<?php
|
class SpiUtils{
|
private static $top_sign_list = "HTTP_TOP_SIGN_LIST";
|
private static $timestamp = "timestamp";
|
private static $header_real_ip = array("X_Real_IP", "X_Forwarded_For", "Proxy_Client_IP",
|
"WL_Proxy_Client_IP", "HTTP_CLIENT_IP", "HTTP_X_FORWARDED_FOR");
|
/**
|
* 校验SPI请求签名，适用于所有GET请求，及不包含文件参数的POST请求。
|
*
|
* @param request 请求对象
|
* @param secret app对应的secret
|
* @return true：校验通过；false：校验不通过
|
*/
|
public static function checkSign4FormRequest($secret){
|
return self::checkSign(null,null,$secret);
|
}
|
|
/**
|
* 校验SPI请求签名，适用于请求体是xml/json等可用文本表示的POST请求。
|
*
|
* @param request 请求对象
|
* @param body 请求体的文本内容
|
* @param secret app对应的secret
|
* @return true：校验通过；false：校验不通过
|
*/
|
public static function checkSign4TextRequest($body,$secret){
|
return self::checkSign(null,$body,$secret);
|
}
|
|
/**
|
* 校验SPI请求签名，适用于带文件上传的POST请求。
|
*
|
* @param request 请求对象
|
* @param form 除了文件参数以外的所有普通文本参数的map集合
|
* @param secret app对应的secret
|
* @return true：校验通过；false：校验不通过
|
*/
|
public static function checkSign4FileRequest($form, $secret){
|
return self::checkSign($form, null, $secret);
|
}
|
|
private static function checkSign($form, $body, $secret) {
|
$params = array();
|
// 1. 获取header参数
|
$headerMap = self::getHeaderMap();
|
foreach ($headerMap as $k => $v){
|
$params[$k] = $v ;
|
}
|
|
// 2. 获取url参数
|
$queryMap = self::getQueryMap();
|
foreach ($queryMap as $k => $v){
|
$params[$k] = $v ;
|
}
|
|
// 3. 获取form参数
|
if ($form == null && $body == null) {
|
$formMap = self::getFormMap();
|
foreach ($formMap as $k => $v){
|
$params[$k] = $v ;
|
}
|
} else if ($form != null) {
|
foreach ($form as $k => $v){
|
$params[$k] = $v ;
|
}
|
}
|
|
if($body == null){
|
$body = file_get_contents('php://input');
|
}
|
|
$remoteSign = $queryMap["sign"];
|
$localSign = self::sign($params, $body, $secret);
|
if (strcmp($remoteSign, $localSign) == 0) {
|
return true;
|
} else {
|
$paramStr = self::getParamStrFromMap($params);
|
self::logCommunicationError($remoteSign,$localSign,$paramStr,$body);
|
return false;
|
}
|
}
|
|
private static function getHeaderMap() {
|
$headerMap = array();
|
$signList = $_SERVER['HTTP_TOP_SIGN_LIST']; // 只获取参与签名的头部字段
|
$signList = trim($signList);
|
if (strlen($signList) > 0){
|
$params = split(",", $signList);
|
foreach ($_SERVER as $k => $v){
|
if (substr($k, 0, 5) == 'HTTP_'){
|
foreach($params as $kk){
|
$upperkey = strtoupper($kk);
|
if(self::endWith($k,$upperkey)){
|
$headerMap[$kk] = $v;
|
}
|
}
|
}
|
}
|
}
|
return $headerMap;
|
}
|
|
private static function getQueryMap(){
|
$queryStr = $_SERVER["QUERY_STRING"];
|
$resultArray = array();
|
foreach (explode('&', $queryStr) as $pair) {
|
list($key, $value) = explode('=', $pair);
|
if (strpos($key, '.') !== false) {
|
list($subKey, $subVal) = explode('.', $key);
|
|
if (preg_match('/(?P<name>\w+)\[(?P<index>\w+)\]/', $subKey, $matches)) {
|
$resultArray[$matches['name']][$matches['index']][$subVal] = $value;
|
} else {
|
$resultArray[$subKey][$subVal] = urldecode($value);
|
}
|
} else {
|
$resultArray[$key] = urldecode($value);
|
}
|
}
|
return $resultArray;
|
}
|
|
private static function checkRemoteIp(){
|
$remoteIp = $_SERVER["REMOTE_ADDR"];
|
foreach ($header_real_ip as $k){
|
$realIp = $_SERVER[$k];
|
$realIp = trim($realIp);
|
if(strlen($realIp) > 0 && strcasecmp("unknown",$realIp)){
|
$remoteIp = $realIp;
|
break;
|
}
|
}
|
return self::startsWith($remoteIp,"140.205.144.") || $this->startsWith($remoteIp,"40.205.145.");
|
}
|
|
private static function getFormMap(){
|
$resultArray = array();
|
foreach($_POST as $key=>$v) {
|
$resultArray[$k] = $v ;
|
}
|
return $resultArray ;
|
}
|
|
private static function startsWith($haystack, $needle) {
|
return $needle === "" || strpos($haystack, $needle) === 0;
|
}
|
|
private static function endWith($haystack, $needle) {
|
$length = strlen($needle);
|
if($length == 0)
|
{
|
return true;
|
}
|
return (substr($haystack, -$length) === $needle);
|
}
|
|
private static function checkTimestamp(){
|
$ts = $_POST['timestamp'];
|
if($ts){
|
$clientTimestamp = strtotime($ts);
|
$current = $_SERVER['REQUEST_TIME'];
|
return ($current - $clientTimestamp) <= 5*60*1000;
|
}else{
|
return false;
|
}
|
}
|
|
private static function getParamStrFromMap($params){
|
ksort($params);
|
$stringToBeSigned = "";
|
foreach ($params as $k => $v)
|
{
|
if(strcmp("sign", $k) != 0)
|
{
|
$stringToBeSigned .= "$k$v";
|
}
|
}
|
unset($k, $v);
|
return $stringToBeSigned;
|
}
|
|
private static function sign($params,$body,$secret){
|
ksort($params);
|
|
$stringToBeSigned = $secret;
|
$stringToBeSigned .= self::getParamStrFromMap($params);
|
|
if($body)
|
$stringToBeSigned .= $body;
|
$stringToBeSigned .= $secret;
|
return strtoupper(md5($stringToBeSigned));
|
}
|
|
protected static function logCommunicationError($remoteSign, $localSign, $paramStr, $body)
|
{
|
$localIp = isset($_SERVER["SERVER_ADDR"]) ? $_SERVER["SERVER_ADDR"] : "CLI";
|
$logger = new TopLogger;
|
$logger->conf["log_file"] = rtrim(TOP_SDK_WORK_DIR, '\\/') . '/' . "logs/top_comm_err_". date("Y-m-d") . ".log";
|
$logger->conf["separator"] = "^_^";
|
$logData = array(
|
"checkTopSign error" ,
|
"remoteSign=".$remoteSign ,
|
"localSign=".$localSign ,
|
"paramStr=".$paramStr ,
|
"body=".$body
|
);
|
$logger->log($logData);
|
}
|
private static function clear_blank($str, $glue='')
|
{
|
$replace = array(" ", "\r", "\n", "\t"); return str_replace($replace, $glue, $str);
|
}
|
}
|
?>
|
