PHP调用微信小程序V3支付

<?php
namespace Admin\Controller;

// use Admin\Controller\WeixinPayController;
define('SSLCERT_PATH',$_SERVER['DOCUMENT_ROOT'].'/cert/apiclient_cert.pem');
define('SSLKEY_PATH',$_SERVER['DOCUMENT_ROOT'].'/cert/apiclient_key.pem');
define('MCHID','商户id');
define('APPID','appid');
define('KEY','v3支付秘钥');

class WechatPayNewController extends \Think\Controller {
    public function pay()
	{
		$url = "https://api.mch.weixin.qq.com/v3/pay/transactions/jsapi";
		$urlarr = parse_url($url);
		$appid = ''; //appID
		$mchid = ''; //商户ID
		$xlid = '商户证书序列号'; //商户证书序列号
// 		$openid = 'openid';
		$openid = $_POST['openid'];
		$money = $_POST['total_fee'];
		$data = array();
		$noncestr = MD5(time() . "" . rand(10000, 90000));
		
		//当前时间戳
		$timeStamp = "" . time(); //当前时间戳
		$time = $timeStamp;
		$name = $_POST['goods_name'];
		
// 		$ordernumber =  $this->build('alnum',32);//商户订单号,需唯一
		$ordernumber =  $_POST['order_no'];//商户订单号,需唯一
		
		$data['appid'] = $appid;
		$data['mchid'] = $mchid;
		$data['description'] = $name; //商品描述
		$data['out_trade_no'] = $ordernumber; //订单编号
		$data['notify_url'] = 'https://hy.china-gwy.com/notify.php'; //回调接口
		$data['amount']['total'] = intval($money * 100); //金额 单位 分
		$data['payer']['openid'] = $openid; //用户openID
		$data = json_encode($data);
		$key = $this->getSign($data, $urlarr['path'], $noncestr, $time); //签名
	
		$token = sprintf('mchid="%s",serial_no="%s",nonce_str="%s",timestamp="%d",signature="%s"', $mchid, $xlid, $noncestr, $time, $key); //头部信息
        
		$header  = array(
			'Content-Type:' . 'application/json; charset=UTF-8',
			'Accept:application/json',
			'User-Agent:*/*',
			'Authorization: WECHATPAY2-SHA256-RSA2048 ' . $token
		);
		$ret = $this->curl_post_https($url, $data, $header);
// 		$ret = json_decode($ret,true);
		$ret = ltrim($ret, '{"prepay_id":"');
		$ret = rtrim($ret, '}"');
		//微信支付（小程序）签名
		$str = $this->getWechartSign($appid, $timeStamp, $noncestr, 'prepay_id=' . $ret);
		$arr = array('appId' => $appid, 'timeStamp' => $timeStamp, 'nonceStr' => $noncestr, 'package' => 'prepay_id=' . $ret, 'signType' => 'RSA', 'paySign' => $str);
		 $this->ajaxReturn($arr,'JSON');
// 		exit(json_encode($arr));
	}

	//微信支付签名
	private function getSign($data = array(), $url, $randstr, $time)
	{
		$str = "POST" . "\n" . $url . "\n" . $time . "\n" . $randstr . "\n" . $data . "\n";
		$key = file_get_contents(SSLKEY_PATH); //在商户平台下载的秘钥
		$str = $this->getSha256WithRSA($str, $key);
		return $str;
	}

	//调起支付的签名
	private function getWechartSign($appid, $timeStamp, $noncestr, $prepay_id)
	{
		$str = $appid . "\n" . $timeStamp . "\n" . $noncestr . "\n" . $prepay_id . "\n";
		$key = file_get_contents(SSLKEY_PATH);
		$str = $this->getSha256WithRSA($str, $key);
		return $str;
	}

	private function getSha256WithRSA($content, $privateKey){
		$binary_signature = "";
		$algo = "SHA256";
		openssl_sign($content, $binary_signature, $privateKey, $algo);
		$sign = base64_encode($binary_signature);
		return $sign;
	}

