156 lines
7.1 KiB
PHP
156 lines
7.1 KiB
PHP
<?php
|
||
|
||
namespace web\admin\ap;
|
||
|
||
class transfer {
|
||
static function setwhere($db, $post) {
|
||
$query = $post->get('query');
|
||
$csql = new \ciy\sql('ap_transfer');
|
||
$liid = objint($query, 'liid');
|
||
if ($liid > 0)
|
||
$csql->where('orderstatus', $liid);
|
||
$val = objstr($query, 'id');
|
||
if (!empty($val) && $val[0] == 'P')
|
||
$csql->where('id', substr($val, 1));
|
||
$csql->wherenumrange('amount', objstr($query, 'amount_1'), objstr($query, 'amount_2'), 100);
|
||
$csql->wheredaterange('addtimes', objstr($query, 'addtimes'));
|
||
$csql->where('thirdno like', objstr($query, 'thirdno'));
|
||
$order = objstr($query, 'order', 'id desc');
|
||
$csql->order($order);
|
||
$query['order'] = $order;
|
||
return [$query, $csql];
|
||
}
|
||
|
||
public static function json_list() {
|
||
global $db;
|
||
$rsuser = verifyfast();
|
||
$post = new \ciy\post();
|
||
list($where, $csql) = self::setwhere($db, $post);
|
||
$pageno = $post->getint('pageno', 1);
|
||
$pagecount = $post->getint('pagecount', 10);
|
||
$csql->limit($pageno, $pagecount);
|
||
$mainrowcount = $post->getint('count');
|
||
$rows = $db->get($csql, $mainrowcount);
|
||
if ($rows === false)
|
||
return errjson($db->error);
|
||
$ret = array('searchwhere' => $where, 'pageno' => $pageno, 'pagecount' => $pagecount, 'count' => $mainrowcount, 'list' => $rows);
|
||
if ($post->getbool('field')) {
|
||
$field = array();
|
||
$fshow = $db->getfield($field, 'ap_transfer');
|
||
foreach ($field as $fr => $v) {
|
||
if (get('_' . $fr))
|
||
$field[$fr]['c'] = ',' . $field[$fr]['c'];
|
||
}
|
||
$fshow = fieldadd($fshow, $field, 0, '_btn', '操作');
|
||
$ret['field'] = $field;
|
||
$ret['fshow'] = $fshow;
|
||
}
|
||
if ($post->getbool('once')) {
|
||
$ret['once'] = true;
|
||
$input = array();
|
||
$input[] = array('type' => 'input', 'form' => 'id', 'name' => '流水号', 'prop' => ' style="width:8em;"');
|
||
$input[] = array('type' => 'num', 'form' => 'amount', 'name' => '金额', 'prop' => ' style="width:4em;"');
|
||
$input[] = array('type' => 'daterange', 'form' => 'addtimes', 'name' => '创建时间');
|
||
$input[] = array('type' => 'input', 'form' => 'thirdno', 'name' => '三方单号', 'prop' => ' style="width:8em;"');
|
||
$ret['searchinput'] = $input;
|
||
}
|
||
return succjson($ret);
|
||
}
|
||
|
||
public static function json_checksign() {
|
||
global $db;
|
||
$post = new \ciy\post();
|
||
$id = $post->getint('id');
|
||
$csql = new \ciy\sql('ap_transfer');
|
||
$csql->where('id', $id);
|
||
$orderrow = $db->getone($csql);
|
||
if (!is_array($orderrow))
|
||
return errjson('数据不存在');
|
||
$csql = new \ciy\sql('ap_api');
|
||
$csql->where('id', $orderrow['apiid']);
|
||
$apirow = $db->getone($csql);
|
||
if (!is_array($apirow))
|
||
return errjson('API不存在');
|
||
$signs = array();
|
||
$waitsignstr = 'amount=' . $orderrow['amount'] . ',addtimes=' . $orderrow['addtimes'];
|
||
$signs[] = array('hash' => hash('sha256', $waitsignstr), 'sign' => $orderrow['signature']);
|
||
$retsign = self::verifysign_api($apirow['pubkey'], $signs);
|
||
if (is_string($retsign))
|
||
return errjson($retsign);
|
||
return succjson();
