public function index(){ //判斷是否為認證 if (isset($_GET['echostr'])) { //如果認證去驗證 $this->valid(); }else{ //否則接收客戶發送消息 $this->responseMsg(); } } //驗證前置方法 public function valid() { $echoStr = $_GET["echostr"]; if($this->checkSignature()){ header('content-type:text'); echo $echoStr; exit; }else{ echo $echoStr.'+++'.TOKEN; exit; } } //簽名校驗 private function checkSignature() { //微信加密簽名 $signature = $_GET["signature"]; //時間戳 $timestamp = $_GET["timestamp"]; //隨機數 $nonce = $_GET["nonce"]; //服務端配置的TOKEN $token = '自己配置的TOKEN'; //將token,時間戳,隨機數進行字典排序 $tmpArr = array($token, $timestamp, $nonce); sort($tmpArr, SORT_STRING); //拼接字符串 $tmpStr = implode( $tmpArr ); $tmpStr = sha1( $tmpStr ); if( $tmpStr == $signature ){ return true; }else{ return false; } } public function responseMsg() { //接收來自小程序的客戶消息JSON $postStr = $GLOBALS["HTTP_RAW_POST_DATA"]; if (!empty($postStr) && is_string($postStr)){ //禁止引用外部xml實體 //libxml_disable_entity_loader(true); //$postObj = simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA); $postArr = json_decode($postStr,true); if(!empty($postArr['MsgType']) && $postArr['MsgType'] == 'text'){ //文本消息 $fromUsername = $postArr['FromUserName']; //發送者openid $toUserName = $postArr['ToUserName']; //小程序id $textTpl = array( "ToUserName"=>$fromUsername, "FromUserName"=>$toUserName, "CreateTime"=>time(), "MsgType"=>"transfer_customer_service", ); exit(json_encode($textTpl)); }elseif(!empty($postArr['MsgType']) && $postArr['MsgType'] == 'image'){ //圖文消息 $fromUsername = $postArr['FromUserName']; //發送者openid $toUserName = $postArr['ToUserName']; //小程序id $textTpl = array( "ToUserName"=>$fromUsername, "FromUserName"=>$toUserName, "CreateTime"=>time(), "MsgType"=>"transfer_customer_service", ); exit(json_encode($textTpl)); }elseif($postArr['MsgType'] == 'event' && $postArr['Event']=='user_enter_tempsession'){ //進入客服動作 $fromUsername = $postArr['FromUserName']; //發送者openid $content = '您好,有什么能幫助你?'; $data=array( "touser"=>$fromUsername, "msgtype"=>"text", "text"=>array("content"=>$content) ); $json = json_encode($data,JSON_UNESCAPED_UNICODE); //php5.4+ $access_token = $this->get_accessToken(); /* * POST發送https請求客服接口api */ $url = "https://api.weixin.qq.com/cgi-bin/message/custom/send?access_token=".$access_token; //以'json'格式發送post的https請求 $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_POST, 1); // 發送一個常規的Post請求 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE); if (!empty($json)){ curl_setopt($curl, CURLOPT_POSTFIELDS,$json); } curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1); //curl_setopt($curl, CURLOPT_HTTPHEADER, $headers ); $output = curl_exec($curl); if (curl_errno($curl)) { echo 'Errno'.curl_error($curl);//捕抓異常 } curl_close($curl); if($output == 0){ echo 'success';exit; } }else{ exit('aaa'); } }else{ echo ""; exit; } } /* 調用微信api,獲取access_token,有效期7200s -xzz0704 */ public function get_accessToken(){ /* 在有效期,直接返回access_token */ if(S('access_token')){ return S('access_token'); } /* 不在有效期,重新發送請求,獲取access_token */ else{ $url = 'https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=wx6056****&secret=30e46f3ef07b****'; $result = curl_get_https($url); $res = json_decode($result,true); //json字符串轉數組 if($res){ S('access_token',$res['access_token'],7100); return S('access_token'); }else{ return 'api return error'; } } } public function message(){ $code = $_GET['code']; $appid='wx6da1e8575401a942'; $appSecret='e64fa3f371bb91bfc2b6c28f008f3174'; $url = 'https://api.weixin.qq.com/sns/jscode2session?appid='.$appid.'&secret='.$appSecret.'&js_code='.$code.'&grant_type=authorization_code'; $res = $this->http_request($url); $res1 = json_decode($res); $access_token = $this->oauth2_access_token($code); $this->ajaxReturn(array('data'=>$res1,'access_token'=>$access_token)); } public function oauth2_access_token($code) { $appid='wx6da1e8575401a942'; $appSecret='e64fa3f371bb91bfc2b6c28f008f3174'; $url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=".$appid."&secret=".$appSecret."&code=".$code."&grant_type=authorization_code"; $res = $this->http_request($url); return json_decode($res, true); } protected function http_request($url, $data = null) { $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, $url); curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE); if (!empty($data)){ curl_setopt($curl, CURLOPT_POST, 1); curl_setopt($curl, CURLOPT_POSTFIELDS, $data); } curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE); $output = curl_exec($curl); curl_close($curl); return $output; }