params = $params; $this->xml_data = isset($params['biz_content']) ? $this->xmlToArray($params['biz_content']) : ''; $this->life_data = isset($this->xml_data['AppId']) ? AlipayLifeService::AppidLifeRow(['appid'=>$this->xml_data['AppId']]) : ''; // 当前生活号是否存在 if(empty($this->life_data)) { file_put_contents('./ssssss.txt', 111); die('life error'); } } /** * xml转属组 * @author Devil * @blog http://gong.gg/ * @version 1.0.0 * @date 2018-10-22 * @desc description * @param [string] $xmltext [xml数据] * @return [array] [属组] */ public function xmlToArray($xmltext) { libxml_disable_entity_loader(true); return json_decode(json_encode(simplexml_load_string($xmltext, 'SimpleXMLElement', LIBXML_NOCDATA)), true); } /** * 属组转url字符串 * @author Devil * @blog http://gong.gg/ * @version 1.0.0 * @date 2018-10-22 * @desc description * @param [array] $data [输入参数-数组] * @return [string] [url字符串] */ public function ArrayToUrlString($data) { $ur_lstring = ''; ksort($data); foreach($data AS $key=>$val) { if(!in_array($key, ['sign'])) { $ur_lstring .= "$key=$val&"; } } return substr($ur_lstring, 0, -1); } /** * 校验 * @author Devil * @blog http://gong.gg/ * @version 1.0.0 * @date 2018-10-22 * @desc description */ public function Check() { if($this->OutRsaVerify($this->ArrayToUrlString($this->params), $this->params['sign'])) { file_put_contents('./ssssss.txt', 222); $response_xml = 'true'.$this->life_data['rsa_public'].''; } else { file_put_contents('./ssssss.txt', 333); $response_xml = 'falseVERIFY_FAILED'.$this->life_data['rsa_public'].''; } $return_xml = ' '.$this->life_data['rsa_public'].' true '.$this->MyRsaSign($response_xml).' RSA2 '; file_put_contents('./ssssss.txt', $return_xml); die($return_xml); } /** * [MyRsaSign 签名字符串] * @author Devil * @blog http://gong.gg/ * @version 1.0.0 * @datetime 2017-09-24T08:38:28+0800 * @param [string] $prestr [需要签名的字符串] * @return [string] [签名结果] */ private function MyRsaSign($prestr) { $res = "-----BEGIN PRIVATE KEY-----\n"; $res .= wordwrap($this->life_data['rsa_private'], 64, "\n", true); $res .