval($aStatus["http_code"]) == 200) { |
|||
$this->log("wxcomponent httpPost: {$strPOST} recv:" . $sContent); |
|||
return $sContent; |
|||
} else { |
|||
$this->log("wxcomponent httpPost: {$strPOST} recv error {$url}, param:{$param} aStatus:" . print_r($aStatus, true)); |
|||
return false; |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 微信api不支持中文转义的json结构 |
|||
* @param array $arr |
|||
*/ |
|||
public static function jsonEncode($arr) |
|||
{ |
|||
$parts = array(); |
|||
$is_list = false; |
|||
//Find out if the given array is a numerical array
|
|||
$keys = array_keys($arr); |
|||
$max_length = count($arr) - 1; |
|||
if (($keys[0] === 0) && ($keys[$max_length] === $max_length)) { //See if the first key is 0 and last key is length - 1
|
|||
$is_list = true; |
|||
for ($i = 0; $i < count($keys); $i++) { //See if each key correspondes to its position
|
|||
if ($i != $keys[$i]) { //A key fails at position check.
|
|||
$is_list = false; //It is an associative array.
|
|||
break; |
|||
} |
|||
} |
|||
} |
|||
foreach ($arr as $key => $value) { |
|||
if (is_array($value)) { //Custom handling for arrays
|
|||
if ($is_list) { |
|||
$parts[] = self::jsonEncode($value); |
|||
} |
|||
/* :RECURSION: */ |
|||
else { |
|||
$parts[] = '"' . $key . '":' . self::jsonEncode($value); |
|||
} |
|||
/* :RECURSION: */ |
|||
} else { |
|||
$str = ''; |
|||
if (!$is_list) { |
|||
$str = '"' . $key . '":'; |
|||
} |
|||
|
|||
//Custom handling for multiple data types
|
|||
if (!is_string($value) && is_numeric($value) && $value < 2000000000) { |
|||
$str .= $value; |
|||
} |
|||
//Numbers
|
|||
elseif ($value === false) { |
|||
$str .= 'false'; |
|||
} |
|||
//The booleans
|
|||
elseif ($value === true) { |
|||
$str .= 'true'; |
|||
} else { |
|||
$str .= '"' . addslashes($value) . '"'; |
|||
} |
|||
//All other things
|
|||
// :TODO: Is there any more datatype we should be in the lookout for? (Object?)
|
|||
$parts[] = $str; |
|||
} |
|||
} |
|||
$json = implode(',', $parts); |
|||
if ($is_list) { |
|||
return '[' . $json . ']'; |
|||
} |
|||
//Return numerical JSON
|
|||
return '{' . $json . '}'; //Return associative JSON
|
|||
} |
|||
|
|||
/** |
|||
* 获取微信授权链接 |
|||
* |
|||
* @param string $redirect_uri 回调地址，授权后重定向的回调链接地址，请使用urlEncode对链接进行处理 |
|||
* @param mixed $state 可以为空，重定向后会带上state参数，开发者可以填写a-zA-Z0-9的参数值，最多128字节 |
|||
*/ |
|||
public function get_authorize_url($redirect_uri = '', $state = '') |
|||
{ |
|||
return "https://open.weixin.qq.com/connect/oauth2/authorize?appid=".$this->app_id."&redirect_uri=".urlencode($redirect_uri)."&response_type=code&scope=snsapi_userinfo&state=".$state."#wechat_redirect"; |
|||
} |
|||
|
|||
/** |
|||
* 微信PC扫码授权登录链接 |
|||
* |
|||
* @param string $redirect_uri 回调地址，授权后重定向的回调链接地址，请使用urlEncode对链接进行处理 |
|||
* @param mixed $state 可以为空，重定向后会带上state参数，开发者可以填写a-zA-Z0-9的参数值，最多128字节 |
|||
*/ |
|||
public function get_qrconnect_url($redirect_uri = '', $state = '') |
|||
{ |
|||
return "https://open.weixin.qq.com/connect/qrconnect?appid".$this->app_id."&redirect_uri=".urlencode($redirect_uri)."&response_type=code&scope=snsapi_login&state=".$state."#wechat_redirect"; |
