1 <?php
  2 /**
  3  * wechat php test
  4  */
  5  
  6 //define your token
  7 define("TOKEN", "weixin");
  8 $wechatObj = new wechatCallbackapiTest();
  9 //$wechatObj->valid();//接口验证
 10 $wechatObj->responseMsg();//调用回复消息方法
 11 class wechatCallbackapiTest
 12 {
 13  public function valid()
 14  {
 15  $echoStr = $_GET["echostr"];
 16  
 17  //valid signature , option
 18  if($this->checkSignature()){
 19  echo $echoStr;
 20  exit;
 21  }
 22  }
 23  
 24  public function responseMsg()
 25  {
 26  //get post data, May be due to the different environments
 27  $postStr = $GLOBALS["HTTP_RAW_POST_DATA"];
 28  
 29  //extract post data
 30  if (!empty($postStr)){
 31  /* libxml_disable_entity_loader is to prevent XML eXternal Entity Injection,
 32   the best way is to check the validity of xml by yourself */
 33  libxml_disable_entity_loader(true);
 34   $postObj = simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);
 35  $fromUsername = $postObj->FromUserName;
 36  $toUsername = $postObj->ToUserName;
 37  $keyword = trim($postObj->Content);
 38  $time = time();
 39  $msgType = $postObj->MsgType;//消息类型
 40  $event = $postObj->Event;//时间类型，subscribe（订阅）、unsubscribe（取消订阅）
 41  $textTpl = "<xml>
 42   <ToUserName><![CDATA[%s]]></ToUserName>
 43   <FromUserName><![CDATA[%s]]></FromUserName>
 44   <CreateTime>%s</CreateTime>
 45   <MsgType><![CDATA[%s]]></MsgType>
 46   <Content><![CDATA[%s]]></Content>
 47   <FuncFlag>0</FuncFlag>
 48   </xml>"; 
 49    
 50  switch($msgType){
 51   case "event":
 52   if($event=="subscribe"){
 53   $contentStr = "Hi,欢迎关注海仙日用百货!"."n"."回复数字'1',了解店铺地址."."n"."回复数字'2',了解商品种类.";
 54   } 
 55   break;
 56   case "text":
 57   switch($keyword){
 58   case "1":
 59   $contentStr = "店铺地址："."n"."杭州市江干艮山西路233号新东升市场地下室第一排."; 
 60   break;
 61   case "2":
 62   $contentStr = "商品种类:"."n"."杯子、碗、棉签、水桶、垃圾桶、洗碗巾(刷)、拖把、扫把、"
 63    ."衣架、粘钩、牙签、垃圾袋、保鲜袋(膜)、剪刀、水果刀、饭盒等.";
 64   break;
 65   default:
 66   $contentStr = "对不起,你的内容我会稍后回复";
 67   }
 68   break;
 69  }
 70  $msgType = "text";
 71  $resultStr = sprintf($textTpl, $fromUsername, $toUsername, $time, $msgType, $contentStr);
 72  echo $resultStr;
 73  }else {
 74  echo "";
 75  exit;
 76  }
 77  }
 78   
 79  private function checkSignature()
 80  {
 81  // you must define TOKEN by yourself
 82  if (!defined("TOKEN")) {
 83  throw new Exception('TOKEN is not defined!');
 84  }
 85   
 86  $signature = $_GET["signature"];
 87  $timestamp = $_GET["timestamp"];
 88  $nonce = $_GET["nonce"];
 89   
 90  $token = TOKEN;
 91  $tmpArr = array($token, $timestamp, $nonce);
 92  // use SORT_STRING rule
 93  sort($tmpArr, SORT_STRING);
 94  $tmpStr = implode( $tmpArr );
 95  $tmpStr = sha1( $tmpStr );
 96   
 97  if( $tmpStr == $signature ){
 98  return true;
 99  }else{
100  return false;
101  }
102  }
103 }