平台币快捷支付

Application/Callback/Controller/BaseController.class.php

@@ -180,6 +180,10 @@ class BaseController extends Controller {
         $deposit = M('deposit',"tab_");
         $map['pay_order_number'] = $data['out_trade_no'];
         $d = $deposit->where($map)->find();
+        // 支付金额判断 by zgc
+        if (isset($data['money']) && $d['pay_amount'] != $data['money']) {
+        	$this->record_logs("支付金额不一致".$data['out_trade_no'].":".$data['money']);return false;
+        }
         if(empty($d)){return false;}
         if($d['pay_status'] == 0){
             $data_save['pay_status'] = 1;

Application/Callback/Controller/NotifyController.class.php

@@ -469,6 +469,7 @@ class NotifyController extends BaseController
         {
             $order_info['trade_no'] = $orderNo;
             $order_info['out_trade_no'] = $billNo;
+            $order_info['money'] = $amount;
             $pay_where = substr($billNo, 0, 2);
             switch ($pay_where) {
                 case 'SP':

Application/Sdk/Controller/WapPayController.class.php

@@ -312,7 +312,14 @@ class WapPayController extends BaseController{
     		'user_id' => $param['user_id'],
     		'game_id' => $param['game_id']
     	))->order('id desc')->find();
-    	if ($payInfo['price'] <= 0) {
+    	$info = json_decode($payInfo['info'], true);
+    	$deposit = M('deposit', 'tab_')->where([
+    		'pay_order_number' => $info['pay_order_number']
+    	])->find();
+    	if ($deposit['pay_amount'] != $payInfo['price']) {
+    		$this->error("数据有误.", '', true);
+    	}
+    	if ($payInfo['price'] <= 1) {
     		$this->error("数据有误", '', true);
     	}
     	if ($payInfo['status'] == 'payed') {
@@ -437,7 +444,7 @@ class WapPayController extends BaseController{
 	    			'secret' => C('sqpay.key'),
 	    			'merOrderNo' => $payInfo['order_id'],
 	    			'NotifyURL' => "http://api.wmtxkj.cn"."/callback.php?Notify/sq_callback",
-	    			'purpose' => 'aaaa'
+	    			'purpose' => '游戏充值'
 	    		));
 	    		//echo "发送短信==》".time()."<br>";
 	    		if ($ret['resFlag'] == 'success') {