transfers_bank.php

<?php
header('Content-type:text/html; Charset=utf-8');
/* 配置开始 */
/*
1.下载支付宝的密钥生成工具（下载地址：https://opendocs.alipay.com/open/291/106097），生成公钥证书。选择PKCS1（非JAVA通用）。密钥长度选择RSA2，然后在下方的获取CSR文件，点击“点击获取”按钮。填写信息后，点击生成CSR文件。
2.进入支付宝开放平台，确认应用的接口加密方式为：公钥证书。如果不是需要点击“更换应用公钥”进行更换。点击“上传CSR文件在线生成证书”按钮，选择刚生成的证书文件中后缀为csr格式的文件。
3.下载应用公钥证书。
4.生成应用证书sn：https://www.dedemao.com/alipay/cert_sn.php
*/
$appid = 'xxxxx';  //https://open.alipay.com 账户中心->密钥管理->开放平台密钥，填写添加了“单笔转账到账户”应用的APPID
$outTradeNo = uniqid();     //商户转账唯一订单号
$payAmount = 0.1;          //转账金额，单位：元 （金额必须大于等于0.1元)
$alipayRootCertSn = '687b59193f3f462dd5336e5abf83c5d8_02941eef3187dddf3d3b83462e1dfcf6';	//固定值，支付宝根证书
$appCertSn = 'xxxxx';	//生成应用证书sn
$remark = '转账测试';    //转帐备注
$signType = 'RSA2';       //签名算法类型，支持RSA2和RSA，推荐使用RSA2
//商户私钥，填写对应签名算法类型的私钥，如何生成密钥参考：https://docs.open.alipay.com/291/105971和https://docs.open.alipay.com/200/105310
$saPrivateKey='xxxxx';
$account = 'xxxxx';      //收款方银行卡号
$realName = 'xxx';     //收款方真实姓名
/* 配置结束 */
$aliPay = new AlipayService($appid,$saPrivateKey);
$aliPay->setAlipayRootCertSn($alipayRootCertSn);
$aliPay->setAppCertSn($appCertSn);
$result = $aliPay->doTransfer($payAmount,$outTradeNo,$account,$realName,$remark);
$result = $result['alipay_fund_trans_uni_transfer_response'];
if($result['code'] && $result['code']=='10000'){
    echo '<h1>转账成功</h1>';
}else{
    echo $result['msg'].' : '.$result['sub_msg'];
}
class AlipayService
{
    protected $appId;
    //私钥值
    protected $rsaPrivateKey;
	//支付宝根证书SN
	protected $alipayRootCertSn='';
	//应用证书SN
	protected $appCertSn='';

    public function __construct($appid, $saPrivateKey)
    {
        $this->appId = $appid;
        $this->charset = 'utf-8';
        $this->rsaPrivateKey=$saPrivateKey;
    }

	public function setAlipayRootCertSn($alipayRootCertSn)
	{
		$this->alipayRootCertSn = $alipayRootCertSn;
	}

