Weixin.php 27.9 KB
Newer Older
D
devil_gong 已提交
1 2 3 4
<?php
// +----------------------------------------------------------------------
// | ShopXO 国内领先企业级B2C免费开源电商系统
// +----------------------------------------------------------------------
D
2.0  
Devil 已提交
5
// | Copyright (c) 2011~2099 http://shopxo.net All rights reserved.
D
devil_gong 已提交
6
// +----------------------------------------------------------------------
D
2.0  
Devil 已提交
7
// | Licensed ( https://opensource.org/licenses/mit-license.php )
D
devil_gong 已提交
8 9 10 11 12 13
// +----------------------------------------------------------------------
// | Author: Devil
// +----------------------------------------------------------------------
namespace payment;

/**
14
 * 微信支付
D
devil_gong 已提交
15 16 17 18 19 20
 * @author   Devil
 * @blog    http://gong.gg/
 * @version 1.0.0
 * @date    2018-09-19
 * @desc    description
 */
21
class Weixin
D
devil_gong 已提交
22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52
{
    // 插件配置参数
    private $config;

    /**
     * 构造方法
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-17
     * @desc    description
     * @param   [array]           $params [输入参数(支付配置参数)]
     */
    public function __construct($params = [])
    {
        $this->config = $params;
    }

    /**
     * 配置信息
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     */
    public function Config()
    {
        // 基础信息
        $base = [
            'name'          => '微信',  // 插件名称
D
devil_gong 已提交
53
            'version'       => '1.1.1',  // 插件版本
D
devil_gong 已提交
54
            'apply_version' => '不限',  // 适用系统版本描述
D
devil 已提交
55
            'apply_terminal'=> ['pc', 'h5', 'ios', 'android', 'weixin', 'toutiao', 'qq'], // 适用终端 默认全部 ['pc', 'h5', 'app', 'alipay', 'weixin', 'baidu']
D
log  
Devil 已提交
56
            'desc'          => '适用公众号+PC+H5+APP+[微信|头条]小程序,即时到帐支付方式,买家的交易资金直接打入卖家账户,快速回笼交易资金。 <a href="https://pay.weixin.qq.com/" target="_blank">立即申请</a>',  // 插件描述(支持html)
D
devil_gong 已提交
57 58 59 60 61 62
            'author'        => 'Devil',  // 开发者
            'author_url'    => 'http://shopxo.net/',  // 开发者主页
        ];

        // 配置信息
        $element = [
D
Devil 已提交
63 64 65 66 67 68 69 70 71 72
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'app_appid',
                'placeholder'   => '开放平台AppID',
                'title'         => '开放平台AppID',
                'is_required'   => 0,
                'message'       => '请填写微信开放平台APP支付分配的AppID',
            ],
D
devil_gong 已提交
73 74 75 76 77
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'appid',
G
wx pay  
gongfuxiang 已提交
78 79
                'placeholder'   => '公众号/服务号AppID',
                'title'         => '公众号/服务号AppID',
D
devil_gong 已提交
80
                'is_required'   => 0,
G
wx pay  
gongfuxiang 已提交
81
                'message'       => '请填写微信分配的AppID',
D
devil_gong 已提交
82 83 84 85 86 87
            ],
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'mini_appid',
D
devil_gong 已提交
88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109
                'placeholder'   => '小程序ID',
                'title'         => '小程序ID',
                'is_required'   => 0,
                'message'       => '请填写微信分配的小程序ID',
            ],
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'mch_id',
                'placeholder'   => '微信支付商户号',
                'title'         => '微信支付商户号',
                'is_required'   => 0,
                'message'       => '请填写微信支付分配的商户号',
            ],
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'key',
                'placeholder'   => '密钥',
                'title'         => '密钥',
G
gongfuxiang 已提交
110
                'desc'          => '微信支付商户平台API配置的密钥',
D
devil_gong 已提交
111 112 113
                'is_required'   => 0,
                'message'       => '请填写密钥',
            ],
D
devil_gong 已提交
114 115 116 117
            [
                'element'       => 'textarea',
                'name'          => 'apiclient_cert',
                'placeholder'   => '证书(apiclient_cert.pem)',
D
Devil 已提交
118
                'title'         => '证书(apiclient_cert.pem)(退款操作必填项)',
D
devil_gong 已提交
119 120 121 122 123 124 125 126
                'is_required'   => 0,
                'rows'          => 6,
                'message'       => '请填写证书(apiclient_cert.pem)',
            ],
            [
                'element'       => 'textarea',
                'name'          => 'apiclient_key',
                'placeholder'   => '证书密钥(apiclient_key.pem)',
D
Devil 已提交
127
                'title'         => '证书密钥(apiclient_key.pem)(退款操作必填项)',
D
devil_gong 已提交
128 129 130 131
                'is_required'   => 0,
                'rows'          => 6,
                'message'       => '请填写证书密钥(apiclient_key.pem)',
            ],
G
wx pay  
gongfuxiang 已提交
132 133 134 135 136 137 138
            [
                'element'       => 'select',
                'title'         => '异步通知协议',
                'message'       => '请选择协议类型',
                'name'          => 'agreement',
                'is_multiple'   => 0,
                'element_data'  => [
D
devil_gong 已提交
139
                    ['value'=>1, 'name'=>'默认当前协议'],
G
wx pay  
gongfuxiang 已提交
140 141 142
                    ['value'=>2, 'name'=>'强制https转http协议'],
                ],
            ],
D
devil_gong 已提交
143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161
        ];

