class.wechatutil.php 5.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149
  1. <?php
  2. /**
  3. * Created by PhpStorm.
  4. * User: Administrator
  5. * Date: 2017/3/15 0015
  6. * Time: 15:18
  7. */
  8. class WechatUtil
  9. {
  10. private $appId;
  11. private $appSecret;
  12. public function __construct($appId,$appSecret) {
  13. $this->appId = $appId;
  14. $this->appSecret = $appSecret;
  15. }
  16. public function getSignPackage() {
  17. $jsapiTicket = $this->getJsApiTicket();
  18. // 注意 URL 一定要动态获取,不能 hardcode.
  19. $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
  20. $url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
  21. $timestamp = time();
  22. $nonceStr = $this->createNonceStr();
  23. // 这里参数的顺序要按照 key 值 ASCII 码升序排序
  24. $string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr&timestamp=$timestamp&url=$url";
  25. $signature = sha1($string);
  26. $signPackage = array(
  27. "appId" => $this->appId,
  28. "nonceStr" => $nonceStr,
  29. "timestamp" => $timestamp,
  30. "url" => $url,
  31. "signature" => $signature,
  32. "rawString" => $string
  33. );
  34. return $signPackage;
  35. }
  36. private function createNonceStr($length = 16) {
  37. $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
  38. $str = "";
  39. for ($i = 0; $i < $length; $i++) {
  40. $str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
  41. }
  42. return $str;
  43. }
  44. private function getJsApiTicket() {
  45. // jsapi_ticket 应该全局存储与更新,以下代码以写入到文件中做示例
  46. $key = 'ACCESSTOKEN:'.$this->appId;
  47. $data = '';
  48. //判断指定键是否存在
  49. if(oo::commonOprRedis('common')->exists($key)){
  50. //根据键名获取键值
  51. $data = json_decode(oo::commonOprRedis('common')->get($key));
  52. }
  53. if(!isset($data->expire_time) || !isset($data->jsapi_ticket)) {
  54. $data = json_decode('{"jsapi_ticket":"","expire_time":0}');
  55. }
  56. if ($data->expire_time < time()) {
  57. $accessToken = $this->getAccessToken();
  58. // 如果是企业号用以下 URL 获取 ticket
  59. // $url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
  60. $url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
  61. $res = json_decode($this->httpGet($url));
  62. $ticket = $res->ticket;
  63. if ($ticket) {
  64. $data->expire_time = time() + 7000;
  65. $data->jsapi_ticket = $ticket;
  66. //将access_token存储到Redis中
  67. oo::commonOprRedis('common')->set($key, json_encode($data));
  68. }
  69. } else {
  70. $ticket = $data->jsapi_ticket;
  71. }
  72. return $ticket;
  73. }
  74. public function getAccessToken() {
  75. // access_token 应该全局存储与更新,以下代码以写入到文件中做示例
  76. $key = 'ACCESSTOKEN:'.$this->appId;
  77. $data = '';
  78. //判断指定键是否存在
  79. if(oo::commonOprRedis('common')->exists($key)){
  80. //根据键名获取键值
  81. $data = json_decode(oo::commonOprRedis('common')->get($key));
  82. }
  83. if(!isset($data->access_token) || !isset($data->expire_time)) {
  84. $data = json_decode('{"access_token":"","expire_time":0}');
  85. }
  86. if ($data->expire_time < time()) {
  87. oo::logs()->debug3('####expire.appId:'.$this->appId, 'wechatutil.php');
  88. // 如果是企业号用以下URL获取access_token
  89. // $url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$this->appId&corpsecret=$this->appSecret";
  90. $url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
  91. $res = json_decode($this->httpGet($url));
  92. $access_token = $res->access_token;
  93. if ($access_token) {
  94. $data->expire_time = time() + 7000;
  95. $data->access_token = $access_token;
  96. //将access_token存储到Redis中
  97. oo::commonOprRedis('common')->set($key, json_encode($data));
  98. }
  99. } else {
  100. $access_token = $data->access_token;
  101. }
  102. return $access_token;
  103. }
  104. private function httpGet($url) {
  105. $curl = curl_init();
  106. curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
  107. curl_setopt($curl, CURLOPT_TIMEOUT, 500);
  108. // 为保证第三方服务器与微信服务器之间数据传输的安全性,所有微信接口采用https方式调用,必须使用下面2行代码打开ssl安全校验。
  109. // 如果在部署过程中代码在此处验证失败,请到 http://curl.haxx.se/ca/cacert.pem 下载新的证书判别文件。
  110. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  111. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);
  112. curl_setopt($curl, CURLOPT_URL, $url);
  113. $res = curl_exec($curl);
  114. curl_close($curl);
  115. return $res;
  116. }
  117. private function get_php_file($filename) {
  118. return trim(substr(file_get_contents($filename, true), 15));
  119. }
  120. private function set_php_file($filename, $content) {
  121. $fp = fopen($filename, "w");
  122. fwrite($fp, "<?php exit();?>" . $content);
  123. fclose($fp);
  124. }
  125. }