我正在尝试在 php 中验证发送到我的网站的回调

Answer 1

首先，如果手动运行，请确保您的回调 URL 可以在付款后成功执行操作，例如 https://example.com/verifypayment.php?order_id=908978675650&username=somebody&prod_id=200&amount=500&email=somebody@gmail.com&logticker=trc20_usdt 添加您可能需要的任何 getter ($_GET) 或 setter ($_POST) 作为参数，但请确保有一个唯一的参数来区分订单。在上面的 URL 中，我的唯一参数是 order_id 我的代码在verifypayment.php 中是这样的

    if(isset($_GET['order_id']) && isset($_GET['email']) && isset($_GET['amount']) && isset($_GET['logticker'])){
    $id = intVal($_GET['order_id']);
    $email = $_GET['email'];
    $logticker = $_GET['logticker'];//ENSURE YOU USE THE APPROPRIATE TICKER  https://cryptapi.io/cryptocurrencies/. SETTING TICKER AS PART OF YOUR  PARAMETERS MAKES THE USAGE OF DIFFERENT COIN TICKERS DYNAMIC AND FLEXIBLE
    $data = str_replace("@","%40",$data);//PLS ADD THIS LINE OF CODE IF EMAIL IS INCLUDED IN YOUR PARAMETERS TOO LIKE MINE CUZ CRYPTAPI SAVES @ IN ITS URLENCODE (%40)

    $query = array(
        "callback" => trim($data)
    );
    $curl = curl_init();
    curl_setopt_array($curl, [
        CURLOPT_URL => "https://api.cryptapi.io/" . $logticker . "/logs/?" . 
        http_build_query($query),
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_CUSTOMREQUEST => "GET",
    ]);
    $response = curl_exec($curl);
    $error = curl_error($curl);
    curl_close($curl);        
    if ($error) {
        //echo "cURL Error #:" . $error; OR
        error_log("cURL Error #:" . $error,0);
    } else {
        //echo $response;
        $j = json_decode($response); 
        if(strcmp($j->status,"success")==0){//COMMAND EXECUTED SUCCESSFULLY IF APPROPRIATE URL IS CALLED
            $callbacks = $j->callbacks;//ARRAY OF DEPOSITS MADE INTO THE ADDRESS_IN
            if(is_array($callbacks)){
                $trans = count($callbacks);//NUMBER OF DEPOSITS MADE INTO THE ADDRESS_IN
                if($trans > 0){//IF ANY DEPOSIT IS MADE
                    $totalCoinDeposited = 0; $last_update = ''; $last_uuid = ''; $forwarded_amount = 0;
                    for($i = 0;$i < $trans;$i++){
                        $pending = intVal($callbacks[$i]->pending);
                        if($pending == 0){//IF DEPOSIT HAS BEEN CONFIRMED, IT S NO MORE PENDING
                            $value_coin = doubleVal($callbacks[$i]->value_coin);
                            $totalCoinDeposited += $value_coin;//GET THE SUM OF COIN SENT TO THE ADDRESS_IN
                            $last_update = $callbacks[$i]->last_update;
                            $last_uuid = $callbacks[$i]->uuid;
                            echo "TRANSACTION$i CONFIMRED<BR />";
                        }
                        if(strcmp($callbacks[$i]->result,"sent")==0){//IF DEPOSIT MADE HAS BEEN REMITTED INTO ADDRESS_OUT (YOUR OWN ADDRESS)
                            $forwarded_amount += doubleVal($callbacks[$i]->value_forwarded_coin);
                        }
                    
                    }
                    if($totalCoinDeposited >= doubleVal($_GET['amount'])){//IF TOTAL COIN SENT TO THE ADDRESS_IN IS UP TO THE AMOUNT EXPECTED
                        //YOUR CODES HERE WHEN THE TRANSACTION IS CONFIRMED SUCCESSFUL
                    }
                }
                else{
                    //echo "No deposit yet";
                    //error_log("No deposit yet",0);
                }
            }
                    
        }
        else{
            //echo "Callback URL not found";
            error_log("Callback URL not found",0);
        }

    }
            
}

Answer 2

先忽略openssl_verify函数，使用php curl函数https://docs.cryptapi.io/#operation/logs 这就是我为实现我的期望所做的事情

Answer 3

CryptAPI\CryptAPI::process_callback($_GET) 对我不起作用，我使用了https://docs.cryptapi.io/#operation/logs 提供的 php curl

Answer 4

我忘了补充。在我自己的情况下，我的服务器 MOD_SECURITY 不允许他们的 webhook 从他们的一端运行回调 url，所以我使用 CRON 来自动运行它。 确保每个订单的回调 url 也存储在订单表中。必须有一个名为 order_confirmed 的列或您可以给它的任何名称。让您的 CRON 通过 SQL 查询循环未确认的 callback_url，例如“SELECT callback_url FROM order_table WHERE order_confirmed = 0”

//Before your SQL while loop
$urls = array();
//In your query while loop
while(...){
    $urls[] = $callback_url; // WHERE $callback_url IS THE CALLBACK URL (VALUE) THAT COMES FROM THE COLUMN THAT STORES THE CALLBACK URL FOR AN ORDER
}

//After your query while loop

$curlMultiReq = curl_multi_init();
$ch = [];
foreach($urls as $key => $url){
    $ch[$key] = curl_init($url);
    curl_setopt($ch[$key], CURLOPT_HEADER, true);    // we want headers              
    curl_setopt($ch[$key], CURLOPT_NOBODY, true);    // we don't need body
    curl_setopt($ch[$key], CURLOPT_RETURNTRANSFER,1);
    curl_setopt($ch[$key], CURLOPT_TIMEOUT,10);
    curl_multi_add_handle($curlMultiReq, $ch[$key]);
}
$running = '';
do {
    curl_multi_exec($curlMultiReq, $running);//THIS EXECUTES OR RUNS EACH CALLBACK URL AT THE BACKGROUND
    curl_multi_select($curlMultiReq);
} while ($running > 0);
foreach(array_keys($ch) as $key){
    //echo curl_getinfo($ch[$key], CURLINFO_HTTP_CODE);
    //echo "\n";  
    curl_multi_remove_handle($curlMultiReq, $ch[$key]);
}
curl_multi_close($curlMultiReq);

如果交易成功，请确保您的 CALLBACK_URL 更新 order_confirmed 为 1，这样成功的交易将不会再次循环