        return [
            'base'      => $base,
            'element'   => $element,
        ];
    }

    /**
     * 支付入口
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Pay($params = [])
    {
162
        // 参数
D
devil_gong 已提交
163 164 165 166 167
        if(empty($params))
        {
            return DataReturn('参数不能为空', -1);
        }

168 169 170 171 172 173
        // 配置信息
        if(empty($this->config))
        {
            return DataReturn('支付缺少配置', -1);
        }

D
devil 已提交
174 175 176
        // 平台
        $client_type = ApplicationClientType();

G
wx pay  
gongfuxiang 已提交
177
        // 微信中打开
D
devil 已提交
178
        if($client_type == 'h5' && IsWeixinEnv() && (empty($params['user']) || empty($params['user']['weixin_web_openid'])))
G
wx pay  
gongfuxiang 已提交
179
        {
D
devil 已提交
180
            exit(header('location:'.PluginsHomeUrl('weixinwebauthorization', 'pay', 'index', input())));
G
wx pay  
gongfuxiang 已提交
181
        }
G
wx pay  
gongfuxiang 已提交
182

D
devil_gong 已提交
183
        // 获取支付参数
D
devil_gong 已提交
184 185
        $ret = $this->GetPayParams($params);
        if($ret['code'] != 0)
D
devil_gong 已提交
186
        {
D
devil_gong 已提交
187
            return $ret;
D
devil_gong 已提交
188 189
        }

D
devil 已提交
190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207
        // QQ小程序使用微信支付
        if($client_type == 'qq')
        {
            // 获取QQ access_token
            $qq_appid = MyC('common_app_mini_qq_appid');
            $qq_appsecret = MyC('common_app_mini_qq_appsecret');
            $access_token = (new \base\QQ($qq_appid, $qq_appsecret))->GetAccessToken();
            if($access_token === false)
            {
                return DataReturn('QQ凭证AccessToken获取失败', -1);
            }

            // QQ小程序代理下单地址
            $request_url = 'https://api.q.qq.com/wxpay/unifiedorder?appid='.$qq_appid.'&access_token='.$access_token.'&real_notify_url='.urlencode($this->GetNotifyUrl($params));
        } else {
            $request_url = 'https://api.mch.weixin.qq.com/pay/unifiedorder';
        }