|
||
}
|
||
static function verifysign_api($signKey, $signs) {
|
||
if (strpos($signKey, '-----BEGIN RSA PUBLIC KEY-----') === false && strpos($signKey, '-----BEGIN PUBLIC KEY-----') === false)
|
||
$signKey = "-----BEGIN PUBLIC KEY-----\n" . wordwrap($signKey, 64, "\n") . "\n-----END PUBLIC KEY-----";
|
||
|
||
foreach ($signs as $sign) {
|
||
$signbin = hex2bin($sign['sign']);
|
||
if ($signbin === false)
|
||
return errjson('签名格式错误');
|
||
$hashbin = hex2bin($sign['hash']);
|
||
$result = openssl_verify($hashbin, $signbin, $signKey, OPENSSL_ALGO_SHA256);
|
||
if ($result === 0)
|
||
return '数字证书验签失败';
|
||
else if ($result !== 1)
|
||
return '数字证书验签错误:' . openssl_error_string();
|
||
return true;
|
||
}
|
||
}
|
||
public static function json_exportxls() {
|
||
global $db;
|
||
$rsuser = verifyfast();
|
||
//if (nopower($db, $rsuser['id'], 'p e'))
|
||
// return errjson('您未被授权操作');
|
||
$post = new \ciy\post();
|
||
list($where, $csql) = self::setwhere($db, $post);
|
||
$rows = $db->get($csql);
|
||
if (count($rows) > 10000)
|
||
return errjson('将导出' . count($rows) . '条，不建议超过1万条，请筛选缩小范围');
|
||
$fields = array();
|
||
$fields[] = array('style' => 'l', 'width' => 60, 'field' => 'id', 'name' => '行码');
|
||
$fields[] = array('style' => 'l', 'width' => 100, 'field' => 'orderstatus', 'name' => '状态');
|
||
$fields[] = array('style' => 'r', 'width' => 100, 'field' => 'amount', 'name' => '金额');
|
||
$fields[] = array('style' => 'l', 'width' => 100, 'field' => 'addtimes', 'name' => '创建时间');
|
||
$fields[] = array('style' => 'l', 'width' => 100, 'field' => 'uptimes', 'name' => '完成时间');
|
||
$fields[] = array('style' => 'l', 'width' => 150, 'field' => 'thirdno', 'name' => '订单号');
|
||
$fields[] = array('style' => 'l', 'width' => 150, 'field' => 'apiuser', 'name' => 'APIID');
|
||
$fields[] = array('style' => 'l', 'width' => 150, 'field' => 'signature', 'name' => '签名');
|
||
$code_orderstatus = getcatas($db, 'orderstatus');
|
||
$datas = array();
|
||
foreach ($rows as $row) {
|
||
$dat = array();
|
||
foreach ($fields as $field) {
|
||
$field = $field['field'];
|
||
$val = isset($row[$field]) ? $row[$field] : '';
|
||
if ($field == 'id')
|
||
$val = enid($val);
|
||
if ($field == 'orderstatus')
|
||
$val = ccode($code_orderstatus, $val);
|
||
if ($field == 'amount')
|
||
$val = number_format($val / 100, 2);
|
||
if ($field == 'addtimes')
|
||
$val = ($val == 0 ? '--' : date('Y-m-d H:i', $val));
|
||
if ($field == 'uptimes')
|
||
$val = ($val == 0 ? '--' : date('Y-m-d H:i', $val));
|
||
$dat[] = $val;
|
||
}
|
||
$datas[] = $dat;
|
||
}
|
||
$param = array();
|
||
$param['field'] = $fields;
|
||
$param['data'] = $datas;
|
||
$param['sheetname'] = '数据报表';
|
||
$param['titleheight'] = '25'; //列头高度
|
||
$param['landscape'] = true; //横向打印
|
||
$param['fixtopage'] = true; //打印整个工作表
|
||
$param['toptitle'] = '转账单数据报表';
|
||
$str = \ciy\excel::general_excel_xml($param);
|
||
$filename = '';
|
||
if (empty($filename))
|
||
$filename = date('Y-m-d_H-i-s') . rand(1000, 9999);
|
||
$filename .= '.xls';
|
||
file_put_contents(PATH_WEB . 'ud/tmp/' . $filename, $str);
|
||
return succjson(array('url' => '/ud/tmp/' . $filename));
|
||
}
|
||
}
|