线上修改或缺快递详情的加密

core/CoreApp/controllers/Aatest.php

@@ -65,11 +65,13 @@ class Aatest extends Start_Controller {
     }
 
     public function _a($arg_array){
+        $time = time();
+        $jiami = "alipearlhair+".(string)$time;
         echo json_encode([
 			'shop'=>3,
 			'waybill'=>'283786008019',
-			'time'=>time(),
-			'key'=>"cZhFn38GcK+UXpwEV8VTLA==",
+			'time'=>$time,
+			'key'=>$this->logic_tools->toolsjiami($jiami,"6amg!pnfrlbpnjgirv", "6ook4k!2w94m6jtm"),
 		]);
         die;
 

core/CoreApp/controllers/Apiexpress.php

@@ -32,22 +32,17 @@ class Apiexpress extends Start_Controller {
     public function search(){
         $data = file_get_contents('PHP://input');
 		$data = json_decode($data, true);
-		
         $shop = isset($data['shop'])?$data['shop']:"";
         $waybill_no = isset($data['waybill'])?$data['waybill']:"";
         
-        $time = isset($data['time'])?$data['time']:0;
-
+        $apply_time = isset($data['time'])?$data['time']:0;
+      
         $jiami_str = isset($data['key'])?$data['key']:"";
         
         $now_time = time();
-        if(strlen( $time."") != 10){
+        if(strlen( $apply_time."") != 10){
              die($this->logic_tools->ret_json(-1,"参数异常"));
         }
-        // if( $now_time - $time > 3){
-        //     die($this->logic_tools->ret_json(-1,"该功能已禁用"));
-        // }
-        
         if(empty($shop)){
             die($this->logic_tools->ret_json(-1,"请求店铺异常"));
         }
@@ -59,9 +54,20 @@ class Apiexpress extends Start_Controller {
         if(empty($shop_key)){
             die($this->logic_tools->ret_json(-1,"该店铺的秘钥不存在"));
         }
-        if($jiemi_str != $shop_key){
+        $jiemi_arr = explode("+",$jiemi_str);
+        $jiemi_key = isset($jiemi_arr[0])?$jiemi_arr[0]:"";
+        $jiemi_time = isset($jiemi_arr[1])?$jiemi_arr[1]:"";
+        if((int)$jiemi_time != (int)$apply_time){
+            die($this->logic_tools->ret_json(-1,"请求超时"));
+        }
+        
+        if( $now_time - $apply_time > 30){
+            die($this->logic_tools->ret_json(-1,"该功能已禁用"));
+        }
+        if($jiemi_key != $shop_key){
             die($this->logic_tools->ret_json(-1,"该店铺的秘钥不正确"));
         }
+        
         if(empty($waybill_no)){
             die($this->logic_tools->ret_json(-1,"请求单号异常"));
         }