D
debug  
devil_gong 已提交
208
        // 请求接口处理
D
devil 已提交
209
        $result = $this->XmlToArray($this->HttpRequest($request_url, $this->ArrayToXml($ret['data'])));
D
devil_gong 已提交
210 211
        if(!empty($result['return_code']) && $result['return_code'] == 'SUCCESS' && !empty($result['prepay_id']))
        {
D
devil_gong 已提交
212
            return $this->PayHandleReturn($ret['data'], $result, $params);
D
devil_gong 已提交
213
        }
D
Devil 已提交
214
        $msg = is_string($result) ? $result : (empty($result['return_msg']) ? '支付接口异常' : $result['return_msg']);
D
devil_gong 已提交
215 216 217 218 219
        if(!empty($result['err_code_des']))
        {
            $msg .= '-'.$result['err_code_des'];
        }
        return DataReturn($msg, -1);
D
devil_gong 已提交
220 221
    }

D
devil_gong 已提交
222 223 224 225 226 227 228 229 230
    /**
     * 支付返回处理
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-08
     * @desc    description
     * @param   [array]           $pay_params   [支付参数]
     * @param   [array]           $data         [支付返回数据]
D
devil_gong 已提交
231
     * @param   [array]           $params       [输入参数]
D
devil_gong 已提交
232
     */
D
devil_gong 已提交
233
    private function PayHandleReturn($pay_params = [], $data = [], $params = [])
D
devil_gong 已提交
234
    {
D
devil 已提交
235
        $redirect_url = empty($params['redirect_url']) ? __MY_URL__ : $params['redirect_url'];
D
devil_gong 已提交
236
        $result = DataReturn('支付接口异常', -1);
D
devil_gong 已提交
237
        switch($pay_params['trade_type'])
D
devil_gong 已提交
238 239 240
        {
            // web支付
            case 'NATIVE' :
D
devil_gong 已提交
241 242 243 244
                if(empty($params['ajax_url']))
                {
                    return DataReturn('支付状态校验地址不能为空', -50);
                }
D
devil_gong 已提交
245
                $pay_params = [
D
devil_gong 已提交
246
                    'url'       => urlencode(base64_encode($data['code_url'])),
D
devil_gong 已提交
247
                    'order_no'  => $params['order_no'],
D
devil_gong 已提交
248 249
                    'name'      => urlencode('微信支付'),
                    'msg'       => urlencode('打开微信APP扫一扫进行支付'),
D
devil_gong 已提交
250
                    'ajax_url'  => urlencode(base64_encode($params['ajax_url'])),
D
devil_gong 已提交
251
                ];
D
devil_gong 已提交
252
                $url = MyUrl('index/pay/qrcode', $pay_params);
D
devil_gong 已提交
253
                $result = DataReturn('success', 0, $url);
D
devil_gong 已提交
254 255 256 257
                break;

            // h5支付
            case 'MWEB' :
258 259
                if(!empty($params['order_id']))
                {
D
devil_gong 已提交
260
                    $data['mweb_url'] .= '&redirect_url='.$redirect_url;
261
                }
D
devil_gong 已提交
262
                $result = DataReturn('success', 0, $data['mweb_url']);
D
devil_gong 已提交
263 264 265 266 267
                break;

            // 微信中/小程序支付
            case 'JSAPI' :
                $pay_data = array(
D
devil_gong 已提交
268
                    'appId'         => $pay_params['appid'],
D
devil_gong 已提交
269 270 271 272 273 274
                    'package'       => 'prepay_id='.$data['prepay_id'],
                    'nonceStr'      => md5(time().rand()),
                    'signType'      => $pay_params['sign_type'],
                    'timeStamp'     => (string) time(),
                );
                $pay_data['paySign'] = $this->GetSign($pay_data);
D
devil_gong 已提交
275 276

                // 微信中
277
                if(APPLICATION == 'web' && IsWeixinEnv())
D
devil_gong 已提交
278
                {
G
wx pay  
gongfuxiang 已提交
279
                    $this->PayHtml($pay_data, $redirect_url);
D
devil_gong 已提交
280 281
                } else {
                    $result = DataReturn('success', 0, $pay_data);
D
devil_gong 已提交
282
                }
D
devil_gong 已提交
283 284 285 286
                break;