	public function setAppCertSn($appCertSn)
	{
		$this->appCertSn = $appCertSn;
	}

    /**
     * 转帐
     * @param float $totalFee 转账金额，单位：元。
     * @param string $outTradeNo 商户转账唯一订单号
     * @param string $remark 转帐备注
     * @return array
     */
    public function doTransfer($totalFee, $outTradeNo, $account,$realName,$remark='')
    {
        //请求参数
        $requestConfigs = array(
            'out_biz_no'=>$outTradeNo,
            'payee_type'=>'ALIPAY_LOGONID',
            'trans_amount'=>$totalFee,				//转账金额，单位：元。
            'product_code'=>'TRANS_BANKCARD_NO_PWD',
            'biz_scene'=>'DIRECT_TRANSFER',
            'order_title'=>'织梦猫提现',
			'payee_info'=>array(				
				'identity'=>$account,		//收款方银行卡账号
				'identity_type'=>'BANKCARD_ACCOUNT',
				'name'=>$realName, //收款方真实姓名
				'bankcard_ext_info'=>array(
					'account_type'=>2 //收款账户类型	 1：对公 2：对私
					//更多bankcard_ext_info参数说明：https://opendocs.alipay.com/open/common/transfertocard
				)
			),
            'remark'=>$remark,  //转账备注（选填）
        );
        $commonConfigs = array(
            //公共参数
			'alipay_root_cert_sn' => $this->alipayRootCertSn,
            'app_cert_sn' => $this->appCertSn,
            'app_id' => $this->appId,
            'method' => 'alipay.fund.trans.uni.transfer',             //接口名称
            'format' => 'JSON',
            'charset'=>$this->charset,
            'sign_type'=>'RSA2',
            'timestamp'=>date('Y-m-d H:i:s'),
            'version'=>'1.0',
            'biz_content'=>json_encode($requestConfigs),
        );
        $commonConfigs["sign"] = $this->generateSign($commonConfigs, $commonConfigs['sign_type']);
        $result = $this->curlPost('https://openapi.alipay.com/gateway.do?charset='.$this->charset,$commonConfigs);
        return json_decode($result,true);
    }

    public function generateSign($params, $signType = "RSA") {
        return $this->sign($this->getSignContent($params), $signType);
    }

    protected function sign($data, $signType = "RSA") {
        $priKey=$this->rsaPrivateKey;
        $res = "-----BEGIN RSA PRIVATE KEY-----\n" .
            wordwrap($priKey, 64, "\n", true) .
            "\n-----END RSA PRIVATE KEY-----";

        ($res) or die('您使用的私钥格式错误，请检查RSA私钥配置');
        if ("RSA2" == $signType) {
            openssl_sign($data, $sign, $res, version_compare(PHP_VERSION,'5.4.0', '<') ? SHA256 : OPENSSL_ALGO_SHA256); //OPENSSL_ALGO_SHA256是php5.4.8以上版本才支持
        } else {
            openssl_sign($data, $sign, $res);
        }
        $sign = base64_encode($sign);
        return $sign;
    }

    /**
     * 校验$value是否非空
     *  if not set ,return true;
     *    if is null , return true;
     **/
    protected function checkEmpty($value) {
        if (!isset($value))
            return true;
        if ($value === null)
            return true;
        if (trim($value) === "")
            return true;

        return false;
    }

    public function getSignContent($params) {
        ksort($params);
        $stringToBeSigned = "";
        $i = 0;
        foreach ($params as $k => $v) {
            if (false === $this->checkEmpty($v) && "@" != substr($v, 0, 1)) {
                // 转换成目标字符集
                $v = $this->characet($v, $this->charset);
                if ($i == 0) {
                    $stringToBeSigned .= "$k" . "=" . "$v";
                } else {
                    $stringToBeSigned .= "&" . "$k" . "=" . "$v";
                }
                $i++;
            }
        }

        unset ($k, $v);
        return $stringToBeSigned;
    }

    /**
     * 转换字符集编码
     * @param $data
     * @param $targetCharset
     * @return string
     */
    function characet($data, $targetCharset) {
        if (!empty($data)) {
            $fileType = $this->charset;
            if (strcasecmp($fileType, $targetCharset) != 0) {
                $data = mb_convert_encoding($data, $targetCharset, $fileType);
                //$data = iconv($fileType, $targetCharset.'//IGNORE', $data);
            }
        }
        return $data;
    }

    public function curlPost($url = '', $postData = '', $options = array())
    {
        if (is_array($postData)) {
            $postData = http_build_query($postData);
        }
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
        curl_setopt($ch, CURLOPT_TIMEOUT, 30); //设置cURL允许执行的最长秒数
        if (!empty($options)) {
            curl_setopt_array($ch, $options);
        }
        //https请求 不验证证书和host
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
        $data = curl_exec($ch);
        curl_close($ch);
        return $data;
    }
}