WooYun.org

if (!empty($_POST))


        {


            foreach($_POST as $key => $data)


            {


                $_GET[$key] = $data;


            }


        }


        /* 引入配置文件 */


		$code = preg_replace( "#[^0-9a-z-]#i", "", $_GET['code'] );


		//require_once DEDEDATA.'/payment/'.$code.'.php';


        /* 取得订单号 */


        $order_sn = trim($_GET['out_trade_no']);


        /*判断订单类型*/


        if(preg_match ("/S-P[0-9]+RN[0-9]/",$order_sn)) {


            //检查支付金额是否相符


            $row = $this->dsql->GetOne("SELECT * FROM #@__shops_orders WHERE oid = '{$order_sn}'");


            if ($row['priceCount'] != $_GET['total_fee'])


            {


                return $msg = "支付失败，支付金额与商品总价不相符!";


            }


            $this->mid = $row['userid'];


            $ordertype="goods";


        }else if (preg_match ("/M[0-9]+T[0-9]+RN[0-9]/", $order_sn)){


            $row = $this->dsql->GetOne("SELECT * FROM #@__member_operation WHERE buyid = '{$order_sn}'");


            //获取订单信息，检查订单的有效性


            if(!is_array($row)||$row['sta']==2) return $msg = "您的订单已经处理，请不要重复提交!";


            elseif($row['money'] != $_GET['total_fee']) return $msg = "支付失败，支付金额与商品总价不相符!";


            $ordertype = "member";


            $product =    $row['product'];


            $pname= $row['pname'];


            $pid=$row['pid'];


            $this->mid = $row['mid'];


        } else {    


            return $msg = "支付失败，您的订单号有问题！";


        }

} else if ($dopost == 'return') { $write_list = array('alipay', 'bank', 'cod', 'yeepay'); if (in_array($code, $write_list)) { require_once DEDEINC.'/payment/'.$code.'.php'; $pay = new $code; $msg=$pay->respond(); ShowMsg($msg, "javascript:;", 0, 3000); exit(); } else { exit('Error:File Type Can\'t Recognized!'); } }