php验证google play签名

最新推荐文章于 2022-09-09 11:52:43 发布

原创

最新推荐文章于 2022-09-09 11:52:43 发布 · 1.8k 阅读

1 ·

CC 4.0 BY-SA版权

本文介绍如何使用PHP在服务器端验证Google Play应用的签名，确保应用的来源可信，防止恶意篡改。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

<?php

	require '../checkandpost.php';
	
	$params = ($_REQUEST);
	$signture_data = $params['signedData'];
	
	$signture =$params['dataSignature'];
	
	//$logFile = 'xx.txt';
	//$msg = 'signture_data==='.$signture_data."\r\n".'$signture  ==='.$signture."\r\n";
	
	$public_key = "xxxxxxxxxxxxxxxx"; //
	$signture_data1 = str_replace('\\','',$signture_data);
	$json_signture_data=json_decode($signture_data1);
	$json_orders = $json_signture_data;
	$orderidstr = explode(".",$json_orders->{'orderId'});
	$orderid = $orderidstr[0].$orderidstr[1];
	$developerPayload = $json_orders->{'developerPayload'};
	$developer = explode("=",$developerPayload);
	$pristr = $developer[1];
	$amount = $developer[2] * 100;
	
	
	//google app 提供的public key
	
	
	$public_key = "-----BEGIN PUBLIC KEY-----\n" . chunk_split($public_key, 64, "\n") . "-----END PUBLIC KEY-----";
	
	$public_key_handle = openssl_get_publickey($public_key);
	$result = openssl_verify($signture_data,