	public function curl_post_https($url,$data,$header){ // 模拟提交数据函数
		$curl = curl_init(); // 启动一个CURL会话
		curl_setopt($curl, CURLOPT_URL, $url); // 要访问的地址
		curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0); // 对认证证书来源的检查
		curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2); // 从证书中检查SSL加密算法是否存在
		curl_setopt($curl, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']); // 模拟用户使用的浏览器
		curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1); // 使用自动跳转
		curl_setopt($curl, CURLOPT_AUTOREFERER, 1); // 自动设置Referer
		curl_setopt($curl, CURLOPT_POST, 1); // 发送一个常规的Post请求
		curl_setopt($curl, CURLOPT_POSTFIELDS, $data); // Post提交的数据包
		curl_setopt($curl, CURLOPT_TIMEOUT, 30); // 设置超时限制防止死循环
		curl_setopt($curl, CURLOPT_HEADER, 0); // 显示返回的Header区域内容
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); // 获取的信息以文件流的形式返回
	 
		curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
		$tmpInfo = curl_exec($curl); // 执行操作
		if (curl_errno($curl)) {
			echo 'Errno'.curl_error($curl);//捕抓异常
		}
		curl_close($curl); // 关闭CURL会话
		return $tmpInfo; // 返回数据，json格式
	}

    // 下面是一些上述代码需要调用的函数
    public function ToXml($values)
	{
		if (!is_array($values) || count($values) <= 0) {
			return "数组数据异常！";
		}
 
		$xml = "<xml>";
 
		foreach ($values as $key => $val) {
			if (is_numeric($val)) {
				$xml .= "<" . $key . ">" . $val . "</" . $key . ">";
			} else {
				$xml .= "<" . $key . "><![CDATA[" . $val . "]]></" . $key . ">";
			}
		}
		$xml .= "</xml>";
 
		return $xml;
	}

    //随机32位字符串
	private function nonce_str(){
	    $result = '';
	    $str = 'QWERTYUIOPASDFGHJKLZXVBNMqwertyuioplkjhgfdsamnbvcxz';
	    for ($i=0;$i<32;$i++){
	        $result .= $str[rand(0,48)];
	    }
	    return $result;
	}
	//签名 $data要先排好顺序
	private function sign($data){
	    $stringA = '';
	    foreach ($data as $key=>$value){
	        if(!$value) continue;
	        if($stringA) $stringA .= '&'.$key."=".$value;
	        else $stringA = $key."=".$value;
	    }
	    $wx_key = 'd0wupvcPTSGbUhPXI0c7EG9AuOmL85fe';//这里就是我上面讲解的设置了API的那个密钥 !!!
	    $stringSignTemp = $stringA.'&key='.$wx_key;
	    return strtoupper(md5($stringSignTemp)); 
	}
	private function xml($xml)
	{
	    $p = xml_parser_create();
	    xml_parse_into_struct($p, $xml, $vals, $index);
	    xml_parser_free($p);
	   // $data = '';
	    $data = [];
	    foreach ($index as $key=>$value) {
	        if($key == 'xml' || $key == 'XML') continue;
	        $tag = $vals[$value[0]]['tag'];
	        $value = $vals[$value[0]]['value'];
            // halt($vals);
            
	        $data[$tag] = $value;
	    }
	   //  echo "<pre>";
	   // var_dump($data);die;
	    return $data;
	}
	private function http_request($url,$data = null,$headers=array())
	{
	    $curl = curl_init();
	    if( count($headers) >= 1 ){
	        curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
	    }
	    curl_setopt($curl, CURLOPT_URL, $url);
	    curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
	    curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
	    if (!empty($data)){
	        curl_setopt($curl, CURLOPT_POST, 1);
	        curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
	    }
	    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
	    $output = curl_exec($curl);
	    curl_close($curl);
	    return $output;
    }
    
    public function build($type = 'alnum', $len = 8){
        switch ($type) {
            case 'alpha':
            case 'alnum':
            case 'numeric':
            case 'nozero':
                switch ($type) {
                    case 'alpha':
                        $pool = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
                        break;
                    case 'alnum':
                        $pool = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
                        break;
                    case 'numeric':
                        $pool = '0123456789';
                        break;
                    case 'nozero':
                        $pool = '123456789';
                        break;
                }
                return substr(str_shuffle(str_repeat($pool, ceil($len / strlen($pool)))), 0, $len);
            case 'unique':
            case 'md5':
                return md5(uniqid(mt_rand()));
            case 'encrypt':
            case 'sha1':
                return sha1(uniqid(mt_rand(), true));
        }
    }
}