            // APP支付
            case 'APP' :
D
devil_gong 已提交
287
                $pay_data = array(
288 289
                    'appid'         => $pay_params['appid'],
                    'partnerid'     => $pay_params['mch_id'],
D
devil_gong 已提交
290 291 292 293 294 295 296
                    'prepayid'      => $data['prepay_id'],
                    'package'       => 'Sign=WXPay',
                    'noncestr'      => md5(time().rand()),
                    'timestamp'     => (string) time(),
                );
                $pay_data['sign'] = $this->GetSign($pay_data);
                $result = DataReturn('success', 0, $pay_data);
D
devil_gong 已提交
297 298 299 300 301
                break;
        }
        return $result;
    }

G
wx pay  
gongfuxiang 已提交
302 303 304 305 306 307 308
    /**
     * 支付代码
     * @author   Devil
     * @blog     http://gong.gg/
     * @version  1.0.0
     * @datetime 2019-05-25T00:07:52+0800
     * @param    [array]                   $pay_data     [支付信息]
D
devil 已提交
309
     * @param    [string]                  $redirect_url [支付结束后跳转url]
G
wx pay  
gongfuxiang 已提交
310 311 312
     */
    private function PayHtml($pay_data, $redirect_url)
    {
G
wx pay  
gongfuxiang 已提交
313
        // 支付代码
G
wx pay  
gongfuxiang 已提交
314 315 316 317 318 319 320 321
        exit('<html>
            <head>
                <meta http-equiv="content-type" content="text/html;charset=utf-8"/>
                <title>微信安全支付</title>
                <script type="text/javascript">
                    function onBridgeReady()
                    {
                       WeixinJSBridge.invoke(
G
wx pay  
gongfuxiang 已提交
322 323 324 325 326 327 328 329 330
                            \'getBrandWCPayRequest\', {
                                "appId":"'.$pay_data['appId'].'",
                                "timeStamp":"'.$pay_data['timeStamp'].'",
                                "nonceStr":"'.$pay_data['nonceStr'].'",
                                "package":"'.$pay_data['package'].'",     
                                "signType":"'.$pay_data['signType'].'",
                                "paySign":"'.$pay_data['paySign'].'"
                            },
                            function(res) {
D
devil 已提交
331
                                window.location.href = "'.$redirect_url.'";
G
wx pay  
gongfuxiang 已提交
332 333
                            }
                        ); 
G
wx pay  
gongfuxiang 已提交
334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353
                    }
                    if(typeof WeixinJSBridge == "undefined")
                    {
                       if( document.addEventListener )
                       {
                           document.addEventListener("WeixinJSBridgeReady", onBridgeReady, false);
                       } else if (document.attachEvent)
                       {
                           document.attachEvent("WeixinJSBridgeReady", onBridgeReady); 
                           document.attachEvent("onWeixinJSBridgeReady", onBridgeReady);
                       }
                    } else {
                       onBridgeReady();
                    }
                </script>
                </head>
            <body>
        </html>');
    }

D
devil_gong 已提交
354 355 356 357 358 359 360 361 362 363 364
    /**
     * 获取支付参数
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-07
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    private function GetPayParams($params = [])
    {
D
devil_gong 已提交
365 366 367 368 369 370
        $trade_type = empty($params['trade_type']) ? $this->GetTradeType() : $params['trade_type'];
        if(empty($trade_type))
        {
            return DataReturn('支付类型不匹配', -1);
        }

D
devil 已提交
371 372 373
        // 平台
        $client_type = ApplicationClientType();

D
devil_gong 已提交
374
        // openid
D
devil 已提交
375
        if($client_type == 'weixin')
D
devil_gong 已提交
376 377 378
        {
            $openid = isset($params['user']['weixin_openid']) ? $params['user']['weixin_openid'] : '';
        } else {
G
wx pay  
gongfuxiang 已提交
379
            $openid = isset($params['user']['weixin_web_openid']) ? $params['user']['weixin_web_openid'] : '';
D
devil_gong 已提交
380 381
        }

D
devil_gong 已提交
382
        // appid
D
Devil 已提交
383
        $appid = $this->PayAppID($client_type);
D
devil_gong 已提交
384

G
wx pay  
gongfuxiang 已提交
385
        // 异步地址处理
D
devil 已提交
386
        $notify_url = ($client_type == 'qq') ? 'https://api.q.qq.com/wxpay/notify' : $this->GetNotifyUrl($params);
G
wx pay  
gongfuxiang 已提交
387

