商城首页(6)

订单支付
在购物车页面,点击提交订单,寻找servlet,把购物车中的商品写入数据库,形成订单,跳转到订单详情页面,显示刚刚从购物车提交到数据库的商品(本订单的商品),在地址姓名等栏中,填入相应信息,选择付款银行,点击确认订单(找servlet).
在servlet中
1.要将新填内容填入数据库,
2.要通过第三方支付平台进行支付
3.修改订单的state为1,已支付状态
web

public void submitOrder(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		Map<String,String[]> map=request.getParameterMap();
		Order order=new Order();
		HttpSession session=request.getSession();
		Order or=(Order) session.getAttribute("order");
		ProductService service=new ProductService();
		try {
			BeanUtils.populate(order,map);
			service.updateOrder(order);
			
		} catch (Exception e) {
			
			e.printStackTrace();
		}
		// 获得 支付必须基本数据
				String orderid = request.getParameter("oid");
				String money = or.getTotal()+"";
				// 银行
				String pd_FrpId = request.getParameter("pd_FrpId");

				// 发给支付公司需要哪些数据
				String p0_Cmd = "Buy";
				String p1_MerId = ResourceBundle.getBundle("merchantInfo").getString("p1_MerId");
				String p2_Order = orderid;
				String p3_Amt = money;
				String p4_Cur = "CNY";
				String p5_Pid = "";
				String p6_Pcat = "";
				String p7_Pdesc = "";
				// 支付成功回调地址 ---- 第三方支付公司会访问、用户访问
				// 第三方支付可以访问网址
				String p8_Url = ResourceBundle.getBundle("merchantInfo").getString("callback");
				String p9_SAF = "";
				String pa_MP = "";
				String pr_NeedResponse = "1";
				// 加密hmac 需要密钥
				String keyValue = ResourceBundle.getBundle("merchantInfo").getString(
						"keyValue");
				String hmac = PaymentUtil.buildHmac(p0_Cmd, p1_MerId, p2_Order, p3_Amt,
						p4_Cur, p5_Pid, p6_Pcat, p7_Pdesc, p8_Url, p9_SAF, pa_MP,
						pd_FrpId, pr_NeedResponse, keyValue);
				
				
				String url = "https://www.yeepay.com/app-merchant-proxy/node?pd_FrpId="+pd_FrpId+
								"&p0_Cmd="+p0_Cmd+
								"&p1_MerId="+p1_MerId+
								"&p2_Order="+p2_Order+
								"&p3_Amt="+p3_Amt+
								"&p4_Cur="+p4_Cur+
								"&p5_Pid="+p5_Pid+
								"&p6_Pcat="+p6_Pcat+
								"&p7_Pdesc="+p7_Pdesc+
								"&p8_Url="+p8_Url+
								"&p9_SAF="+p9_SAF+
								"&pa_MP="+pa_MP+
								"&pr_NeedResponse="+pr_NeedResponse+
								"&hmac="+hmac;

				//重定向到第三方支付平台
				response.sendRedirect(url);
	}

public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// 获得回调所有数据
				String p1_MerId = request.getParameter("p1_MerId");
				String r0_Cmd = request.getParameter("r0_Cmd");
				String r1_Code = request.getParameter("r1_Code");
				String r2_TrxId = request.getParameter("r2_TrxId");
				String r3_Amt = request.getParameter("r3_Amt");
				String r4_Cur = request.getParameter("r4_Cur");
				String r5_Pid = request.getParameter("r5_Pid");
				String r6_Order = request.getParameter("r6_Order");
				String r7_Uid = request.getParameter("r7_Uid");
				String r8_MP = request.getParameter("r8_MP");
				String r9_BType = request.getParameter("r9_BType");
				String rb_BankId = request.getParameter("rb_BankId");
				String ro_BankOrderId = request.getParameter("ro_BankOrderId");
				String rp_PayDate = request.getParameter("rp_PayDate");
				String rq_CardNo = request.getParameter("rq_CardNo");
				String ru_Trxtime = request.getParameter("ru_Trxtime");
				// 身份校验 --- 判断是不是支付公司通知你
				String hmac = request.getParameter("hmac");
				String keyValue = ResourceBundle.getBundle("merchantInfo").getString(
						"keyValue");

				// 自己对上面数据进行加密 --- 比较支付公司发过来hamc
				boolean isValid = PaymentUtil.verifyCallback(hmac, p1_MerId, r0_Cmd,
						r1_Code, r2_TrxId, r3_Amt, r4_Cur, r5_Pid, r6_Order, r7_Uid,
						r8_MP, r9_BType, keyValue);
						
						
				if (isValid) {
					// 响应数据有效
					if (r9_BType.equals("1")) {
						// 浏览器重定向
						response.setContentType("text/html;charset=utf-8");
						response.getWriter().println("<h1>付款成功！等待商城进一步操作！等待收货...</h1>");
					} else if (r9_BType.equals("2")) {
						// 服务器点对点 --- 支付公司通知你
						ProductService service=new ProductService();
						service.updateState(r6_Order);
						System.out.println("付款成功！");
						// 修改订单状态 为已付款
						// 回复支付公司
						response.getWriter().print("success");
					}
				} else {
					// 数据无效
					System.out.println("数据被篡改！");
				}
			}

service

public void updateOrder(Order order) {
		ProductDao dao=new ProductDao();
		try {
			dao.updateOrder(order);
		} catch (SQLException e) {
			
			e.printStackTrace();
		}
	}

	public void updateState(String oid) {
		ProductDao dao=new ProductDao();
		try {
			dao.updateState(oid);
		} catch (SQLException e) {
			
			e.printStackTrace();
		}
	}

CallbackSevlet在支付成功后,客户端与第三方平台会访问CallbackServlet,服务器中的此资源会给与相应的response
需要提供两个servlet一个对提交的数据进行密钥加密,
一个提交成功后访问的服务器资源