|||
} |
|||
|
|||
/** |
|||
* 获取授权token |
|||
* |
|||
* @param string $code 通过get_authorize_url获取到的code |
|||
*/ |
|||
public function get_access_token($code = '') |
|||
{ |
|||
$token_url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid={$this->app_id}&secret={$this->app_secret}&code={$code}&grant_type=authorization_code"; |
|||
$token_data = $this->http($token_url); |
|||
|
|||
return json_decode($token_data, true); |
|||
} |
|||
|
|||
/** |
|||
* 获取授权后的微信用户信息 |
|||
* |
|||
* @param string $access_token |
|||
* @param string $open_id |
|||
*/ |
|||
public function get_user_info($access_token = '', $open_id = '') |
|||
{ |
|||
$info_url = "https://api.weixin.qq.com/sns/userinfo?access_token={$access_token}&openid={$open_id}&lang=zh_CN"; |
|||
$info_data = $this->http($info_url); |
|||
|
|||
return json_decode($info_data, true); |
|||
} |
|||
|
|||
/** |
|||
* 获取用户基本信息（包括UnionID机制） |
|||
* |
|||
* @param string $access_token |
|||
* @param string $open_id |
|||
*/ |
|||
public function get_user_unionid($access_token = '', $open_id = '') |
|||
{ |
|||
$info_url = "https://api.weixin.qq.com/cgi-bin/user/info?access_token={$access_token}&openid={$open_id}&lang=zh_CN"; |
|||
$info_data = $this->http($info_url); |
|||
|
|||
return json_decode($info_data, true); |
|||
} |
|||
|
|||
// cURL函数简单封装
|
|||
public function http($url, $data = null) |
|||
{ |
|||
$curl = curl_init(); |
|||
curl_setopt($curl, CURLOPT_URL, $url); |
|||
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE); |
|||
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE); |
|||
|
|||
if (!empty($data)) |
|||
{ |
|||
curl_setopt($curl, CURLOPT_POST, 1); |
|||
curl_setopt($curl, CURLOPT_POSTFIELDS, $data); |
|||
} |
|||
|
|||
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); |
|||
$output = curl_exec($curl); |
|||
curl_close($curl); |
|||
|
|||
return $output; |
|||
} |
|||
} |
|||
@ -0,0 +1,4 @@ |
|||
注意事项： |
|||
1.WXBizMsgCrypt.php文件提供了WXBizMsgCrypt类的实现，是用户接入企业微信的接口类。Sample.php提供了示例以供开发者参考。errorCode.php, pkcs7Encoder.php, sha1.php, xmlparse.php文件是实现这个类的辅助类，开发者无须关心其具体实现。 |
|||
2.WXBizMsgCrypt类封装了 DecryptMsg, EncryptMsg两个接口，分别用于开发者解密以及开发者回复消息的加密。使用方法可以参考Sample.php文件。 |
|||
3.加解密协议请参考微信公众平台官方文档。 |
|||
@ -0,0 +1,40 @@ |
|||
<?php |
|||
|
|||
include_once "wxBizMsgCrypt.php"; |
|||
|
|||
// 第三方发送消息给公众平台
|
|||
$encodingAesKey = "abcdefghijklmnopqrstuvwxyz0123456789ABCDEFG"; |
|||
$token = "pamtest"; |
|||
$timeStamp = "1409304348"; |
|||
$nonce = "xxxxxx"; |
|||
$appId = "wxb11529c136998cb6"; |
|||
$text = "<xml><ToUserName><![CDATA[oia2Tj我是中文jewbmiOUlr6X-1crbLOvLw]]></ToUserName><FromUserName><![CDATA[gh_7f083739789a]]></FromUserName><CreateTime>1407743423</CreateTime><MsgType><![CDATA[video]]></MsgType><Video><MediaId><![CDATA[eYJ1MbwPRJtOvIEabaxHs7TX2D-HV71s79GUxqdUkjm6Gs2Ed1KF3ulAOA9H1xG0]]></MediaId><Title><![CDATA[testCallBackReplyVideo]]></Title><Description><![CDATA[testCallBackReplyVideo]]></Description></Video></xml>"; |
|||
|
|||
|
|||
$pc = new WXBizMsgCrypt($token, $encodingAesKey, $appId); |
|||
$encryptMsg = ''; |
|||