= "\n-----END PRIVATE KEY-----"; $res = '-----BEGIN RSA PRIVATE KEY----- MIIEogIBAAKCAQEAuxAXbZitfaALDaevrWVITveMu2fh3L8t3p/5WGPNEVOqCnL3 v8EeYZWOLSuBHhpJaLb7Q3HrPWynzpcJ2C17+DxCVS3Js8J/iAgiJGJB4f8wZuPB wqKncGXdrAtN6EYp3H9K1IQeCmGN9di4Ht7igDDREnVWrUIc1Q6O64KDg8YLhWaT f2FMFvdPKiH9tijIZuvtYxxOUkHmgG6N7+IIvKPLdYde0dt/eTy6L1wbXSWoStfm FYd38vywt51N6AlChh/XAQmUGYTq1sW+PFXg2MrDyyWIEZxGb1dINhlMgXMqxTro po31kXa09vUffNvPWVmR38iT9lY+n6ZWSVzH3QIDAQABAoIBAF1xwmJLHI9evWbK 12VE7QQVgUW0tQ0yq1VEkKho4m2/X3fsynoNnIGe1fEWhF9nPjiC/61HYP3EI2d9 57sHrZ/pajFmuBWGGXL4rSWDt+mPMryTFZ2G5yGsoTlqRDa9pfex1s2mWeNRrDqd UgyJxpfGywnvd6cBGaoMpbRb9BqEnzbt7axRcT2YGSWpVdLeTO/kXIbrZB7JMK8C PQXZwibN/JYdPIxx6aUHZIHKcgognbv2+H/p/c/ezqeVWvFmNTPsMKkZO+iGrPJq sCV0//rf7F4apDL9cpQG/Pfm964IjlOypWTKSAHq3Fv2UaI5w46WPVYmgscFj8G/ 1ZD6w4ECgYEA5A7ontAwCAz+Qu+HT4/2dJmqbFPWypXIAvp6MBFGhDuwPXMDFRWp dMfaewSiCbFdm+ndaiRj+6zPWLUTJXSUJrsT3Bzij3GUfKRi6hWE9kBihrq6IW/6 Pm7RnWv0hsCX4uo8EFBdABPtZPg4/T94Q8R4JI+mTJBxAbalI+dtFU0CgYEA0fta zz3sfM00IJfbkmNIZVz8mBIaV4nDYc8nrdUrvk1fMHRjVK9mHrgxxLuqIkaHAWk/ AxMKcvRE6HuehCtx7dgEO+jQUlKfRDpdbcKHHmzONnrSUiWRqQdQID/kf4ZlG3AT 1xMF3cuV3mJ2JqVVHKIs8yq50Q8YN00Rd5CF9NECgYBnOPRDBZnn2vGunDnTYia7 6d2AQIZElXy9FF//p6ISMe34Mjlf7rkPWXHjIlqxJm1nJ3gHFceHX1VOIk8zMcvo p946T3ygTllV/RWkO+89gjDWKGgcwFE0tvX7WaSI5V0Z4Mkk3Srq4RofDFbHEVY+ 3gs/CSHNH8d2bhPa52GxNQKBgCaKiS9ywT5i98dnuCCVYotgVuieogEhQyBnwnOw pdfHIcqmAjlf/FF1I4VloKOr6EnFBJDO5OMWnLNDRWQjCUVLmfNZFyuVCLCgOdfU lbJq7CqpvoLfbG3m7rkMoScbBuHTX4Dhd/kuzfJEhkUvoYCg77kuRW7u41X7KlKU z1GRAoGAHG6t5qlsBMWNip9COutDqjhZOttKRrEmO4BAlEIp7QmYqGHpswtUzfaT OnypziGK4leDru4rMIRH1V/uW8DIx9ro5rvCg3aZKXYUaBQsNxlJ/zw3pUK6bWip Cl5ziCXv0fJvk1MWArRAk5SpWEuIU7Le2IUw8+bEB3F0bb3gE2U= -----END RSA PRIVATE KEY-----'; $pkeyid = openssl_pkey_get_private($res); return openssl_sign($prestr, $sign, $pkeyid, OPENSSL_ALGO_SHA256) ? base64_encode($sign) : null; } /** * [MyRsaDecrypt RSA解密] * @author Devil * @blog http://gong.gg/ * @version 1.0.0 * @datetime 2017-09-24T09:12:06+0800 * @param [string] $content [需要解密的内容,密文] * @return [string] [解密后内容,明文] */ private function MyRsaDecrypt($content) { $res = "-----BEGIN PUBLIC KEY-----\n"; $res .= wordwrap($this->life_data['rsa_private'], 64, "\n", true); $res .= "\n-----END PUBLIC KEY-----"; $res = openssl_get_privatekey($res); $content = base64_decode($content); $result = ''; for($i=0; $ilife_data['out_rsa_public'], 64, "\n", true); $res .= "\n-----END PUBLIC KEY-----"; $pkeyid = openssl_pkey_get_public($res); $sign = base64_decode($sign); if($pkeyid) { $verify = openssl_verify($prestr, $sign, $pkeyid, OPENSSL_ALGO_SHA256); openssl_free_key($pkeyid); } return (isset($verify) && $verify == 1) ? true : false; } } ?>