WooYun.org

$ curl http://www.jiurong.com/log.txt
签名原串:bank_code=01050000&busi_partner=108001&dt_order=20150122163422&id_type=0&money_order=100&no_order=1421915662694&notify_url=https://www.96caifu.com/Home/PayMent/llpayNotify/&oid_partner=201501211000185510&sign_type=MD5&timestamp=20150122163422&url_return=https://www.96caifu.com/Home/PayMent/llpayReturn/&user_id=23667&valid_order=30&version=1.0&key=96caifu_pay_894b64270fc24ee2bd706eca125ea6a2_20150122
签名:75d84b9cf3be1c6419ae4e401f71fcf5
签名原串:bank_code=01050000&busi_partner=108001&dt_order=20150122164024&id_type=0&money_order=100&no_order=1421916024835&notify_url=https://www.96caifu.com/Home/PayMent/llpayNotify/&oid_partner=201501211000185510&sign_type=MD5&timestamp=20150122164024&url_return=https://www.96caifu.com/Home/PayMent/llpayReturn/&user_id=23667&valid_order=30&version=1.0&key=96caifu_pay_894b64270fc24ee2bd706eca125ea6a2_20150122
签名:36228764f5452836a06d3748f0f72aa0
签名原串:bank_code=01050000&busi_partner=108001&dt_order=20150122164243&id_type=0&money_order=100&no_order=1421916163830&notify_url=https://www.96caifu.com/Home/PayMent/llpayNotify/&oid_partner=201501211000185510&sign_type=MD5&timestamp=20150122164243&url_return=https://www.96caifu.com/Home/PayMent/llpayReturn/&user_id=23667&valid_order=30&version=1.0&key=96caifu_pay_894b64270fc24ee2bd706eca125ea6a2_20150122
签名:a74acf2aa9aa78feb65cd7f52ea2eb42
签名原串:bank_code=01050000&busi_partner=108001&dt_order=20150122170845&id_type=0&money_order=100&no_order=1421917725300&notify_url=https://www.96caifu.com/Home/PayMent/llpayNotify/&oid_partner=201501211000185510&pay_type=1&sign_type=MD5&timestamp=20150122170845&url_return=https://www.96caifu.com/Home/PayMent/llpayReturn/&user_id=23667&valid_order=30&version=1.0&key=96caifu_pay_894b64270fc24ee2bd706eca125ea6a2_20150122
签名:c90d0badbbc8cf6064f0eb09db63cee1