$errCode = $pc->encryptMsg($text, $timeStamp, $nonce, $encryptMsg); |
|||
if ($errCode == 0) { |
|||
print("加密后: " . $encryptMsg . "\n"); |
|||
} else { |
|||
print($errCode . "\n"); |
|||
} |
|||
|
|||
$xml_tree = new DOMDocument(); |
|||
$xml_tree->loadXML($encryptMsg); |
|||
$array_e = $xml_tree->getElementsByTagName('Encrypt'); |
|||
$array_s = $xml_tree->getElementsByTagName('MsgSignature'); |
|||
$encrypt = $array_e->item(0)->nodeValue; |
|||
$msg_sign = $array_s->item(0)->nodeValue; |
|||
|
|||
$format = "<xml><ToUserName><![CDATA[toUser]]></ToUserName><Encrypt><![CDATA[%s]]></Encrypt></xml>"; |
|||
$from_xml = sprintf($format, $encrypt); |
|||
|
|||
// 第三方收到公众号平台发送的消息
|
|||
$msg = ''; |
|||
$errCode = $pc->decryptMsg($msg_sign, $timeStamp, $nonce, $from_xml, $msg); |
|||
if ($errCode == 0) { |
|||
print("解密后: " . $msg . "\n"); |
|||
} else { |
|||
print($errCode . "\n"); |
|||
} |
|||
@ -0,0 +1,35 @@ |
|||
<?php |
|||
|
|||
/** |
|||
* error code 说明. |
|||
* <ul> |
|||
* <li>-40001: 签名验证错误</li> |
|||
* <li>-40002: xml解析失败</li> |
|||
* <li>-40003: sha加密生成签名失败</li> |
|||
* <li>-40004: encodingAesKey 非法</li> |
|||
* <li>-40005: appid 校验错误</li> |
|||
* <li>-40006: aes 加密失败</li> |
|||
* <li>-40007: aes 解密失败</li> |
|||
* <li>-40008: 解密后得到的buffer非法</li> |
|||
* <li>-40009: base64加密失败</li> |
|||
* <li>-40010: base64解密失败</li> |
|||
* <li>-40011: 生成xml失败</li> |
|||
* </ul> |
|||
*/ |
|||
class ErrorCode |
|||
{ |
|||
public static $OK = 0; |
|||
public static $ValidateSignatureError = -40001; |
|||
public static $ParseXmlError = -40002; |
|||
public static $ComputeSignatureError = -40003; |
|||
public static $IllegalAesKey = -40004; |
|||
public static $ValidateAppidError = -40005; |
|||
public static $EncryptAESError = -40006; |
|||
public static $DecryptAESError = -40007; |
|||
public static $IllegalBuffer = -40008; |
|||
public static $EncodeBase64Error = -40009; |
|||
public static $DecodeBase64Error = -40010; |
|||
public static $GenReturnXmlError = -40011; |
|||
} |
|||
|
|||
?>
|
|||
@ -0,0 +1,166 @@ |
|||
<?php |
|||
|
|||
include_once "errorCode.php"; |
|||
|
|||
/** |
|||
* PKCS7Encoder class |
|||
* |
|||
* 提供基于PKCS7算法的加解密接口. |
|||
*/ |
|||
class PKCS7Encoder |
|||
{ |
|||
public static $block_size = 32; |
|||
|
|||
/** |
|||
* 对需要加密的明文进行填充补位 |
|||
* @param $text 需要进行填充补位操作的明文 |
|||
* @return 补齐明文字符串 |
|||
*/ |
|||
function encode($text) |
|||
{ |
|||
$block_size = PKCS7Encoder::$block_size; |
|||
$text_length = strlen($text); |
|||
//计算需要填充的位数
|
|||
$amount_to_pad = PKCS7Encoder::$block_size - ($text_length % PKCS7Encoder::$block_size); |
|||
if ($amount_to_pad == 0) { |
|||
$amount_to_pad = PKCS7Encoder::block_size; |
|||
} |
|||
//获得补位所用的字符
|
|||
$pad_chr = chr($amount_to_pad); |
|||
$tmp = ""; |
|||
for ($index = 0; $index < $amount_to_pad; $index++) { |
|||
$tmp .= $pad_chr; |
|||
} |
|||
return $text . $tmp; |
|||
} |
|||
|
|||
/** |
|||
* 对解密后的明文进行补位删除 |
|||
* @param decrypted 解密后的明文 |
|||
* @return 删除填充补位后的明文 |
|||
*/ |
|||
function decode($text) |
|||
{ |
|||
|
|||
$pad = ord(substr($text, -1)); |
|||
if ($pad < 1 || $pad > 32) { |
|||
