php_cz

<?php
require_once ‘config.php‘;
$ddh=trim(htmlspecialchars($_POST[‘ddh‘])); //支付宝交易号
$money=trim(htmlspecialchars($_POST[‘money‘])); //付款金额
$name=trim(htmlspecialchars($_POST[‘name‘]));   //付款说明,参数一
$key=trim(htmlspecialchars($_POST[‘key‘])); //密钥
$addtime=date(‘Y-m-d H:i:s‘,time());
$name=str_replace(‘付款-‘,‘‘,$name);//去掉付款说明的空格
$stage="recharge";
$type=1;
$addtime=date(‘Y-m-d H:i:s‘,time());
$comm = "alipay";


if($key == ‘168szb262589546‘){

    
        $rss=mysql_query("SELECT * FROM user WHERE id=‘$name‘");
        $rows=mysql_fetch_array($rss);
        $remain_money=$rows[‘money‘];

        $rs=mysql_query("SELECT * FROM pay_order WHERE outer_order_no=‘$ddh‘");
        $row=mysql_fetch_array($rs);


if($row[‘status‘]==""&&$rows[‘id‘]<>""){


   mysql_query("UPDATE user set money=money+".$money." WHERE id=‘$name‘");
   
   $aa="INSERT INTO pay_order (user_id,order_no,outer_order_no,pay_money,status,type,addtime,comm) VALUES (‘$name‘,‘$name‘,‘$ddh‘,‘$money‘,‘$type‘,‘$type‘,‘$addtime‘,‘$comm‘)";
mysql_query($aa);
//写日志
   $bb="INSERT INTO account_log (user_id,stage,money,remain_money,comm,addtime) VALUES (‘$name‘,‘$stage‘,‘$money‘,‘$remain_money‘,‘$name‘,‘$addtime‘)";
mysql_query($bb);


   echo "okokokokokok";
}


if($row[‘status‘]<>"")echo ‘该订单已充值过!‘;

   
          
}else{
echo ‘密钥错误no!‘;
}
?>