WooYun.org

$key = $INI['chinabank']['sec'];


$v_oid     = trim($_POST['v_oid']);  // 商户发送的v_oid定单编号   


$v_pmode   = trim($_POST['v_pmode']); // 支付方式（字符串）   


$v_pstatus = trim($_POST['v_pstatus']);   //支付状态 ：20 成功,30 失败


$v_pstring = trim($_POST['v_pstring']);   // 支付结果信息


$v_amount  = trim($_POST['v_amount']);     // 订单实际支付金额


$v_moneytype = trim($_POST['v_moneytype']); //订单实际支付币种    


$remark1   = trim($_POST['remark1' ]);      //备注字段1


$remark2   = trim($_POST['remark2' ]);     //备注字段2


$v_md5str  = trim($_POST['v_md5str' ]);   //拼凑后的MD5校验值  





/* 重新计算md5的值 */


$text = "{$v_oid}{$v_pstatus}{$v_amount}{$v_moneytype}{$key}";


$md5string = strtoupper(md5($text));








/* 判断返回信息，如果支付成功，并且支付结果可信，则做进一步的处理 */


if ($v_md5str == $md5string) {


	list($_, $order_id, $city_id, $_) = explode('-', $v_oid, 4);


	if($v_pstatus=="20") {





		/* charge */


		if ( $_ == 'charge' ) {


			@list($_, $user_id, $create_time, $_) = explode('-', $v_oid, 4);


		


			


			ZFlow::CreateFromCharge($v_amount, $user_id, $create_time, 'chinabank');


			die('ok');


		}

static public function CreateFromCharge($money,$user_id,$time,$service='alipay',$trade_no=''){





		global $option_service;


		if (!$money || !$user_id || !$time) return 0;


	


		$pay_id = "charge-{$user_id}-{$time}";


		$pay = Table::Fetch('pay', $pay_id);


		if ( $pay ) return 0;


	


		$order_id = ZOrder::CreateFromCharge($money,$user_id,$time,$service);





		if (!$order_id) return 0;





		//insert pay record


		$pay = array(


			'id' => $pay_id,


			'vid' => $trade_no,


			'order_id' => $order_id,


			'bank' => $option_service[$service],


			'currency' => 'CNY',


			'money' => $money,


			'service' => $service,


			'create_time' => $time,


		);


		DB::Insert('pay', $pay);


		ZCredit::Charge($user_id, $money);


		//end//





		//update user money;


	


		$user = Table::Fetch('user', $user_id);


	


		Table::UpdateCache('user', $user_id, array(


					'money' => array( "money + {$money}" ),


					));





		$u = array(


				'user_id' => $user_id,


				'admin_id' => 0,


				'money' => $money,


				'direction' => 'income',


				'action' => 'charge',


				'detail_id' => $pay_id,


				'create_time' => $time,


				);


		return DB::Insert('flow', $u);


	}

Table::UpdateCache('user', $user_id, array(


					'money' => array( "money + {$money}" ),


					));