$pad = 0; |
|||
} |
|||
return substr($text, 0, (strlen($text) - $pad)); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* Prpcrypt class |
|||
* |
|||
* 提供接收和推送给公众平台消息的加解密接口. |
|||
*/ |
|||
class Prpcrypt |
|||
{ |
|||
public $key; |
|||
|
|||
function __construct($k) |
|||
{ |
|||
$this->key = base64_decode($k . "="); |
|||
} |
|||
|
|||
/** |
|||
* 对明文进行加密 |
|||
* @param string $text 需要加密的明文 |
|||
* @return string 加密后的密文 |
|||
*/ |
|||
public function encrypt($text, $appid) |
|||
{ |
|||
|
|||
try { |
|||
//获得16位随机字符串，填充到明文之前
|
|||
$random = $this->getRandomStr(); |
|||
$text = $random . pack("N", strlen($text)) . $text . $appid; |
|||
// 网络字节序
|
|||
$size = mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC); |
|||
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, ''); |
|||
$iv = substr($this->key, 0, 16); |
|||
//使用自定义的填充方式对明文进行补位填充
|
|||
$pkc_encoder = new PKCS7Encoder; |
|||
$text = $pkc_encoder->encode($text); |
|||
mcrypt_generic_init($module, $this->key, $iv); |
|||
//加密
|
|||
$encrypted = mcrypt_generic($module, $text); |
|||
mcrypt_generic_deinit($module); |
|||
mcrypt_module_close($module); |
|||
|
|||
//print(base64_encode($encrypted));
|
|||
//使用BASE64对加密后的字符串进行编码
|
|||
return array(ErrorCode::$OK, base64_encode($encrypted)); |
|||
} catch (Exception $e) { |
|||
//print $e;
|
|||
return array(ErrorCode::$EncryptAESError, null); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 对密文进行解密 |
|||
* @param string $encrypted 需要解密的密文 |
|||
* @return string 解密得到的明文 |
|||
*/ |
|||
public function decrypt($encrypted, $appid) |
|||
{ |
|||
|
|||
try { |
|||
//使用BASE64对需要解密的字符串进行解码
|
|||
$ciphertext_dec = base64_decode($encrypted); |
|||
$module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, ''); |
|||
$iv = substr($this->key, 0, 16); |
|||
mcrypt_generic_init($module, $this->key, $iv); |
|||
|
|||
//解密
|
|||
$decrypted = mdecrypt_generic($module, $ciphertext_dec); |
|||
mcrypt_generic_deinit($module); |
|||
mcrypt_module_close($module); |
|||
} catch (Exception $e) { |
|||
return array(ErrorCode::$DecryptAESError, null); |
|||
} |
|||
|
|||
|
|||
try { |
|||
//去除补位字符
|
|||
$pkc_encoder = new PKCS7Encoder; |
|||
$result = $pkc_encoder->decode($decrypted); |
|||
//去除16位随机字符串,网络字节序和AppId
|
|||
if (strlen($result) < 16) |
|||
return ""; |
|||
$content = substr($result, 16, strlen($result)); |
|||
$len_list = unpack("N", substr($content, 0, 4)); |
|||
$xml_len = $len_list[1]; |
|||
$xml_content = substr($content, 4, $xml_len); |
|||
$from_appid = substr($content, $xml_len + 4); |
|||
} catch (Exception $e) { |
|||
//print $e;
|
|||
return array(ErrorCode::$IllegalBuffer, null); |
|||
} |
|||
if ($from_appid != $appid) |
|||
return array(ErrorCode::$ValidateAppidError, null); |
|||
return array(0, $xml_content); |
|||
|
|||
} |
|||
|
|||
|
|||
/** |
|||
* 随机生成16位字符串 |
|||
* @return string 生成的字符串 |
|||
*/ |
|||
function getRandomStr() |
|||
{ |
|||
|
|||
$str = ""; |
|||
$str_pol = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz"; |
|||
$max = strlen($str_pol) - 1; |
|||
for ($i = 0; $i < 16; $i++) { |
|||