D
devil_gong 已提交
388
        // 请求参数
D
devil_gong 已提交
389
        $data = [
D
devil_gong 已提交
390
            'appid'             => $appid,
D
devil_gong 已提交
391
            'mch_id'            => $this->config['mch_id'],
D
devil_gong 已提交
392
            'body'              => $params['site_name'].'-'.$params['name'],
D
devil 已提交
393
            'nonce_str'         => md5(time().$params['order_no']),
G
wx pay  
gongfuxiang 已提交
394
            'notify_url'        => $notify_url,
D
devil_gong 已提交
395
            'openid'            => ($trade_type == 'JSAPI') ? $openid : '',
D
devil 已提交
396
            'out_trade_no'      => $params['order_no'],
D
devil_gong 已提交
397
            'spbill_create_ip'  => GetClientIP(),
D
devil 已提交
398
            'total_fee'         => (int) (($params['total_price']*1000)/10),
D
devil_gong 已提交
399
            'trade_type'        => $trade_type,
G
debug  
gongfuxiang 已提交
400
            'attach'            => empty($params['attach']) ? $params['site_name'].'-'.$params['name'] : $params['attach'],
D
devil_gong 已提交
401
            'sign_type'         => 'MD5',
402
            'time_expire'       => $this->OrderAutoCloseTime(),
D
devil_gong 已提交
403
        ];
D
devil_gong 已提交
404
        $data['sign'] = $this->GetSign($data);
D
devil_gong 已提交
405 406 407
        return DataReturn('success', 0, $data);
    }

D
Devil 已提交
408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425
    /**
     * appid获取
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2021-04-25
     * @desc    description
     * @param   [string]          $client_type [客户端类型]
     */
    public function PayAppID($client_type)
    {
        $arr = [
            'weixin'    => $this->config['mini_appid'],
            'app'    => $this->config['app_appid'],
        ];
        return array_key_exists($client_type, $arr) ? $arr[$client_type] : $this->config['appid'];
    }

426 427 428 429 430 431 432 433 434 435 436 437 438 439
    /**
     * 订单自动关闭的时间
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2021-03-24
     * @desc    description
     */
    public function OrderAutoCloseTime()
    {
        $time = intval(MyC('common_order_close_limit_time', 30, true))*60;
        return date('YmdHis', time()+$time);
    }

D
devil 已提交
440 441 442 443 444 445 446 447 448 449 450 451 452 453
    /**
     * 获取异步通知地址
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2020-09-19
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    private function GetNotifyUrl($params)
    {
        return (__MY_HTTP__ == 'https' && isset($this->config['agreement']) && $this->config['agreement'] == 1) ? 'http'.mb_substr($params['notify_url'], 5, null, 'utf-8') : $params['notify_url'];
    }

D
devil_gong 已提交
454 455 456 457 458 459 460 461 462 463
    /**
     * 获取支付交易类型
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-08
     * @desc    description
     */
    private function GetTradeType()
    {
D
devil 已提交
464 465 466 467
        // 平台
        $client_type = ApplicationClientType();

        // 平台类型定义
D
devil_gong 已提交
468 469 470 471
        $type_all = [
            'pc'        => 'NATIVE',
            'weixin'    => 'JSAPI',
            'h5'        => 'MWEB',
D
devil_gong 已提交
472
            'toutiao'   => 'MWEB',
D
devil 已提交
473
            'qq'        => 'MWEB',
D
devil_gong 已提交
474 475 476
            'app'       => 'APP',
            'ios'       => 'APP',
            'android'   => 'APP',
D
devil_gong 已提交
477 478 479
        ];

        // 微信中打开
D
devil 已提交
480
        if($client_type == 'h5' && IsWeixinEnv())
D
devil_gong 已提交
481
        {
D
devil 已提交
482
            $type_all['h5'] = $type_all['weixin'];
D
devil_gong 已提交
483
        }
D
devil_gong 已提交
484