php payway.php
输出：{"ret_code":"0000","ret_msg":"\u4ea4\u6613\u6210\u529f"}

<?php
// 模拟第三方支付向服务器发包
// 自行修改商户私密KEY，以及抓包的字符串，其它代码不要动。
// 代码已做兼容处理，web支付和wap支付已做过测试。app的后边有实际案例我再加。
// 我是商户私密KEY
define("KEY", '96caifu_pay_894b64270fc24ee2bd706eca125ea6a2_20150122');
// 支付抓包的值放到这里
$str = <<<STR
抓包文件放这里
STR;
// ====================以下代码不必修改=================================
$arr = json_decode($str, true);
if (json_last_error()) {
    $str = urldecode($str);
    parse_str($str, $str);
    $str = json_encode($str);
    $arr = json_decode($str, true);
}
$acct_name = $arr['acct_name'];//真实姓名
$id_no = $arr['id_no']; // 身份证号
$no_agree = $arr['no_agree']; // 签约协议号
$info_order = $arr['info_order']; // 订单描述信息
$money_order = $arr['money_order']; // 交易金额
$no_order = $arr['no_order']; // 商户唯一订单号
$dt_order = $arr['dt_order']; // 商户订单时间
$sign_type = $arr['sign_type']; // 签名方式
$oid_partner = $arr['oid_partner']; // 商户唯一编号
$pay_type = $arr['pay_type'] == '1' ? 1 : 2; // 2：快捷支付 （默认）D：认证支付
$bank_code = isset($arr['bank_code']) ? $arr['bank_code'] : ""; // 银行代码 
$settle_date = date("Y-m-d"); // 清算日期
$result_pay = 'SUCCESS'; // 支付结果
$oid_paybill = ''; // 连连支付支付单号
$id_type = 0;
$key = KEY;
// 签名
$_acct_name = unicode_encode($acct_name, 'utf-8', true, 'u', '');
$_acct_name = $_acct_name == 'u' ? "" : $_acct_name;
$sign = "bank_code={$bank_code}&amp;acct_name={$_acct_name}&amp;dt_order={$dt_order}&amp;id_no={$id_no}&amp;id_type={$id_type}&amp;money_order={$money_order}&amp;no_agree={$no_agree}&amp;no_order={$no_order}&amp;oid_partner={$oid_partner}&amp;pay_type={$pay_type}&amp;result_pay={$result_pay}&amp;settle_date={$settle_date}&amp;sign_type={$sign_type}";
parse_str($sign, $sign);
$sign = paraFilter($sign);
ksort($sign);
reset($sign);
$sign = createLinkstring($sign) . "&amp;key={$key}";
$sign = md5($sign); // 签名
$url = $arr['notify_url']; // 商户后台通知地址
$fields = json_encode(array(
    'oid_partner' =&gt; $oid_partner,
    'sign_type' =&gt; $sign_type,
    'sign' =&gt; $sign,
    'dt_order' =&gt; $dt_order,
    'no_order' =&gt; $no_order,
    'oid_paybill' =&gt; $oid_paybill,
    'money_order' =&gt; $money_order,
    'result_pay' =&gt; $result_pay,
    'settle_date' =&gt; $settle_date,
    'info_order' =&gt; $info_order,
    'pay_type' =&gt; $pay_type,
    'bank_code' =&gt; $bank_code,
    'no_agree' =&gt; $no_agree,
    'id_type' =&gt; $id_type,
    'id_no' =&gt; $id_no,
    'acct_name' =&gt;$acct_name,
));
$fields = (is_array($fields)) ? http_build_query($fields) : $fields;   
$ch = curl_init($url);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'POST');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Length: ' . strlen($fields)));   
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);   
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields);   
$re=curl_exec($ch);   
curl_close($ch);   
echo $re;
/**
 * 除去数组中的空值和签名参数
 * @param $para 签名参数组
 * return 去掉空值与签名参数后的新签名参数组
 */
function paraFilter($para) {
    $para_filter = array();
    while (list ($key, $val) = each ($para)) {
        if($key == "sign" || $val == "")continue;
        else    $para_filter[$key] = $para[$key];
    }
    return $para_filter;
}
/**
 * 汉字转Unicode编码
 * @param string $str 原始汉字的字符串
 * @param string $encoding 原始汉字的编码
 * @param boot $ishex 是否为十六进制表示（支持十六进制和十进制）
 * @param string $prefix 编码后的前缀
 * @param string $postfix 编码后的后缀
 */
function unicode_encode($str, $encoding = 'UTF-8', $ishex = false, $prefix = '&amp;#', $postfix = ';') {
    $str = iconv($encoding, 'UCS-2', $str);
    $arrstr = str_split($str, 2);
    $unistr = '';
    for($i = 0, $len = count($arrstr); $i < $len; $i++) {
        $dec = $ishex ? bin2hex($arrstr[$i]) : hexdec(bin2hex($arrstr[$i]));
        $unistr .= $prefix . $dec . $postfix;
    }
    return $unistr;
}
/**
 * 把数组所有元素，按照“参数=参数值”的模式用“&amp;”字符拼接成字符串
 * @param $para 需要拼接的数组
 * return 拼接完成以后的字符串
 */
function createLinkstring($para) {
    $arg  = "";
    while (list ($key, $val) = each ($para)) {
        $arg.=$key."=".$val."&amp;";
    }
    $arg = substr($arg,0,count($arg)-2);
    //如果存在转义字符，那么去掉转义
    if(get_magic_quotes_gpc()){$arg = stripslashes($arg);}
    return $arg;
}
/* End of file */