php 检测submit,submit.php

if(isset($_GET['pid'])){

$queryArr=$_GET;

$is_defend=true;

}elseif(isset($_POST['pid'])){

$queryArr=$_POST;

}else{

@header('Content-Type: text/html; charset=UTF-8');

exit('你还未配置支付接口商户！');

}

$nosession = true;

require './includes/common.php';

@header('Content-Type: text/html; charset=UTF-8');

?>

正在为您跳转到支付页面，请稍候...

body {margin:0;padding:0;}

p {position:absolute;

left:50%;top:50%;

width:330px;height:30px;

margin:-35px 0 0 -160px;

padding:20px;font:bold 14px/30px "宋体", Arial;

background:#f9fafc url(../assets/img/loading.gif) no-repeat 20px 20px;

text-indent:40px;border:1px solid #c5d0dc;}

#waiting {font-family:Arial;}

use \lib\PayUtils;

$prestr=PayUtils::createLinkstring(PayUtils::argSort(PayUtils::paraFilter($queryArr)));

$pid=intval($queryArr['pid']);

if(empty($pid))sysmsg('PID不存在');

$userrow=$DB->query("SELECT `uid`,`gid`,`key`,`mode`,`pay`,`cert`,`status` FROM `pre_user` WHERE `uid`='{$pid}' LIMIT 1")->fetch();

if(!$userrow)sysmsg('商户不存在！');

if(!PayUtils::md5Verify($prestr, $queryArr['sign'], $userrow['key']))sysmsg('签名校验失败，请返回重试！');

if($userrow['status']==0 || $userrow['pay']==0)sysmsg('商户已封禁，无法支付！');

$type=daddslashes($queryArr['type']);

$out_trade_no=daddslashes($queryArr['out_trade_no']);

$notify_url=htmlspecialchars(daddslashes($queryArr['notify_url']));

$return_url=htmlspecialchars(daddslashes($queryArr['return_url']));

$name=htmlspecialchars(daddslashes($queryArr['name']));

$money=daddslashes($queryArr['money']);

$sitename=urlencode(base64_encode($queryArr['sitename']));

if(empty($out_trade_no))sysmsg('订单号(out_trade_no)不能为空');

if(empty($notify_url))sysmsg('通知地址(notify_url)不能为空');

if(empty($return_url))sysmsg('回调地址(return_url)不能为空');

if(empty($name))sysmsg('商品名称(name)不能为空');

if(empty($money))sysmsg('金额(money)不能为空');

if($money<=0 || !is_numeric($money) || !preg_match('/^[0-9.]+$/', $money))sysmsg('金额不合法');

if($conf['pay_maxmoney']>0 && $money>$conf['pay_maxmoney'])sysmsg('最大支付金额是'.$conf['pay_maxmoney'].'元');

if($conf['pay_minmoney']>0 && $money

if(!preg_match('/^[a-zA-Z0-9.\_\-|]+$/',$out_trade_no))sysmsg('订单号(out_trade_no)格式不正确');

$domain=getdomain($notify_url);

if(!empty($conf['blockname'])){

$block_name = explode('|',$conf['blockname']);

foreach($block_name as $rows){

if(strpos($name,$rows)!==false){

$DB->exec("INSERT INTO `pre_risk` (`uid`, `url`, `content`, `date`) VALUES (:uid, :domain, :rows, NOW())", [':uid'=>$pid,':domain'=>$domain,':rows'=>$rows]);

sysmsg($conf['blockalert']?$conf['blockalert']:'该商品禁止出售');

}

}

}

if($conf['cert_force']==1 && $userrow['cert']==0){

sysmsg('当前商户未完成实名认证，无法收款');

}

$trade_no=date("YmdHis").rand(11111,99999);

if(!$DB->exec("INSERT INTO `pre_order` (`trade_no`,`out_trade_no`,`uid`,`addtime`,`name`,`money`,`notify_url`,`return_url`,`domain`,`ip`,`status`) VALUES (:trade_no, :out_trade_no, :uid, NOW(), :name, :money, :notify_url, :return_url, :domain, :clientip, 0)", [':trade_no'=>$trade_no, ':out_trade_no'=>$out_trade_no, ':uid'=>$pid, ':name'=>$name, ':money'=>$money, ':notify_url'=>$notify_url, ':return_url'=>$return_url, ':domain'=>$domain, ':clientip'=>$clientip]))sysmsg('创建订单失败，请返回重试！');

if(empty($type)){

echo "";

exit;

}

// 获取订单支付方式ID、支付插件、支付通道、支付费率

$submitData = \lib\Channel::submit($type, $userrow['gid']);

if($submitData){

if($userrow['mode']==1){

$realmoney = round($money*(100+100-$submitData['rate'])/100,2);

$getmoney = $money;

}else{

$realmoney = $money;

$getmoney = round($money*$submitData['rate']/100,2);

}

$DB->exec("UPDATE pre_order SET type='{$submitData['typeid']}',channel='{$submitData['channel']}',realmoney='$realmoney',getmoney='$getmoney' WHERE trade_no='$trade_no'");

}else{ //选择其他支付方式

echo "";

exit;

}

$order['trade_no'] = $trade_no;

$order['out_trade_no'] = $out_trade_no;

$order['uid'] = $pid;

$order['addtime'] = $date;

$order['name'] = $name;

$order['money'] = $realmoney;

$order['type'] = $submitData['typeid'];

$order['channel'] = $submitData['channel'];

$order['typename'] = $submitData['typename'];

$order['apptype'] = explode(',',$submitData['apptype']);

$loadfile = \lib\Plugin::load2($submitData['plugin'], 'submit', $trade_no);

$channel = \lib\Channel::get($order['channel']);

if(!$channel || $channel['plugin']!=PAY_PLUGIN)sysmsg('当前支付通道信息不存在');

$channel['apptype'] = explode(',',$channel['apptype']);

$ordername = !empty($conf['ordername'])?ordername_replace($conf['ordername'],$order['name'],$order['uid']):$order['name'];

include $loadfile;

?>

正在为您跳转到支付页面，请稍候...

一键复制

编辑

Web IDE

原始数据

按行查看

历史