D
devil 已提交
485
        return isset($type_all[$client_type]) ? $type_all[$client_type] : '';
D
devil_gong 已提交
486 487
    }

D
devil_gong 已提交
488 489 490 491 492 493 494 495 496 497 498
    /**
     * 支付回调处理
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Respond($params = [])
    {
G
debug  
gongfuxiang 已提交
499
        $result = empty($GLOBALS['HTTP_RAW_POST_DATA']) ? $this->XmlToArray(file_get_contents('php://input')) : $this->XmlToArray($GLOBALS['HTTP_RAW_POST_DATA']);
D
devil_gong 已提交
500

G
debug  
gongfuxiang 已提交
501
        if(isset($result['result_code']) && $result['result_code'] == 'SUCCESS' && $result['sign'] == $this->GetSign($result))
G
debug  
gongfuxiang 已提交
502
        {
G
debug  
gongfuxiang 已提交
503
            return DataReturn('支付成功', 0, $this->ReturnData($result));
G
debug  
gongfuxiang 已提交
504
        }
G
debug  
gongfuxiang 已提交
505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520
        return DataReturn('处理异常错误', -100);
    }

    /**
     * [ReturnData 返回数据统一格式]
     * @author   Devil
     * @blog     http://gong.gg/
     * @version  1.0.0
     * @datetime 2018-10-06T16:54:24+0800
     * @param    [array]                   $data [返回数据]
     */
    private function ReturnData($data)
    {
        // 返回数据固定基础参数
        $data['trade_no']       = $data['transaction_id'];  // 支付平台 - 订单号
        $data['buyer_user']     = $data['openid'];          // 支付平台 - 用户
D
devil 已提交
521
        $data['out_trade_no']   = $data['out_trade_no'];    // 本系统发起支付的 - 订单号
G
debug  
gongfuxiang 已提交
522
        $data['subject']        = $data['attach'];          // 本系统发起支付的 - 商品名称
G
debug  
gongfuxiang 已提交
523
        $data['pay_price']      = $data['total_fee']/100;   // 本系统发起支付的 - 总价
G
debug  
gongfuxiang 已提交
524
        return $data;
D
devil_gong 已提交
525 526
    }

D
devil_gong 已提交
527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566
    /**
     * 退款处理
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-05-28
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Refund($params = [])
    {
        // 参数
        $p = [
            [
                'checked_type'      => 'empty',
                'key_name'          => 'order_no',
                'error_msg'         => '订单号不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'trade_no',
                'error_msg'         => '交易平台订单号不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'pay_price',
                'error_msg'         => '支付金额不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'refund_price',
                'error_msg'         => '退款金额不能为空',
            ],
        ];
        $ret = ParamsChecked($params, $p);
        if($ret !== true)
        {
            return DataReturn($ret, -1);
        }

D
devil_gong 已提交
567 568 569 570 571 572
        // 证书是否配置
        if(empty($this->config['apiclient_cert']) || empty($this->config['apiclient_key']))
        {
            return DataReturn('证书未配置', -1);
        }

D
devil_gong 已提交
573 574 575
        // 退款原因
        $refund_reason = empty($params['refund_reason']) ? $params['order_no'].'订单退款'.$params['refund_price'].'元' : $params['refund_reason'];

D
devil_gong 已提交
576
        // appid,默认使用公众号appid
D
Devil 已提交
577
        $appid = $this->PayAppID($params['client_type']);
D
devil_gong 已提交
578 579 580 581 582 583 584 585

        // 请求参数
        $data = [
            'appid'             => $appid,
            'mch_id'            => $this->config['mch_id'],
            'nonce_str'         => md5(time().rand().$params['order_no']),
            'sign_type'         => 'MD5',
            'transaction_id'    => $params['trade_no'],
D
Devil 已提交
586 587
            'out_trade_no'      => $params['order_no'],
            'out_refund_no'     => $params['order_no'].GetNumberCode(),
D
devil 已提交
588 589
            'total_fee'         => (int) (($params['pay_price']*1000)/10),
            'refund_fee'        => (int) (($params['refund_price']*1000)/10),
D
devil_gong 已提交
590
            'refund_desc'       => $refund_reason,            
D
devil_gong 已提交
591 592 593
        ];
        $data['sign'] = $this->GetSign($data);

