alipay_notify.aspx.cs

易想商城系统

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Text;
using System.Security.Cryptography;
using System.Collections.Specialized;
using System.IO;
using System.Data.SqlClient;
using System.Data.OleDb;
using System.Net;
public partial class Alipay_Notify : System.Web.UI.Page
{   
    
    /// <summary>
    /// created by sunzhizhi 2006.5.21,[e-mail]。
    /// </summary>

    public static string GetMD5(string s)
    {

        /// <summary>
        /// 与ASP兼容的MD5加密算法
        /// </summary>

        MD5 md5 = new MD5CryptoServiceProvider();
        byte[] t = md5.ComputeHash(Encoding.GetEncoding("utf-8").GetBytes(s));
        StringBuilder sb = new StringBuilder(32);
        for (int i = 0; i < t.Length; i++)
        {
            sb.Append(t[i].ToString("x").PadLeft(2, '0'));
        }
        return sb.ToString();
    }
    public static string[] BubbleSort(string[] R)
    {
        /// <summary>
        /// 冒泡排序法
        /// </summary>

        int i, j; //交换标志 
        string temp;

        bool exchange;

        for (i = 0; i < R.Length; i++) //最多做R.Length-1趟排序 
        {
            exchange = false; //本趟排序开始前，交换标志应为假

            for (j = R.Length - 2; j >= i; j--)
            {
                if (System.String.CompareOrdinal(R[j + 1], R[j]) < 0)　//交换条件
                {
                    temp = R[j + 1];
                    R[j + 1] = R[j];
                    R[j] = temp;

                    exchange = true; //发生了交换，故将交换标志置为真 
                }
            }

            if (!exchange) //本趟排序未发生交换，提前终止算法 
            {
                break;
            }

        }
        return R;
    }
    //获取远程服务器ATN结果
    public String Get_Http(String a_strUrl, int timeout)
    {
        string strResult;
        try
        {
            HttpWebRequest myReq = (HttpWebRequest)HttpWebRequest.Create(a_strUrl);
            myReq.Timeout = timeout;
            HttpWebResponse HttpWResp = (HttpWebResponse)myReq.GetResponse();
            Stream myStream = HttpWResp.GetResponseStream();
            StreamReader sr = new StreamReader(myStream, Encoding.Default);
            StringBuilder strBuilder = new StringBuilder();
            while (-1 != sr.Peek())
            {
                strBuilder.Append(sr.ReadLine());
            }
            strResult = strBuilder.ToString();
        }
        catch (Exception exp)
        {
            strResult = "错误：" + exp.Message;
        }
        return strResult;
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        /// <summary>
        /// created by sunzhizhi 2006.5.21,[e-mail]。
        /// </summary>
        /// 
        //YX_sql Exsql = new YX_sql();
        string userkey = "";
        string userpartner = "";
        //string cmd = "SELECT top 1 YX_ZhangHao,YX_MiYao FROM yx_payonline where yx_jiekou='支付宝支付接口' and YX_ISOPEN=1";
        //SqlDataReader dr = Exsql.Re_dr(cmd);
        //try
        //{
        //    if (dr.Read())
        //    {
        //        userkey = dr["YX_ZhangHao"].ToString();
        //        userpartner = dr["YX_MiYao"].ToString();
        //    }
        //}
        //catch (Exception ex)
        //{
        //    Response.Write("查询系统支付宝信息时出错！" + ex.Message);
        //}
        //finally
        //{
        //    dr.Close();
        //}
        string alipayNotifyURL = "https://www.alipay.com/cooperate/gateway.do?";
        string partner = userpartner; 		//partner合作伙伴id（必须填写）
        string key = userkey; //partner 的对应交易安全校验码（必须填写）
        alipayNotifyURL = alipayNotifyURL + "service=notify_verify" + "&partner=" + partner + "&notify_id=" + Request.Form["notify_id"];
        //获取支付宝ATN返回结果，true是正确的订单信息，false 是无效的
        string responseTxt = Get_Http(alipayNotifyURL, 120000);
        int i;
        NameValueCollection coll;
        //Load Form variables into NameValueCollection variable.
        coll = Request.Form;
        // Get names of all forms into a string array.
        String[] requestarr = coll.AllKeys;
        //进行排序；
        string[] Sortedstr = BubbleSort(requestarr);
        //构造待md5摘要字符串 ；
        string prestr = "";
        for (i = 0; i < Sortedstr.Length; i++)
        {
            if (Request.Form[Sortedstr[i]] != "" && Sortedstr[i] != "sign" && Sortedstr[i] != "sign_type")
            {
                if (i == Sortedstr.Length - 1)
                {
                    prestr = prestr + Sortedstr[i] + "=" + Request.Form[Sortedstr[i]];
                }
                else
                {
                    prestr = prestr + Sortedstr[i] + "=" + Request.Form[Sortedstr[i]] + "&";
                }
            }

        }
        prestr = prestr + key;
        string mysign = GetMD5(prestr);
        string sign = Request.Form["sign"];
        string out_trade_no = Request["out_trade_no"].ToString(); 
        if (mysign == sign && responseTxt == "true")   //验证支付发过来的消息，签名是否正确
        {
            //if (Request.Form["trade_status"] == "WAIT_SELLER_SEND_GOODS")   //判断支付状态TRADE_FINISHED（文档中有枚举表可以参考）            
            //{
            //    //更新自己数据库的订单语句，请自己填写一下
            //    Exsql.Executesql("update YX_OrderForm set YX_OrderStart=2 where yx_orderformid='" + out_trade_no + "'");
            //    Response.Write("success");                                  //返回给支付宝消息，成功
            //}
            //else if (Request.Form["trade_status"] == "WAIT_BUYER_CONFIRM_GOODS")  
            //{
            //    Exsql.Executesql("update YX_OrderForm set YX_OrderStart=3 where yx_orderformid='" + out_trade_no + "'");
            //    Response.Write("success");
            //}
            //else if (Request.Form["trade_status"] == "TRADE_FINISHED")
            //{
            //    Exsql.Executesql("update YX_OrderForm set YX_OrderStart=4 where yx_orderformid='" + out_trade_no + "'");
            //    Response.Write("success");
            //}
            //else if (Request.Form["trade_status"] == "TRADE_CLOSED") 
            //{
            //    Exsql.Executesql("update YX_OrderForm set YX_OrderStart=6 where yx_orderformid='" + out_trade_no + "'");
            //    Response.Write("success");
            //}
            //else
            //{
            //    Response.Write("fail");
            //}

        }
        

       
    }

  
   
}