微信公众平台安全模式消息体签名及加解密PHP代码示例

从微信官网下载示例代码，把下面代码覆盖demo.php即可，如有疑惑欢迎私密。<?php/*    椰子园  http://www.yeziyuan.comemail   [e-mail]    CopyRight 2014 All Rights Reserved*/define("TOKEN", "thisisyourselftoken");define("AppID", "nowisyourappid");define("EncodingAESKey", "hereisyourselfencodekay43bit");require_once('wxBizMsgCrypt.php');$wechatObj = new wechatCallbackapiTest();if (!isset($_GET['echostr'])) {    $wechatObj->responseMsg();}else{    $wechatObj->valid();}class wechatCallbackapiTest{    //验证签名    public function valid()    {        $echoStr = $_GET["echostr"];        $signature = $_GET["signature"];        $timestamp = $_GET["timestamp"];        $nonce = $_GET["nonce"];        $tmpArr = array(TOKEN, $timestamp, $nonce);        sort($tmpArr);        $tmpStr = implode($tmpArr);        $tmpStr = sha1($tmpStr);        if($tmpStr == $signature){            echo $echoStr;            exit;        }    }    //响应消息    public function responseMsg()    {        $timestamp  = $_GET['timestamp'];        $nonce = $_GET["nonce"];        $msg_signature  = $_GET['msg_signature'];        $encrypt_type = (isset($_GET['encrypt_type']) && ($_GET['encrypt_type'] == 'aes')) ? "aes" : "raw";                $postStr = $GLOBALS["HTTP_RAW_POST_DATA"];        if (!empty($postStr)){            //解密            if ($encrypt_type == 'aes'){                $pc = new WXBizMsgCrypt(TOKEN, EncodingAESKey, AppID);                                $this->logger(" D \r\n".$postStr);                $decryptMsg = "";  //解密后的明文                $errCode = $pc->DecryptMsg($msg_signature, $timestamp, $nonce, $postStr, $decryptMsg);                $postStr = $decryptMsg;            }            $this->logger(" R \r\n".$postStr);            $postObj = simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);            $RX_TYPE = trim($postObj->MsgType);             //消息类型分离            switch ($RX_TYPE)            {                case "event":                    $result = $this->receiveEvent($postObj);                    break;                case "text":                    $result = $this->receiveText($postObj);                    break;            }            $this->logger(" R \r\n".$result);            //加密            if ($encrypt_type == 'aes'){                $encryptMsg = ''; //加密后的密文                $errCode = $pc->encryptMsg($result, $timeStamp, $nonce, $encryptMsg);                $result = $encryptMsg;                $this->logger(" E \r\n".$result);            }            echo $result;        }else {            echo "";            exit;        }    }    //接收事件消息    private function receiveEvent($object)    {        $content = "";        switch ($object->Event)        {            case "subscribe":                $content = "欢迎关注椰子园，官网http://www.yeziyuan.com ";                break;        }        $result = $this->transmitText($object, $content);        return $result;    }      //接收文本消息    private function receiveText($object)    {        $keyword = trim($object->Content);        if (strstr($keyword, "文本")){            $content = "这是个文本消息";        }else if (strstr($keyword, "单图文")){            $content = array();            $content[] = array("Title"=>"单图文标题",  "Description"=>"单图文内容", "PicUrl"=>"http://discuz.comli.com/weixin/weather/icon/cartoon.jpg", "Url" =>"http://m.cnblogs.com/?u=txw1958");        }else if (strstr($keyword, "图文") || strstr($keyword, "多图文")){            $content = array();            $content[] = array("Title"=>"多图文1标题", "Description"=>"", "PicUrl"=>"http://discuz.comli.com/weixin/weather/icon/cartoon.jpg", "Url" =>"http://m.cnblogs.com/?u=txw1958");            $content[] = array("Title"=>"多图文2标题", "Description"=>"", "PicUrl"=>"http://d.hiphotos.bdimg.com/wisegame/pic/item/f3529822720e0cf3ac9f1ada0846f21fbe09aaa3.jpg", "Url" =>"http://m.cnblogs.com/?u=txw1958");            $content[] = array("Title"=>"多图文3标题", "Description"=>"", "PicUrl"=>"http://g.hiphotos.bdimg.com/wisegame/pic/item/18cb0a46f21fbe090d338acc6a600c338644adfd.jpg", "Url" =>"http://m.cnblogs.com/?u=txw1958");        }else if (strstr($keyword, "音乐")){            $content = array();            $content = array("Title"=>"最炫民族风", "Description"=>"歌手：凤凰传奇", "MusicUrl"=>"http://121.199.4.61/music/zxmzf.mp3", "HQMusicUrl"=>"http://121.199.4.61/music/zxmzf.mp3");        }else{            $content = date("Y-m-d H:i:s",time())."