<?php //回調(diào)開啟 include_once "WXBizMsgCrypt.php"; // 假設(shè)企業(yè)號(hào)在公眾平臺(tái)上設(shè)置的參數(shù)如下 $encodingAesKey = "xxx"; $token = "xxx"; $corpId = "xxx";//填寫自己的相關(guān)參數(shù),與微信公眾平臺(tái)一致 /* ------------使用示例一:驗(yàn)證回調(diào)URL--------------- *企業(yè)開啟回調(diào)模式時(shí),企業(yè)號(hào)會(huì)向驗(yàn)證url發(fā)送一個(gè)get請(qǐng)求 假設(shè)點(diǎn)擊驗(yàn)證時(shí),企業(yè)收到類似請(qǐng)求: * GET /cgi-bin/wxpush?msg_signature=5c45ff5e21c57e6ad56bac8758b79b1d9ac89fd3×tamp=1409659589&nonce=263014780&echostr=P9nAzCzyDtyTWESHep1vC5X9xho%2FqYX3Zpb4yKa9SKld1DsH3Iyt3tP3zNdtp%2B4RPcs8TgAE7OaBO%2BFZXvnaqQ%3D%3D * HTTP/1.1 Host: qy.weixin.qq.com 接收到該請(qǐng)求時(shí),企業(yè)應(yīng) 1.解析出Get請(qǐng)求的參數(shù),包括消息體簽名(msg_signature),時(shí)間戳(timestamp),隨機(jī)數(shù)字串(nonce)以及公眾平臺(tái)推送過來的隨機(jī)加密字符串(echostr), 這一步注意作URL解碼。 2.驗(yàn)證消息體簽名的正確性 3. 解密出echostr原文,將原文當(dāng)作Get請(qǐng)求的response,返回給公眾平臺(tái) 第2,3步可以用公眾平臺(tái)提供的庫(kù)函數(shù)VerifyURL來實(shí)現(xiàn)。 */ // $sVerifyMsgSig = HttpUtils.ParseUrl("msg_signature"); $sVerifyMsgSig = $_GET["msg_signature"] ;//"5c45ff5e21c57e6ad56bac8758b79b1d9ac89fd3"; // $sVerifyTimeStamp = HttpUtils.ParseUrl("timestamp"); $sVerifyTimeStamp = $_GET["timestamp"];//"1409659589"; // $sVerifyNonce = HttpUtils.ParseUrl("nonce"); $sVerifyNonce = $_GET["nonce"];//"263014780"; // $sVerifyEchoStr = HttpUtils.ParseUrl("echostr"); $sVerifyEchoStr = $_GET["echostr"];//"P9nAzCzyDtyTWESHep1vC5X9xho/qYX3Zpb4yKa9SKld1DsH3Iyt3tP3zNdtp+4RPcs8TgAE7OaBO+FZXvnaqQ=="; // 需要返回的明文 $EchoStr = ""; $wxcpt = new WXBizMsgCrypt($token, $encodingAesKey, $corpId); $errCode = $wxcpt->VerifyURL($sVerifyMsgSig, $sVerifyTimeStamp, $sVerifyNonce, $sVerifyEchoStr, $sEchoStr); if ($errCode == 0) { echo $sEchoStr; // // 驗(yàn)證URL成功,將sEchoStr返回 // HttpUtils.SetResponce($sEchoStr); } else { print("ERR: " . $errCode . "\n\n"); } |