/**
* 模板消息,申请后获取模板id:FDfSaS63i3sVCRw0e5hTvjnLO6hMpjGD8HmFHIEeGw4,示例为成为会员通知,
{{first.DATA}}
昵称:{{keyword1.DATA}}
手机:{{keyword2.DATA}}
成为会员赠送积分:{{keyword3.DATA}}
会员级别:{{keyword4.DATA}}
会员卡号:{{keyword5.DATA}}
{{remark.DATA}}
token.php为获取token文件
*/
//define your token
define("TOKEN", "weixin");
$wechatObj = new wechatCallbackapiTest();
$wechatObj->responseMsg();
class wechatCallbackapiTest
{
public function valid()
{
$echoStr = $_GET["echostr"];
//valid signature , option
if($this->checkSignature()){
echo $echoStr;
exit;
}
}
public function responseMsg()
{
//get post data, May be due to the different environments
$postStr = $GLOBALS["HTTP_RAW_POST_DATA"];
//extract post data
if (!empty($postStr)){
/* libxml_disable_entity_loader is to prevent XML eXternal Entity Injection,
the best way is to check the validity of xml by yourself */
libxml_disable_entity_loader(true);
$postObj = simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);
$fromUsername = $postObj->FromUserName;
$toUsername = $postObj->ToUserName;
$keyword = trim($postObj->Content);
$time = time();
if(!empty( $keyword ))
{
include("token.php");
$url="https://api.weixin.qq.com/cgi-bin/message/template/send?access_token={$token}";
$a=array("first"=>array("value"=>"欢迎加入会员中心","color"=>"#FF0000"),"keyword1"=>array("value"=>"张三","color"=>"#FF0000"),"keyword2"=>array("value"=>"13455555555","color"=>"#FF0000"),"keyword3"=>array("value"=>"100","color"=>"#FF0000"),"keyword4"=>array("value"=>"铜牌会员","color"=>"#FF0000"),"keyword5"=>array("value"=>"001","color"=>"#FF0000"),"remark"=>array("value"=>"点击查看更多优惠","color"=>"#FF0000"));
$b=array("touser"=>"{$fromUsername}","template_id"=>"FDfSaS63i3sVCRw0e5hTvjnLO6hMpjGD8HmFHIEeGw4","url"=>"http://www.qq.com","topcolor"=>"#FF0000","data"=>$a);
$post=json_encode($b);
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);//url
curl_setopt($ch, CURLOPT_POST, 1); //post
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
curl_exec($ch);
curl_close($ch);
}else{
echo "Input something...";
}
}else {
echo "";
exit;
}
}
private function checkSignature()
{
// you must define TOKEN by yourself
if (!defined("TOKEN")) {
throw new Exception('TOKEN is not defined!');
}
$signature = $_GET["signature"];
$timestamp = $_GET["timestamp"];
$nonce = $_GET["nonce"];
$token = TOKEN;
$tmpArr = array($token, $timestamp, $nonce);
// use SORT_STRING rule
sort($tmpArr, SORT_STRING);
$tmpStr = implode( $tmpArr );
$tmpStr = sha1( $tmpStr );
if( $tmpStr == $signature ){
return true;
}else{
return false;
}
}
}
?>