支付宝手机接口,服务端PHP验证失败,求助
最近做支付宝手机接口郁闷死了 求大神们帮忙~！
问题1：手机端安卓自然是JAVA，而服务端是PHP，在做支付宝异步验证notify_url的时候，按照支付宝的demo来操作验证失败，用日志做调查后发现传过来的$_POST['sign']验证参数 在base64_decode时，返回的竟然是乱码，这里就疑问，难道在JAVA端用BASE64加密后 在PHP端解密不能？ 求解~！
问题2：在服务器PHP端验证要用到3个PEM文件，3个文件的格式到底是啥，我问了支付宝技术支持，一个人说，用支付宝提供的软件生成的rsa_private_key.pem和rsa_public_key.pem是否不用去掉头和尾，直接替换掉key文件夹下的2个同名文件？ 还是要去掉头和尾空格与换行 直接留一行字符串？（这部分按照文档的写了 照样不通过，才来问的~！）
问题3：最后一个pem文件 alipay_public_key看文档说是按照上传的公钥，复制下来后去换行和空格，但是当openssl验证文件 载入之后 openssl_get_publickey返回的竟然为空，这个真心纠结了，然后我又尝试用原文件rsa_public_key改成openssl_get_publickey这时候返回提示Resource id #20或者Resource id #21
网上查的要死 也没找到这2个提示 啥意思！
求各位大师指点~！~！
回复讨论(解决方案)
既不懂java也没支付宝编程经验的多嘴一句??
会不会是字节型数据的问题？
php处理这个要小心，因为php对字节和字串是混合的
如果不是这个问题就再等有相关经验的人的答案吧
问支付宝技术人员
问支付宝技术人员
支付宝技术支持的客服 都被我问了多少遍了 说的东西貌似也没什么实质性的 无非就是按文档啊，编码什么的，都试过了 还是验证失败~！
愁都愁死了~！
一步步来，先不要base64，发原字串过去，看看php收到的是什么，这样可以确定是否字节型数据
然后再encode和decode
key那个也是同样操作
支付宝的异步返回是不经过你手机端的，是支付宝服务器主动发起的请求（你异步填写的那个url）.
你可以先查看你的加密方式， 是md5 还是rsa
我也碰到这个问题了，问支付宝技术客服一点用都没有，我想问下你的问题解决了吗？纠结呀。
楼主解决了没？
支付宝返回的数据有时是xml 格式的，有时是数组格式，php 要判断返回格式，然后转换一下
表示 我也一直遇到 openssl_get_privatekey获取的为空。。不知道这是什么原因。。查遍了都没得出个结果 。楼主解决了没。有没有人知道原因，麻烦告诉我好吗？邮箱 ：252962553@qq.com。 谢谢了
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
Hot Topics
Alipay PHP SDK transfer error: How to solve the problem of 'Cannot declare class SignData'?
Apr 01, 2025 am 07:21 AM
Alipay PHP...
Explain JSON Web Tokens (JWT) and their use case in PHP APIs.
Apr 05, 2025 am 12:04 AM
JWT is an open standard based on JSON, used to securely transmit information between parties, mainly for identity authentication and information exchange. 1. JWT consists of three parts: Header, Payload and Signature. 2. The working principle of JWT includes three steps: generating JWT, verifying JWT and parsing Payload. 3. When using JWT for authentication in PHP, JWT can be generated and verified, and user role and permission information can be included in advanced usage. 4. Common errors include signature verification failure, token expiration, and payload oversized. Debugging skills include using debugging tools and logging. 5. Performance optimization and best practices include using appropriate signature algorithms, setting validity periods reasonably,
How does session hijacking work and how can you mitigate it in PHP?
Apr 06, 2025 am 12:02 AM
Session hijacking can be achieved through the following steps: 1. Obtain the session ID, 2. Use the session ID, 3. Keep the session active. The methods to prevent session hijacking in PHP include: 1. Use the session_regenerate_id() function to regenerate the session ID, 2. Store session data through the database, 3. Ensure that all session data is transmitted through HTTPS.
Describe the SOLID principles and how they apply to PHP development.
Apr 03, 2025 am 12:04 AM
The application of SOLID principle in PHP development includes: 1. Single responsibility principle (SRP): Each class is responsible for only one function. 2. Open and close principle (OCP): Changes are achieved through extension rather than modification. 3. Lisch's Substitution Principle (LSP): Subclasses can replace base classes without affecting program accuracy. 4. Interface isolation principle (ISP): Use fine-grained interfaces to avoid dependencies and unused methods. 5. Dependency inversion principle (DIP): High and low-level modules rely on abstraction and are implemented through dependency injection.
How to debug CLI mode in PHPStorm?
Apr 01, 2025 pm 02:57 PM
How to debug CLI mode in PHPStorm? When developing with PHPStorm, sometimes we need to debug PHP in command line interface (CLI) mode...
How to automatically set permissions of unixsocket after system restart?
Mar 31, 2025 pm 11:54 PM
How to automatically set the permissions of unixsocket after the system restarts. Every time the system restarts, we need to execute the following command to modify the permissions of unixsocket: sudo...
Explain late static binding in PHP (static::).
Apr 03, 2025 am 12:04 AM
Static binding (static::) implements late static binding (LSB) in PHP, allowing calling classes to be referenced in static contexts rather than defining classes. 1) The parsing process is performed at runtime, 2) Look up the call class in the inheritance relationship, 3) It may bring performance overhead.
How to send a POST request containing JSON data using PHP's cURL library?
Apr 01, 2025 pm 03:12 PM
Sending JSON data using PHP's cURL library In PHP development, it is often necessary to interact with external APIs. One of the common ways is to use cURL library to send POST�...
