php后台对接ios，安卓，API接口设计和实践完全攻略，涨薪必备技能

<?php

class Crypt3Des {

    private $key = "Symetric";
    private $iv = "Symetric";

    /**
    * 构造，传递二个已经进行base64_encode的KEY与IV
    *
    * @param string $key
    * @param string $iv
    */

    function __construct($key, $iv) {
        if (empty($key) || empty($iv)) {
            echo ‘key and iv is not valid‘;
            exit();
        }
        $this->key = $key;
        $this->iv = $iv;
    }

    /**
    *加密
    * @param  $value
    * @return
    */
    public function encrypt($value) {
        $td = mcrypt_module_open(MCRYPT_3DES, ‘‘, MCRYPT_MODE_ECB, ‘‘);
        $iv = base64_decode($this->iv);
        $value = $this->PaddingPKCS7($value);
        $key = base64_decode($this->key);
        mcrypt_generic_init($td, $key, $iv);
        $ret = base64_encode(mcrypt_generic($td, $value));
        mcrypt_generic_deinit($td);
        mcrypt_module_close($td);
        return $ret;
    }

    /**
    *解密
    * @param  $value
    * @return
    */
    public function decrypt($value) {
        $td = mcrypt_module_open(MCRYPT_3DES, ‘‘, MCRYPT_MODE_ECB, ‘‘);
        $iv = base64_decode($this->iv);
        $key = base64_decode($this->key);
        mcrypt_generic_init($td, $key, $iv);
        $ret = trim(mdecrypt_generic($td, base64_decode($value)));
        $ret = $this->UnPaddingPKCS7($ret);
        mcrypt_generic_deinit($td);
        mcrypt_module_close($td);
        return $ret;
    }

    private function PaddingPKCS7($data) {
        $block_size = mcrypt_get_block_size(‘tripledes‘, ‘cbc‘);
        $padding_char = $block_size - (strlen($data) % $block_size);
        $data .= str_repeat(chr($padding_char), $padding_char);
        return $data;
    }

    private function UnPaddingPKCS7($text) {
        $pad = ord($text{strlen($text) - 1});
        if ($pad > strlen($text)) {
            return false;
        }

        if (strspn($text, chr($pad), strlen($text) - $pad) != $pad) {
            return false;
        }
        return substr($text, 0, - 1 * $pad);
    }

}

<?php

//API父类
class BaseAction extends Action {

    protected $user_id;
    protected $appkey;
    protected $secret;
    protected $appIDname; //接入用户来源标示，可能在用户数据录入的时候会用到

    public function _initialize() {



        myLog($_REQUEST, ‘api_log‘);
        if (empty($_REQUEST) && empty($_FILES)) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘发送数据不能为空‘), ‘json‘, 200);
        }
        $data = $_REQUEST[‘header‘];

        if (empty($data)) {
            $data = urldecode(file_get_contents(‘php://input‘));  //兼容php发送数据接收 和 php模拟测试，正式不一定

            if (empty($data)) {
                $this->response(array(‘code‘ => 0, ‘msg‘ => ‘发送数据不能为空‘), ‘json‘, 200);
            }
        }



        $data = $this->crypt3des()->decrypt($data);
        myLog($data, ‘api_log‘);
        $_POST = json_decode($data, true);
        //api接口日志记录--打印发送数据
        myLog($_POST, ‘api_log‘);

        $this->origin = $this->check_sign($_POST);
    }

    function crypt3des() {
        import(‘App.ORG.Crypt3Des‘);
        $crypt3des = new Crypt3Des(base64_encode(C(‘crypt_key‘)), base64_encode(C(‘crypt_iv‘)));
        return $crypt3des;
    }

    function _empty() {
        $this->response(array(‘code‘ => 0, ‘msg‘ => ‘_empty，非法操作‘), ‘json‘, 200);
    }

    protected function check_sign($data, $expires = 300) {
        $params = array();
        $params[‘timestamp‘] = $data[‘timestamp‘];
        if (time() - strtotime($params[‘timestamp‘]) > $expires) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘签名已过期‘), ‘json‘, 200);
        }
        //数据库查询校验相关用户数据
        $where[‘app_api_name‘] = $data[‘appkey‘];
        $res = M(‘app_api_partner‘)->where($where)->find();

        if (empty($res)) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘appkey错误‘), ‘json‘, 200);
        }
        if ($res[‘api_status‘] !== ‘0‘) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘目前api账户不可用‘), ‘json‘, 200);
        }
        if ($res[‘app_api_key‘] !== $data[‘secret‘]) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘通信密钥错误‘), ‘json‘, 200);
        }
        $params[‘appkey‘] = $res[‘app_api_name‘];
        $params[‘secret‘] = $res[‘app_api_key‘];