$str .= $str_pol[mt_rand(0, $max)]; |
|||
} |
|||
return $str; |
|||
} |
|||
|
|||
} |
|||
|
|||
?>
|
|||
@ -0,0 +1,36 @@ |
|||
<?php |
|||
|
|||
include_once "errorCode.php"; |
|||
|
|||
/** |
|||
* SHA1 class |
|||
* |
|||
* 计算公众平台的消息签名接口. |
|||
*/ |
|||
class SHA1 |
|||
{ |
|||
/** |
|||
* 用SHA1算法生成安全签名 |
|||
* @param string $token 票据 |
|||
* @param string $timestamp 时间戳 |
|||
* @param string $nonce 随机字符串 |
|||
* @param string $encrypt 密文消息 |
|||
*/ |
|||
public function getSHA1($token, $timestamp, $nonce, $encrypt_msg) |
|||
{ |
|||
//排序
|
|||
try { |
|||
$array = array($encrypt_msg, $token, $timestamp, $nonce); |
|||
sort($array, SORT_STRING); |
|||
$str = implode($array); |
|||
return array(ErrorCode::$OK, sha1($str)); |
|||
} catch (Exception $e) { |
|||
//print $e . "\n";
|
|||
return array(ErrorCode::$ComputeSignatureError, null); |
|||
} |
|||
} |
|||
|
|||
} |
|||
|
|||
|
|||
?>
|
|||
@ -0,0 +1,150 @@ |
|||
<?php |
|||
|
|||
/** |
|||
* 对公众平台发送给公众账号的消息加解密示例代码. |
|||
* |
|||
* @copyright Copyright (c) 1998-2014 Tencent Inc. |
|||
*/ |
|||
|
|||
|
|||
include_once "sha1.php"; |
|||
include_once "xmlparse.php"; |
|||
include_once "pkcs7Encoder.php"; |
|||
include_once "errorCode.php"; |
|||
|
|||
/** |
|||
* 1.第三方回复加密消息给公众平台； |
|||
* 2.第三方收到公众平台发送的消息，验证消息的安全性，并对消息进行解密。 |
|||
*/ |
|||
class WXBizMsgCrypt |
|||
{ |
|||
private $token; |
|||
private $encodingAesKey; |
|||
private $appId; |
|||
|
|||
/** |
|||
* 构造函数 |
|||
* @param $token string 公众平台上，开发者设置的token |
|||
* @param $encodingAesKey string 公众平台上，开发者设置的EncodingAESKey |
|||
* @param $appId string 公众平台的appId |
|||
*/ |
|||
public function __construct($token, $encodingAesKey, $appId) |
|||
{ |
|||
$this->token = $token; |
|||
$this->encodingAesKey = $encodingAesKey; |
|||
$this->appId = $appId; |
|||
} |
|||
|
|||
/** |
|||
* 将公众平台回复用户的消息加密打包. |
|||
* <ol> |
|||
* <li>对要发送的消息进行AES-CBC加密</li> |
|||
* <li>生成安全签名</li> |
|||
* <li>将消息密文和安全签名打包成xml格式</li> |
|||
* </ol> |
|||
* |
|||
* @param $replyMsg string 公众平台待回复用户的消息，xml格式的字符串 |
|||
* @param $timeStamp string 时间戳，可以自己生成，也可以用URL参数的timestamp |
|||
* @param $nonce string 随机串，可以自己生成，也可以用URL参数的nonce |
|||
* @param &$encryptMsg string 加密后的可以直接回复用户的密文，包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串, |
|||
* 当return返回0时有效 |
|||
* |
|||
* @return int 成功0，失败返回对应的错误码 |
|||
*/ |
|||
public function encryptMsg($replyMsg, $timeStamp, $nonce, &$encryptMsg) |
|||
{ |
|||
$pc = new Prpcrypt($this->encodingAesKey); |
|||
|
|||
//加密
|
|||
$array = $pc->encrypt($replyMsg, $this->appId); |
|||
$ret = $array[0]; |
|||
if ($ret != 0) { |
|||
return $ret; |
|||
} |
|||
|
|||
if ($timeStamp == null) { |
|||
$timeStamp = time(); |
|||
} |
|||
$encrypt = $array[1]; |
|||
|
|||
//生成安全签名
|
|||
$sha1 = new SHA1; |
|||
$array = $sha1->getSHA1($this->token, $timeStamp, $nonce, $encrypt); |
|||
$ret = $array[0]; |
|||
if ($ret != 0) { |
|||
return $ret; |
|||
} |
|||
$signature = $array[1]; |
|||
|
|||
//生成发送的xml
|
|||
$xmlparse = new XMLParse; |
|||
$encryptMsg = $xmlparse->generate($encrypt, $signature, $timeStamp, $nonce); |
|||
return ErrorCode::$OK; |
|||
} |
|||
|
|||