D
debug  
devil_gong 已提交
594 595
        // 请求接口处理
        $result = $this->XmlToArray($this->HttpRequest('https://api.mch.weixin.qq.com/secapi/pay/refund', $this->ArrayToXml($data), true));
D
devil_gong 已提交
596
        if(isset($result['result_code']) && $result['result_code'] == 'SUCCESS' && isset($result['return_code']) && $result['return_code'] == 'SUCCESS')
D
devil_gong 已提交
597 598 599 600
        {
            // 统一返回格式
            $data = [
                'out_trade_no'  => isset($result['out_trade_no']) ? $result['out_trade_no'] : '',
G
gongfuxiang 已提交
601
                'trade_no'      => isset($result['transaction_id']) ? $result['transaction_id'] : (isset($result['err_code_des']) ? $result['err_code_des'] : ''),
D
devil_gong 已提交
602
                'buyer_user'    => isset($result['refund_id']) ? $result['refund_id'] : '',
G
gongfuxiang 已提交
603
                'refund_price'  => isset($result['refund_fee']) ? $result['refund_fee']/100 : 0.00,
D
devil_gong 已提交
604 605 606 607
                'return_params' => $result,
            ];
            return DataReturn('退款成功', 0, $data);
        }
D
devil_gong 已提交
608 609
        $msg = is_string($result) ? $result : (empty($result['err_code_des']) ? '退款接口异常' : $result['err_code_des']);
        if(!empty($result['return_msg']))
D
devil_gong 已提交
610
        {
D
devil_gong 已提交
611
            $msg .= '-'.$result['return_msg'];
D
devil_gong 已提交
612 613 614 615
        }
        return DataReturn($msg, -1);
    }

D
devil_gong 已提交
616 617 618 619 620 621 622 623 624 625 626 627 628 629 630
    /**
     * 签名生成
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-07
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    private function GetSign($params = [])
    {
        ksort($params);
        $sign  = '';
        foreach($params as $k=>$v)
        {
D
devil_gong 已提交
631 632 633 634
            if($k != 'sign' && $v != '' && $v != null)
            {
                $sign .= "$k=$v&";
            }
D
devil_gong 已提交
635 636 637 638
        }
        return strtoupper(md5($sign.'key='.$this->config['key']));
    }

D
devil_gong 已提交
639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658
    /**
     * 数组转xml
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-07
     * @desc    description
     * @param   [array]          $data [数组]
     */
    private function ArrayToXml($data)
    {
        $xml = '<xml>';
        foreach($data as $k=>$v)
        {
            $xml .= '<'.$k.'>'.$v.'</'.$k.'>';
        }
        $xml .= '</xml>';
        return $xml;
    }

D
devil_gong 已提交
659 660 661 662 663 664 665 666 667 668 669
    /**
     * xml转数组
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-07
     * @desc    description
     * @param   [string]          $xml [xm数据]
     */
    private function XmlToArray($xml)
    {
D
devil_gong 已提交
670 671 672 673
        if(!$this->XmlParser($xml))
        {
            return is_string($xml) ? $xml : '接口返回数据有误';
        }
D
devil_gong 已提交
674 675 676 677

        return json_decode(json_encode(simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
    }

D
devil_gong 已提交
678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699

    /**
     * 判断字符串是否为xml格式
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-01-07
     * @desc    description
     * @param   [string]          $string [字符串]
     */
    function XmlParser($string)
    {
        $xml_parser = xml_parser_create();
        if(!xml_parse($xml_parser, $string, true))
        {
          xml_parser_free($xml_parser);
          return false;
        } else {
          return (json_decode(json_encode(simplexml_load_string($string)),true));
        }
    }

