WooYun.org

1.https://**.**.**.**


2.https://**.**.**.**/


3.**.**.**.**


4.**.**.**.**


5.**.**.**.**/


6.http://**.**.**.**/

<?php


/**


  * wechat php test


  */





//define your token


$thisfile = basename($_SERVER['PHP_SELF']);


$RootDir = $_SERVER["DOCUMENT_ROOT"].'/base';


include_once "$RootDir/include/database.php";





define("TOKEN", "wholeton");


	


$wechatObj = new wechatCallbackapiTest();





if (!isset($_GET["echostr"])){


	$wechatObj->responseMsg();


}else{


	$wechatObj->valid();


}





exit;





class wechatCallbackapiTest


{


	public function valid()


    {


        $echoStr = $_GET["echostr"];





        //valid signature , option


        if($this->checkSignature()){


        	echo $echoStr;


        }


    }





    public function responseMsg()


    {


		//get post data, May be due to the different environments


		$postStr = $GLOBALS["HTTP_RAW_POST_DATA"];





      	//extract post data


		if (!empty($postStr)){





				//$fw = fopen("/usr/local/WholetonTM/htdocs/wx.txt", "w");	





              	$postObj = simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);


                $fromUsername = $postObj->FromUserName;


                $toUsername = $postObj->ToUserName;


                $event = trim($postObj->Event);


                $EventKey = trim($postObj->EventKey);


               	


				// $g_str .= "fromUsername: ".$fromUsername."\n";


				// $g_str .= "toUsername: ".$toUsername."\n";   


				// $g_str .= "event: ".$event."\n"; 


				// $g_str .= "EventKey: ".str_replace("qrscene_","",$EventKey)."\n";





				//fwrite($fw, $g_str);





				switch ($event) {


					case 'subscribe':


						$focus = 1;


						$scene_id = str_replace("qrscene_","",$EventKey);


						break;


					case 'unsubscribe':


						$focus = 0;


						break;	


					case 'SCAN':


						$focus = 1;


						$scene_id = $postObj->EventKey;


						break;		


				}


				//fwrite($fw, "focus:".$focus."\n");


				global $gblDBConnect;


				$sql_policy_info = "select id from tb_wechat_promote_policy where original_id='$toUsername'";





				//fwrite($fw, "sql_policy_info:".$sql_policy_info."\n");





				$data_policy_info= $gblDBConnect->getOne($sql_policy_info);


				


				$sql_user_obj = "select count(*) as num, id, mac_list from tb_wechat_user_obj where promote_policy_id=".$data_policy_info->id." and wechat_id='$fromUsername'";


				$data_user_obj = $gblDBConnect->getOne($sql_user_obj);





				//fwrite($fw, "sql_user_obj:".$sql_user_obj."\n");





				$sql_edit_mac = "";


				if($focus==1){


					$sql_mac = "select mac from tb_wechat_mac_scene where scene_id=".$scene_id;


					//fwrite($fw, "sql_mac:".$sql_mac."\n");


					$data_mac = $gblDBConnect->getOne($sql_mac);	


					$mac = $data_mac->mac;	


					if ($data_user_obj->mac_list!="") {


					 	$mac_list_ary = explode(",,",$data_user_obj->mac_list);


					 	//fwrite($fw, "mac_list:".$ata_user_obj->mac_list."\n");


					 	if (is_array($mac_list_ary)) {


						 	if (!in_array($mac, $mac_list_ary)) {


						 		//fwrite($fw, " not in_array:".$mac."\n");


						 		$mac_list_ary[] = $mac;


						 		$mac_str = implode(",,", $mac_list_ary);





						 		$sql_edit_mac = "mac_list='$mac_str', ";


						 	}


						 }


					}else {


						//fwrite($fw, " not = mac_list:".$mac."\n");


						$sql_edit_mac = "mac_list='$mac', ";


					} 					 		


				}


				//fwrite($fw, "num".$data_user_obj->num."\n");


				if($data_user_obj->num==0){


				  	$sql_add = "insert into tb_wechat_user_obj(promote_policy_id, wechat_id, mac_list, focus) values($data_policy_info->id, '$fromUsername', '$mac', $focus)";


					//fwrite($fw, "sql_add:".$sql_add."\n");


				 	$gblDBConnect->execute($sql_add);


				 }else{		 				


					$sql_edit = "update tb_wechat_user_obj set ".$sql_edit_mac."focus=$focus where id=".$data_user_obj->id;


				  	//fwrite($fw, "sql_edit:".$sql_edit."\n");


				 	$gblDBConnect->execute($sql_edit);


				}


				exec('/usr/local/WholetonTM/triton/bin/TritonIPCTools -R');


				//fwrite($fw, $g_str);


				//fclose($fw);


			


        }else {


			//$g_str .=  "exit in valid()\n";


        	exit;


        }


    }


	private function receiveEvent($object){


		$content = "";


		


		switch ($object->Event) {


			case 'subscribe':


				 $content = (!empty($object->EventKey))?("\n来自二维码场景 ".str_replace("qrscene_","",$object->EventKey)):"";


				break;


			case 'unsubscribe':


				$content = "取消关注";


				break;	


			case 'SCAN':


				$content = "扫描场景". $object->EventKey;


				break;	


		}


		$fw = fopen("/usr/local/WholetonTM/htdocs/wx1.txt", "w");	


		fwrite($fw, ($object->Event)."\nEventKey:".($object->EventKey)."\n".$content);


		fclose($fw);


		return $content;


	}	


	private function checkSignature()


	{


        $signature = $_GET["signature"];


        $timestamp = $_GET["timestamp"];


        $nonce = $_GET["nonce"];	


        		


		$token = TOKEN;


		$tmpArr = array($token, $timestamp, $nonce);


		sort($tmpArr, SORT_STRING);


		$tmpStr = implode( $tmpArr );


		$tmpStr = sha1( $tmpStr );


		


		if( $tmpStr == $signature ){


			return true;


		}else{


			return false;


		}


	}


}





?>