        $sign = $this->data_auth_sign($params);

//        $this->response(array(‘msg‘ => $params, ‘code‘ => 0), ‘json‘, 200);
        if ($sign !== $data[‘sign‘]) {
            $this->response(array(‘code‘ => 0, ‘msg‘ => ‘签名错误‘), ‘json‘, 200);
        } else {
             myLog(‘签名解析正确‘, ‘api_log‘);
            $this->appIDname = $res[‘app_api_mark‘]; //返回接入的使用的名称
        }
    }


    private function data_auth_sign($data) {
        if (!is_array($data)) {
            $data = (array) $data;
        }
        ksort($data);
        $param = array();
        foreach ($data as $key => $val) {
            $param[] = $key . "=" . $val;
        }
        $param = join("&", $param);
        $sign = sha1($param);
        return $sign;
    }

}

C 获取系统配置数据

myLog 打印系统日志

function myLog($str, $flag = ‘default‘) {
    //if( APP_DEBUG != true )return ‘‘;
    is_array($str) && $str = print_r($str, true);
    $dir = SYSTEM_ROOT . ‘/Uploads/logs/‘ . $flag . ‘/‘;

    !is_dir($dir) && @mkdir($dir, 0755, true);
    $file = $dir . date(‘Ymd‘) . ‘.log.txt‘;
    $fp = fopen($file, ‘a‘);
    if (flock($fp, LOCK_EX)) {
        $content = "[" . date(‘Y-m-d H:i:s‘) . "]\r\n";
        $content .= $str . "\r\n\r\n";
        fwrite($fp, $content);
        flock($fp, LOCK_UN);
        fclose($fp);
        return true;
    } else {
        fclose($fp);
        return false;
    }
}

随机生成一个8位随机字符串

function get_rand_str($len) {
        $chars = array(
            ‘a‘, ‘b‘, ‘c‘, ‘d‘, ‘e‘, ‘f‘, ‘g‘, ‘h‘, ‘i‘, ‘j‘, ‘k‘, ‘l‘, ‘m‘, ‘n‘, ‘o‘, ‘p‘, ‘q‘, ‘r‘, ‘s‘, ‘t‘, ‘u‘, ‘v‘,
            ‘w‘, ‘x‘, ‘y‘, ‘z‘, ‘A‘, ‘B‘, ‘C‘, ‘D‘, ‘E‘, ‘F‘, ‘G‘, ‘H‘, ‘I‘, ‘J‘, ‘K‘, ‘L‘, ‘M‘, ‘N‘, ‘O‘, ‘P‘, ‘Q‘, ‘R‘,
            ‘S‘, ‘T‘, ‘U‘, ‘V‘, ‘W‘, ‘X‘, ‘Y‘, ‘Z‘, ‘0‘, ‘1‘, ‘2‘, ‘3‘, ‘4‘, ‘5‘, ‘6‘, ‘7‘, ‘8‘, ‘9‘
        );
        $charsLen = count($chars) - 1;
        shuffle($chars);
        $output = "";
        for ($i = 0; $i < $len; $i++) {
            $output .= $chars[mt_rand(0, $charsLen)];
        }
        return $output;
    }

<?php

//客户信息相关api接口类

class CustomerAction extends BaseAction {

   
    public function test() {

        $this->response(array(‘code‘ => 1, ‘msg‘ => ‘测试成功‘, ‘data‘ => $data), ‘json‘, 200);
    }

}

 import(‘app.ORG.Crypt3Des‘);
        $crypt3des = new Crypt3Des(base64_encode(C(‘crypt_key‘)), base64_encode(C(‘crypt_iv‘)));


        $data[‘appkey‘] = $_data[‘appkey‘] = ‘11111111‘; // 用于签名参数  对应C的取到的值
        $data[‘secret‘] = $_data[‘secret‘] = md5(‘11111111‘); //用于签名参数
        $data[‘timestamp‘] = $_data[‘timestamp‘] = date(‘YmdHis‘, time()); //用于签名参数

        $data[‘sign‘] = $this->data_auth_sign($_data);

        $data = json_encode($data);


        $crypt_data = (urlencode($crypt3des->encrypt($data)));

        $url = "http://127.0.0.1/app.php/customer/test";

        $ch = curl_init();

        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_VERBOSE, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, $crypt_data);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

        $return_data = curl_exec($ch);

        print_r($return_data);
        echo ‘<hr />‘;
        print_r(json_decode($return_data, true));

        if ($error = curl_error($ch)) {
            die($error);
        }
//        $rinfo = curl_getinfo($ch);
//        P($rinfo);
        curl_close($ch);