\n".$object->FromUserName."\n技术支持 椰子园";        }        if(is_array($content)){            if (isset($content[0])){                $result = $this->transmitNews($object, $content);            }else if (isset($content['MusicUrl'])){                $result = $this->transmitMusic($object, $content);            }        }else{            $result = $this->transmitText($object, $content);        }$content = "本服务号暂未开发，目前仅供活动测试用，感谢您长期以来对椰子园的支持。";$result = $this->transmitText($object, $content);        return $result;    }     //回复文本消息    private function transmitText($object, $content)    {        $xmlTpl = "<xml>    <ToUserName><![CDATA[%s]]></ToUserName>        <FromUserName><![CDATA[%s]]></FromUserName>        <CreateTime>%s</CreateTime>        <MsgType><![CDATA[text]]></MsgType>        <Content><![CDATA[%s]]></Content>        </xml>";        $result = sprintf($xmlTpl, $object->FromUserName, $object->ToUserName, time(), $content);        return $result;    }     //回复图文消息    private function transmitNews($object, $newsArray)    {        if(!is_array($newsArray)){            return;        }        $itemTpl = "        <item>            <Title><![CDATA[%s]]></Title>            <Description><![CDATA[%s]]></Description>            <PicUrl><![CDATA[%s]]></PicUrl>            <Url><![CDATA[%s]]></Url>        </item>";        $item_str = "";        foreach ($newsArray as $item){            $item_str .= sprintf($itemTpl, $item['Title'], $item['Description'], $item['PicUrl'], $item['Url']);        }        $xmlTpl = "<xml><ToUserName><![CDATA[%s]]></ToUserName>        <FromUserName><![CDATA[%s]]></FromUserName>        <CreateTime>%s</CreateTime>        <MsgType><![CDATA[news]]></MsgType>        <ArticleCount>%s</ArticleCount>        <Articles>$item_str</Articles></xml>";        $result = sprintf($xmlTpl, $object->FromUserName, $object->ToUserName, time(), count($newsArray));        return $result;    }    //回复音乐消息    private function transmitMusic($object, $musicArray)    {        $itemTpl = "<Music>        <Title><![CDATA[%s]]></Title>        <Description><![CDATA[%s]]></Description>        <MusicUrl><![CDATA[%s]]></MusicUrl>        <HQMusicUrl><![CDATA[%s]]></HQMusicUrl>    </Music>";        $item_str = sprintf($itemTpl, $musicArray['Title'], $musicArray['Description'], $musicArray['MusicUrl'], $musicArray['HQMusicUrl']);         $xmlTpl = "<xml>        <ToUserName><![CDATA[%s]]></ToUserName>        <FromUserName><![CDATA[%s]]></FromUserName>        <CreateTime>%s</CreateTime>        <MsgType><![CDATA[music]]></MsgType>        $item_str    </xml>";         $result = sprintf($xmlTpl, $object->FromUserName, $object->ToUserName, time());         return $result;    }    //日志记录    public function logger($log_content)    {        if(isset($_SERVER['HTTP_APPNAME'])){   //SAE            sae_set_display_errors(false);            sae_debug($log_content);            sae_set_display_errors(true);        }else if($_SERVER['REMOTE_ADDR'] != "127.0.0.1"){ //LOCAL            $max_size = 500000;            $log_filename = "log.xml";            if(file_exists($log_filename) and (abs(filesize($log_filename)) > $max_size)){unlink($log_filename);}            file_put_contents($log_filename, date('Y-m-d H:i:s').$log_content."\r\n", FILE_APPEND);        }    }}?>