D
devil_gong 已提交
700 701 702 703 704 705 706 707 708
    /**
     * [HttpRequest 网络请求]
     * @author   Devil
     * @blog     http://gong.gg/
     * @version  1.0.0
     * @datetime 2017-09-25T09:10:46+0800
     * @param    [string]          $url         [请求url]
     * @param    [array]           $data        [发送数据]
     * @param    [boolean]         $use_cert    [是否需要使用证书]
709
     * @param    [int]             $second      [超时]
D
devil_gong 已提交
710 711
     * @return   [mixed]                        [请求返回数据]
     */
D
devil_gong 已提交
712
    private function HttpRequest($url, $data, $use_cert = false, $second = 30)
D
devil_gong 已提交
713 714 715 716 717
    {
        $options = array(
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HEADER         => false,
            CURLOPT_POST           => true,
D
debug  
devil_gong 已提交
718 719
            CURLOPT_SSL_VERIFYPEER => false,
            CURLOPT_SSL_VERIFYHOST => false,
D
devil_gong 已提交
720
            CURLOPT_POSTFIELDS     => $data,
721
            CURLOPT_TIMEOUT        => $second,
D
devil_gong 已提交
722 723 724 725
        );

        if($use_cert == true)
        {
D
devil_gong 已提交
726 727
            //设置证书
            //使用证书:cert 与 key 分别属于两个.pem文件
D
debug  
devil_gong 已提交
728
            $apiclient = $this->GetApiclientFile();
D
debug  
devil_gong 已提交
729
            $options[CURLOPT_SSLCERTTYPE] = 'PEM';
D
debug  
devil_gong 已提交
730
            $options[CURLOPT_SSLCERT] = $apiclient['cert'];
D
debug  
devil_gong 已提交
731
            $options[CURLOPT_SSLKEYTYPE] = 'PEM';
D
debug  
devil_gong 已提交
732
            $options[CURLOPT_SSLKEY] = $apiclient['key'];
D
devil_gong 已提交
733 734 735 736 737
        }
 
        $ch = curl_init($url);
        curl_setopt_array($ch, $options);
        $result = curl_exec($ch);
D
devil_gong 已提交
738 739 740 741 742 743 744 745 746 747
        //返回结果
        if($result)
        {
            curl_close($ch);
            return $result;
        } else { 
            $error = curl_errno($ch);
            curl_close($ch);
            return "curl出错,错误码:$error";
        }
D
devil_gong 已提交
748
    }
D
debug  
devil_gong 已提交
749 750 751 752 753 754 755 756 757 758 759 760 761 762 763

    /**
     * 获取证书文件路径
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-05-29
     * @desc    description
     */
    private function GetApiclientFile()
    {
        // 证书位置
        $apiclient_cert_file = ROOT.'runtime'.DS.'temp'.DS.'payment_weixin_pay_apiclient_cert.pem';
        $apiclient_key_file = ROOT.'runtime'.DS.'temp'.DS.'payment_weixin_pay_apiclient_key.pem';

D
devil_gong 已提交
764
        // 证书处理
D
devil_gong 已提交
765 766 767 768 769 770 771 772
        if(stripos($this->config['apiclient_cert'], '-----') === false)
        {
            $apiclient_cert = "-----BEGIN CERTIFICATE-----\n";
            $apiclient_cert .= wordwrap($this->config['apiclient_cert'], 64, "\n", true);
            $apiclient_cert .= "\n-----END CERTIFICATE-----";
        } else {
            $apiclient_cert = $this->config['apiclient_cert'];
        }
D
Devil 已提交
773 774
        file_put_contents($apiclient_cert_file, $apiclient_cert);

D
devil_gong 已提交
775 776 777 778 779 780 781 782
        if(stripos($this->config['apiclient_key'], '-----') === false)
        {
            $apiclient_key = "-----BEGIN PRIVATE KEY-----\n";
            $apiclient_key .= wordwrap($this->config['apiclient_key'], 64, "\n", true);
            $apiclient_key .= "\n-----END PRIVATE KEY-----";
        } else {
            $apiclient_key = $this->config['apiclient_key'];
        }
D
Devil 已提交
783 784
        file_put_contents($apiclient_key_file, $apiclient_key);

D
debug  
devil_gong 已提交
785 786
        return ['cert' => $apiclient_cert_file, 'key' => $apiclient_key_file];
    }
D
devil_gong 已提交
787 788
}
?>