|
|||
/** |
|||
* 检验消息的真实性，并且获取解密后的明文. |
|||
* <ol> |
|||
* <li>利用收到的密文生成安全签名，进行签名验证</li> |
|||
* <li>若验证通过，则提取xml中的加密消息</li> |
|||
* <li>对消息进行解密</li> |
|||
* </ol> |
|||
* |
|||
* @param $msgSignature string 签名串，对应URL参数的msg_signature |
|||
* @param $timestamp string 时间戳 对应URL参数的timestamp |
|||
* @param $nonce string 随机串，对应URL参数的nonce |
|||
* @param $postData string 密文，对应POST请求的数据 |
|||
* @param &$msg string 解密后的原文，当return返回0时有效 |
|||
* |
|||
* @return int 成功0，失败返回对应的错误码 |
|||
*/ |
|||
public function decryptMsg($msgSignature, $timestamp = null, $nonce, $postData, &$msg) |
|||
{ |
|||
if (strlen($this->encodingAesKey) != 43) { |
|||
return ErrorCode::$IllegalAesKey; |
|||
} |
|||
|
|||
$pc = new Prpcrypt($this->encodingAesKey); |
|||
|
|||
//提取密文
|
|||
$xmlparse = new XMLParse; |
|||
$array = $xmlparse->extract($postData); |
|||
$ret = $array[0]; |
|||
|
|||
if ($ret != 0) { |
|||
return $ret; |
|||
} |
|||
|
|||
if ($timestamp == null) { |
|||
$timestamp = time(); |
|||
} |
|||
|
|||
$encrypt = $array[1]; |
|||
$touser_name = $array[2]; |
|||
|
|||
//验证安全签名
|
|||
$sha1 = new SHA1; |
|||
$array = $sha1->getSHA1($this->token, $timestamp, $nonce, $encrypt); |
|||
$ret = $array[0]; |
|||
|
|||
if ($ret != 0) { |
|||
return $ret; |
|||
} |
|||
|
|||
$signature = $array[1]; |
|||
if ($signature != $msgSignature) { |
|||
return ErrorCode::$ValidateSignatureError; |
|||
} |
|||
|
|||
$result = $pc->decrypt($encrypt, $this->appId); |
|||
if ($result[0] != 0) { |
|||
return $result[0]; |
|||
} |
|||
$msg = $result[1]; |
|||
|
|||
return ErrorCode::$OK; |
|||
} |
|||
|
|||
} |
|||
|
|||
@ -0,0 +1,54 @@ |
|||
<?php |
|||
include_once "errorCode.php"; |
|||
|
|||
/** |
|||
* XMLParse class |
|||
* |
|||
* 提供提取消息格式中的密文及生成回复消息格式的接口. |
|||
*/ |
|||
class XMLParse |
|||
{ |
|||
|
|||
/** |
|||
* 提取出xml数据包中的加密消息 |
|||
* @param string $xmltext 待提取的xml字符串 |
|||
* @return string 提取出的加密消息字符串 |
|||
*/ |
|||
public function extract($xmltext) |
|||
{ |
|||
try { |
|||
$xml = new DOMDocument(); |
|||
$xml->loadXML($xmltext); |
|||
$array_e = $xml->getElementsByTagName('Encrypt'); |
|||
$array_a = $xml->getElementsByTagName('ToUserName'); |
|||
$encrypt = $array_e->item(0)->nodeValue; |
|||
$tousername = $array_a && $array_a->item(0) ? $array_a->item(0)->nodeValue : ""; |
|||
return array(0, $encrypt, $tousername); |
|||
} catch (Exception $e) { |
|||
//print $e . "\n";
|
|||
return array(ErrorCode::$ParseXmlError, null, null); |
|||
} |
|||
} |
|||
|
|||
/** |
|||
* 生成xml消息 |
|||
* @param string $encrypt 加密后的消息密文 |
|||
* @param string $signature 安全签名 |
|||
* @param string $timestamp 时间戳 |
|||
* @param string $nonce 随机字符串 |
|||
*/ |
|||
public function generate($encrypt, $signature, $timestamp, $nonce) |
|||
{ |
|||
$format = "<xml>
|
|||
<Encrypt><![CDATA[%s]]></Encrypt> |
|||
<MsgSignature><![CDATA[%s]]></MsgSignature> |
|||
<TimeStamp>%s</TimeStamp> |
|||
<Nonce><![CDATA[%s]]></Nonce> |
|||
</xml>";
|
|||
return sprintf($format, $encrypt, $signature, $timestamp, $nonce); |
|||
} |
|||
|
|||
} |
|||
|
|||
|
|||
?>
|
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue