Переглянути джерело

支付配置化 暂时只修改了paypal alipay

chengwl 5 роки тому
батько
коміт
677caf9ce5

+ 14 - 0
vendor/fancyecommerce/fecshop/services/Payment.php

@@ -34,8 +34,17 @@ class Payment extends Service
      */
     public $noRelasePaymentMethod;
 
+    public $env_sanbox = 'sanbox';
+    public $env_product = 'product';
+
     protected $_currentPaymentMethod;
 
+    public function init()
+    {
+        parent::init();
+    }
+
+
     /**
      * @param $payment_method | string
      * 设置当前的支付方式
@@ -242,11 +251,16 @@ class Payment extends Service
     public function getStandardPaymentArr()
     {
         $arr = [];
+        $appName = Yii::$service->helper->getAppName();
         if (
             isset($this->paymentConfig['standard']) &&
             is_array($this->paymentConfig['standard'])
         ) {
             foreach ($this->paymentConfig['standard'] as $payment_type => $info) {
+                $checkMoneyConfig = Yii::$app->store->get($appName.'_payment', $payment_type);
+                if ($checkMoneyConfig != Yii::$app->store->enable) {
+                    continue;
+                }
                 $label = $info['label'];
                 $imageUrl = '';
                 if (is_array($info['image'])) {

+ 17 - 1
vendor/fancyecommerce/fecshop/services/payment/Alipay.php

@@ -88,7 +88,7 @@ class Alipay extends Service
      * 部署到生产环境正式运营后,如果性能压力大,可以把此常量设定为false,能提高运行速度(对应的代价就是你下次升级程序时要清一下缓存)
      */
     public $alipay_aop_sdk_dev_mode = true;
-    
+    //TODO 支付宝配置化没有经过认真核验
     public function init()
     {
         parent::init();
@@ -97,6 +97,22 @@ class Alipay extends Service
             Yii::$service->order->payment_status_pending,
             Yii::$service->order->payment_status_processing,
         ];
+        // init by store config
+        $this->appId = Yii::$app->store->get('payment_alipay', 'app_id');
+        $this->sellerId = Yii::$app->store->get('payment_alipay', 'seller_id');
+        $this->rsaPrivateKey = Yii::$app->store->get('payment_alipay', 'rsa_private_key');
+        $this->alipayrsaPublicKey = Yii::$app->store->get('payment_alipay', 'rsa_public_key');
+        if ($alipay_aop_sdk_work_dir = Yii::$app->store->get('payment_alipay', 'alipay_aop_sdk_work_dir')) {
+            $this->alipay_aop_sdk_work_dir = $alipay_aop_sdk_work_dir;
+        }
+        $this->alipay_aop_sdk_dev_mode = Yii::$app->store->get('payment_alipay', 'alipay_aop_sdk_dev_mode') == 1 ? true : false ;
+        // 沙盒还是正式环境
+        $env = Yii::$app->store->get('payment_alipay', 'alipay_env');
+        if ($env == Yii::$service->payment->env_sanbox) {
+            $this->gatewayUrl = 'https://openapi.alipaydev.com/gateway.do';
+        } else {
+            $this->gatewayUrl = 'https://openapi.alipay.com/gateway.do';
+        }
     }
 
     /**

+ 882 - 0
vendor/fancyecommerce/fecshop/services/payment/Paypal.bak

@@ -0,0 +1,882 @@
+<?php
+
+/*
+ * FecShop file.
+ *
+ * @link http://www.fecshop.com/
+ * @copyright Copyright (c) 2016 FecShop Software LLC
+ * @license http://www.fecshop.com/license/
+ */
+
+namespace fecshop\services\payment;
+
+//use fecshop\models\mysqldb\IpnMessage;
+use fecshop\services\Service;
+use Yii;
+
+/**
+ * Payment Paypal services.
+ * @author Terry Zhao <2358269014@qq.com>
+ * @since 1.0
+ */
+class Paypal extends Service
+{
+    /**
+     * paypal支付状态 详细参看:https://developer.paypal.com/docs/classic/api/merchant/DoExpressCheckoutPayment_API_Operation_NVP/
+     * 打开url后,浏览器查找:PAYMENTINFO_n_PAYMENTSTATUS  , 即可找到下面各个状态对应的含义
+     */
+    public $payment_status_none         = 'none';
+
+    public $payment_status_completed    = 'completed';
+
+    public $payment_status_denied       = 'denied';
+
+    public $payment_status_expired      = 'expired';
+
+    public $payment_status_failed       = 'failed';
+
+    public $payment_status_in_progress  = 'in_progress';
+
+    public $payment_status_pending      = 'pending';
+
+    public $payment_status_refunded     = 'refunded';
+
+    public $payment_status_refunded_part= 'partially_refunded';
+
+    public $payment_status_reversed     = 'reversed';
+
+    public $payment_status_unreversed   = 'canceled_reversal';
+
+    public $payment_status_processed    = 'processed';
+
+    public $payment_status_voided       = 'voided';
+
+    public $seller_email ;
+
+    // 是否使用证书的方式(https)
+    public $use_local_certs = false;
+
+    // 在payment中 express paypal 的配置值
+    public $express_payment_method;
+
+    public $standard_payment_method;
+
+    public $version = '109.0';
+
+    public $crt_file;
+
+    protected $_postData;
+
+    protected $_order;
+
+    const EXPRESS_TOKEN     = 'paypal_express_token';
+
+    const EXPRESS_PAYER_ID  = 'paypal_express_payer_id';
+    
+    protected $payerID;
+
+    protected $token;
+
+    // 允许更改的订单状态,不存在这里面的订单状态不允许修改
+    protected $_allowChangOrderStatus;
+    
+    protected $_ipnMessageModelName = '\fecshop\models\mysqldb\IpnMessage';
+
+    protected $_ipnMessageModel;
+    
+    public function init()
+    {
+        parent::init();
+        list($this->_ipnMessageModelName, $this->_ipnMessageModel) = \Yii::mapGet($this->_ipnMessageModelName);
+        $this->_allowChangOrderStatus = [
+            Yii::$service->order->payment_status_pending,
+            Yii::$service->order->payment_status_processing,
+        ];
+    }
+
+    /**
+     * @param $domain | string
+     * @return 得到证书crt文件的绝对路径
+     */
+    public function getCrtFile($domain)
+    {
+        if (isset($this->crt_file[$domain]) && !empty($this->crt_file[$domain])) {
+            return Yii::getAlias($this->crt_file[$domain]);
+        }
+    }
+
+    /**
+     * 在paypal 标准支付中,paypal会向网站发送IPN消息,告知fecshop订单支付状态,
+     * 进而fecshop更改订单状态。
+     * fecshop一方面验证消息是否由paypal发出,另一方面要验证订单是否和后台的一致。
+     */
+    public function receiveIpn($post)
+    {
+        \Yii::info('receiveIpn', 'fecshop_debug');
+        if ($this->verifySecurity($post)) {
+            \Yii::info('verifySecurity', 'fecshop_debug');
+            // 验证数据是否已经发送
+            //if ($this->isNotDuplicate()) {
+            // 验证数据是否被篡改。
+            if ($this->isNotDistort()) {
+                \Yii::info('updateOrderStatusByIpn', 'fecshop_debug');
+                $this->updateOrderStatusByIpn();
+            } else {
+                // 如果数据和订单数据不一致,而且,支付状态为成功,则此订单
+                // 标记为可疑的。
+                $suspected_fraud = Yii::$service->order->payment_status_suspected_fraud;
+                $this->updateOrderStatusByIpn($suspected_fraud);
+            }
+            // }
+        }
+    }
+
+    /**
+     * 该函数是为了验证IPN是否是由paypal发出,
+     * 当paypal发送IPN消息给fecshop,fecshop不知道是否是伪造的支付消息,
+     * 因此,fecshop将接收到的参数传递给paypal,询问paypal是否是paypal
+     * 发送的IPN消息,如果是,则返回VERIFIED。
+     */
+    protected function verifySecurity($post)
+    {
+        $this->_postData = $post;
+        $verifyUrl = $this->getVerifyUrl();
+        \Yii::info('verifyUrl:'.$verifyUrl, 'fecshop_debug');
+        $verifyReturn = $this->curlGet($verifyUrl);
+        \Yii::info('verifyReturn:'.$verifyReturn, 'fecshop_debug');
+        if ($verifyReturn == 'VERIFIED') {
+            return true;
+        }
+    }
+
+    /**
+     * paypal发送的IPN,需要进行验证是否IPN是由paypal发出
+     * 因此需要请求paypal确认,此函数返回请求paypal的url。
+     */
+    protected function getVerifyUrl()
+    {
+        $urlParamStr = '';
+        if ($this->_postData) {
+            foreach ($this->_postData as $k => $v) {
+                $urlParamStr .= '&'.$k.'='.urlencode($v);
+            }
+        }
+        $urlParamStr   .= '&cmd=_notify-validate';
+        $urlParamStr    = substr($urlParamStr, 1);
+        $current_payment_method = Yii::$service->payment->getPaymentMethod();
+        if ($current_payment_method == $this->standard_payment_method) {
+            $verifyUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
+        } else {
+            $verifyUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
+        }
+        $verifyUrl      = $verifyUrl.'?'.$urlParamStr;
+
+        return $verifyUrl;
+    }
+    
+    /**
+     * @param $url | string, 请求的url
+     * @param $i | 请求的次数,因为curl可能存在失败的可能,当
+     * 失败后,就会通过递归的方式进行多次请求,这里设置的最大请求5次。
+     * @return 返回请求url的return信息。
+     */
+    protected function curlGet($url, $i = 0)
+    {
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_VERBOSE, 1);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $req);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
+        curl_setopt($ch, CURLOPT_SSLVERSION, 6);
+        if ($this->use_local_certs) {
+            $crtFile = $this->getCrtFile('www.paypal.com');
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+            curl_setopt($ch, CURLOPT_CAINFO, $crtFile);
+        } else {
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        }
+        curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Connection: Close']);
+        $httpResponse = curl_exec($ch);
+        if (!$httpResponse) {
+            $i++;
+            if ($i <= 5) {
+                return $this->curlGet($url, $i);
+            } else {
+                return $httpResponse;
+            }
+        }
+
+        return $httpResponse;
+    }
+
+    /**
+     * paypal 可能发送多次IPN消息
+     * 判断是否重复,如果不重复,把当前的插入。
+     */
+    /*
+    protected function isNotDuplicate()
+    {
+        $ipn = $this->_ipnMessageModel->find()
+            ->asArray()
+            ->where([
+            'txn_id'=>$this->_postData['txn_id'],
+            'payment_status'=>$this->_postData['payment_status'],
+            ])
+            ->one();
+        if (is_array($ipn) && !empty($ipn)) {
+            return false;
+        } else {
+            $IpnMessage = new $this->_ipnMessageModelName();
+            $IpnMessage->txn_id = $this->_postData['txn_id'];
+            $IpnMessage->payment_status = $this->_postData['payment_status'];
+            $IpnMessage->updated_at = time();
+            $IpnMessage->save();
+
+            return true;
+        }
+    }
+    */
+
+    /**
+     * 验证订单数据是否被篡改。
+     * 通过订单号找到订单,查看是否存在
+     * 验证邮件地址,订单金额是否准确。
+     */
+    protected function isNotDistort()
+    {
+        //Yii::$app->mylog->log("begin isNotDistort..");
+        $increment_id = $this->_postData['invoice'];
+        $mc_gross = $this->_postData['mc_gross'];
+        $mc_currency = $this->_postData['mc_currency'];
+
+        if ($increment_id && $mc_gross && $mc_currency) {
+            $this->_order = Yii::$service->order->getByIncrementId($increment_id);
+            if ($this->_order) {
+                $order_currency_code = $this->_order['order_currency_code'];
+                if ($order_currency_code == $mc_currency) {
+                    // 核对订单总额
+                    $currentCurrencyGrandTotal = $this->_order['grand_total'];
+                    // if (round($currentCurrencyGrandTotal, 2) == round($mc_gross, 2)) {
+                    // 因为float精度问题,使用高精度函数进行比较,精度到2位小数
+                    if(bccomp($currentCurrencyGrandTotal, $mc_gross, 2) == 0){
+                        return true;
+                    } else {
+                    }
+                } else {
+                }
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * @param $orderstatus | String 订单状态
+     * 根据接收的ipn消息,更改订单状态。
+     */
+    protected function updateOrderStatusByIpn($orderstatus = '')
+    {
+        $order_cancel_status = Yii::$service->order->payment_status_canceled;
+        // 如果订单状态被取消,那么不能进行支付。
+        if ($this->_order->order_status == $order_cancel_status) {
+            Yii::$service->helper->error->add('The order status has been canceled and you can not pay for item ,you can create a new order to pay');
+
+            return;
+        }
+        $updateArr = [];
+        if ($this->_postData['txn_type']) {
+            $updateArr['txn_type'] = $this->_postData['txn_type'];
+        }
+        if ($this->_postData['txn_id']) {
+            $updateArr['txn_id'] = $this->_postData['txn_id'];
+        }
+        if ($this->_postData['payer_id']) {
+            $updateArr['payer_id'] = $this->_postData['payer_id'];
+        }
+        if ($this->_postData['ipn_track_id']) {
+            $updateArr['ipn_track_id'] = $this->_postData['ipn_track_id'];
+        }
+        if ($this->_postData['receiver_id']) {
+            $updateArr['receiver_id'] = $this->_postData['receiver_id'];
+        }
+        if ($this->_postData['verify_sign']) {
+            $updateArr['verify_sign'] = $this->_postData['verify_sign'];
+        }
+        if ($this->_postData['charset']) {
+            $updateArr['charset'] = $this->_postData['charset'];
+        }
+        if ($this->_postData['mc_fee']) {
+            $updateArr['payment_fee'] = $this->_postData['mc_fee'];
+            $currency = $this->_postData['mc_currency'];
+            $updateArr['base_payment_fee'] = Yii::$service->page->currency->getBaseCurrencyPrice($this->_postData['mc_fee'], $currency);
+        }
+        if ($this->_postData['payment_type']) {
+            $updateArr['payment_type'] = $this->_postData['payment_type'];
+        }
+        if ($this->_postData['payment_date']) {
+            $updateArr['paypal_order_datetime'] = date('Y-m-d H:i:s', $this->_postData['payment_date']);
+        }
+        if ($this->_postData['protection_eligibility']) {
+            $updateArr['protection_eligibility'] = $this->_postData['protection_eligibility'];
+        }
+        $updateArr['updated_at'] = time();
+        //$this->_order->updated_at = time();
+        // 在service中不要出现事务代码,如果添加事务,请在调用层使用。
+        //$innerTransaction = Yii::$app->db->beginTransaction();
+        //try {
+        // 可以更改的订单状态
+            
+        if ($orderstatus) {
+            $updateArr['order_status'] = $orderstatus;
+            $this->_order->updateAll(
+                    $updateArr,
+                    [
+                        'and',
+                        ['order_id' => $this->_order['order_id']],
+                        ['in','order_status',$this->_allowChangOrderStatus]
+                    ]
+                );
+        // 指定了订单状态
+                // $this->_order->order_status = $orderstatus;
+                // $this->_order->save();
+                // $payment_status = strtolower($this->_postData['payment_status']);
+                // Yii::$app->mylog->log('save_'.$orderstatus);
+        } else {
+            $payment_status = strtolower($this->_postData['payment_status']);
+            if ($payment_status == $this->payment_status_completed) {
+                // paypal支付完成,将订单状态改成:收款已确认。
+                // 只有存在于 $this->_allowChangOrderStatus 数组的状态,才允许更改,按照目前的设置,取消了的订单是不允许更改的
+                $orderstatus = Yii::$service->order->payment_status_confirmed;
+                $updateArr['order_status'] = $orderstatus;
+                $updateColumn = $this->_order->updateAll(
+                        $updateArr,
+                        [
+                            'and',
+                            ['order_id' => $this->_order['order_id']],
+                            ['in','order_status',$this->_allowChangOrderStatus]
+                        ]
+                    );
+                //$this->_order->order_status = Yii::$service->order->payment_status_processing;
+                // 更新订单信息
+                //$this->_order->save();
+                // 因为IPN消息可能不止发送一次,但是这里只允许一次,
+                // 如果重复发送,$updateColumn 的更新返回值将为0
+                if (!empty($updateColumn)) {
+                    Yii::$service->order->orderPaymentCompleteEvent($this->_order['increment_id']);
+                    // 上面的函数已经执行下面的代码,因此注释掉。
+                        // $orderInfo = Yii::$service->order->getOrderInfoByIncrementId($this->_order['increment_id']);
+                        // 发送新订单邮件
+                        // Yii::$service->email->order->sendCreateEmail($orderInfo);
+                }
+            } elseif ($payment_status == $this->payment_status_pending) {
+                // pending 代表信用卡预付方式,需要等待paypal从信用卡中把钱扣除,因此订单状态是processing
+                $orderstatus = Yii::$service->order->payment_status_processing;
+                $updateArr['order_status'] = $orderstatus;
+                $updateColumn = $this->_order->updateAll(
+                        $updateArr,
+                        [
+                            'and',
+                            ['order_id' => $this->_order['order_id']],
+                            ['order_status' => Yii::$service->order->payment_status_pending]
+                        ]
+                    );
+            } elseif ($payment_status == $this->payment_status_failed) {
+                // 暂不处理
+            } elseif ($payment_status == $this->payment_status_refunded) {
+                // 暂不处理
+            } else {
+                // 暂不处理
+            }
+        }
+        //$innerTransaction->commit();
+        return true;
+        //} catch (\Exception $e) {
+        //	$innerTransaction->rollBack();
+        //}
+        //return false;
+    }
+
+    // express 部分
+
+    /**
+     * @param $token | String , 通过 下面的 PPHttpPost5 方法返回的paypal express的token
+     * @return String,通过token得到跳转的 paypal url,通过这个url跳转到paypal登录页面,进行支付的开始
+     */
+    public function getExpressCheckoutUrl($token)
+    {
+        if ($token) {
+            $webscrUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
+
+            return $webscrUrl.'?cmd=_express-checkout&token='.urlencode($token);
+        }
+    }
+    
+    /**
+     * @param $token | String , 通过 下面的 PPHttpPost5 方法返回的paypal standard的token
+     * @return String,通过token得到跳转的 paypal url,通过这个url跳转到paypal登录页面,进行支付的开始
+     */
+    public function getStandardCheckoutUrl($token)
+    {
+        if ($token) {
+            $webscrUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
+
+            return $webscrUrl.'?useraction=commit&cmd=_express-checkout&token='.urlencode($token);
+        }
+    }
+
+    /**
+     * @param $methodName_ | String,请求的方法,譬如: $methodName_ = "SetExpressCheckout";
+     * @param $nvpStr_ | String ,请求传递的购物车中的产品和总额部分的数据,组合成字符串的格式。
+     * @param $i | Int , 限制递归次数的变量,当api获取失败的时候,可以通过递归的方式多次尝试,直至超过最大失败次数,才会返回失败
+     * 此方法为获取token。返回的数据为数组,里面含有 ACK  TOKEN 等值。
+     * 也就是和paypal进行初次的api账号密码验证,成功后返回token等信息。
+     */
+    public function PPHttpPost5($methodName_, $nvpStr_, $i = 1)
+    {
+        $current_payment_method = Yii::$service->payment->getPaymentMethod();
+        if ($current_payment_method == $this->standard_payment_method) {
+            $API_NvpUrl     = Yii::$service->payment->getStandardNvpUrl($this->standard_payment_method);
+            $API_Signature  = Yii::$service->payment->getStandardSignature($this->standard_payment_method);
+            $API_UserName   = Yii::$service->payment->getStandardAccount($this->standard_payment_method);
+            $API_Password   = Yii::$service->payment->getStandardPassword($this->standard_payment_method);
+            $ipn_url        = Yii::$service->payment->getStandardIpnUrl($this->standard_payment_method);
+        } else {
+            $API_NvpUrl = Yii::$service->payment->getExpressNvpUrl($this->express_payment_method);
+            $API_Signature  = Yii::$service->payment->getExpressSignature($this->express_payment_method);
+            $API_UserName   = Yii::$service->payment->getExpressAccount($this->express_payment_method);
+            $API_Password   = Yii::$service->payment->getExpressPassword($this->express_payment_method);
+            $ipn_url        = Yii::$service->payment->getExpressIpnUrl($this->express_payment_method);
+        }
+        // Set the API operation, version, and API signature in the request.
+        $nvpreq  =  "METHOD=$methodName_&PWD=$API_Password&USER=$API_UserName&SIGNATURE=$API_Signature$nvpStr_";
+        $nvpreq .=  "&PAYMENTREQUEST_0_NOTIFYURL=".urlencode($ipn_url);
+        //echo $nvpreq;
+        //\Yii::info($nvpreq, 'fecshop_debug');
+       
+        //exit;
+        $ch = curl_init();
+        curl_setopt($ch, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_1_1);
+        curl_setopt($ch, CURLOPT_URL, $API_NvpUrl);
+        curl_setopt($ch, CURLOPT_VERBOSE, 1);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+        curl_setopt($ch, CURLOPT_POST, 1);
+        curl_setopt($ch, CURLOPT_SSLVERSION, 6);
+        if ($this->use_local_certs) {
+            $crtFile = $this->getCrtFile('api-3t.paypal.com');
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+            curl_setopt($ch, CURLOPT_CAINFO, $crtFile);
+        } else {
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        }
+        // Set the request as a POST FIELD for curl.
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $nvpreq);
+        curl_setopt($ch, CURLOPT_FORBID_REUSE, 1);
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 30);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, ['Connection: Close']);
+        // Get response from the server.
+        $httpResponse = curl_exec($ch);
+        //echo "<br><br>%%%%%".$httpResponse."%%%%%<br><br>";
+        if (!$httpResponse) {
+            $i++;
+            if ($i > 5) {
+                //获取三次失败后,则推出。
+                exit("$methodName_ failed: ".curl_error($ch).'('.curl_errno($ch).')');
+            } else {
+                $httpResponse = $this->PPHttpPost5($methodName_, $nvpStr_, $i);
+            }
+        } else {
+            //第一次获取数据失败,则再次获取。并返回、
+            if ($i > 0) {
+                //return $httpResponse;
+            }
+        }
+        //paypal返回的是一系列的字符串,譬如:L_TIMESTAMP0=2014-11-08T01:51:13Z&L_TIMESTAMP1=2014-11-08T01:40:41Z&L_TIMESTAMP2=2014-11-08T01:40:40Z&
+        //下面要做的是先把字符串通过&字符打碎成数组
+        //
+        //echo "***************<br>";
+        //echo urldecode($httpResponse);
+        //echo "<br>***************<br>";
+        $httpResponseAr = explode('&', urldecode($httpResponse));
+        $httpParsedResponseAr = [];
+        foreach ($httpResponseAr as $i => $value) {
+            $tmpAr = explode('=', $value);
+            if (sizeof($tmpAr) > 1) {
+                $httpParsedResponseAr[$tmpAr[0]] = $tmpAr[1];
+            }
+        }
+        if ((0 == sizeof($httpParsedResponseAr)) || !array_key_exists('ACK', $httpParsedResponseAr)) {
+            exit("Invalid HTTP Response for POST request($nvpreq) to $API_NvpUrl.");
+        }
+
+        return $httpParsedResponseAr;
+    }
+
+    /**
+     * @param $nvp_array | Array, 各个配置参数
+     * 将数组里面的key和value,组合成url的字符串,生成nvp url
+     */
+    public function getRequestUrlStrByArray($nvp_array)
+    {
+        $str = '';
+        if (is_array($nvp_array) && !empty($nvp_array)) {
+            foreach ($nvp_array as $k=>$v) {
+                $str .= '&'.urlencode($k).'='.urlencode($v);
+            }
+        }
+        //echo $str;exit;
+        return $str;
+    }
+
+    /**
+     * 【paypal支付部分】api发送付款请求的参数部分
+     *  通过该函数,将参数组合成字符串,为下一步api发送给paypal进行付款做准备
+     */
+    public function getCheckoutPaymentNvpStr($token)
+    {
+        $nvp_array = [];
+        $nvp_array['PAYERID'] = $this->getPayerID();
+        $nvp_array['TOKEN']   = $this->getToken();
+        $nvp_array['PAYMENTREQUEST_0_PAYMENTACTION'] = 'Sale';
+        $nvp_array['VERSION'] = $this->version;
+        // https://developer.paypal.com/docs/classic/api/merchant/SetExpressCheckout_API_Operation_NVP/
+        // 检查地址
+        $nvp_array['ADDROVERRIDE'] = 0;
+        //ADDROVERRIDE
+        // 得到购物车的信息,通过购物车信息填写。
+        $orderInfo      = Yii::$service->order->getInfoByPaymentToken($token);
+        //$cartInfo     = Yii::$service->cart->getCartInfo(true);
+        $currency       = Yii::$service->page->currency->getCurrentCurrency();
+        $grand_total    = Yii::$service->helper->format->number_format($orderInfo['grand_total']);
+        $subtotal       = Yii::$service->helper->format->number_format($orderInfo['subtotal']);
+        $shipping_total = Yii::$service->helper->format->number_format($orderInfo['shipping_total']);
+        $discount_amount= Yii::$service->helper->format->number_format($orderInfo['subtotal_with_discount']);
+        $subtotal       = $subtotal - $discount_amount;
+
+        $nvp_array['PAYMENTREQUEST_0_SHIPTOSTREET']         = $orderInfo['customer_address_street1'].' '.$orderInfo['customer_address_street2'];
+        $nvp_array['PAYMENTREQUEST_0_SHIPTOCITY']           = $orderInfo['customer_address_city'];
+        $nvp_array['PAYMENTREQUEST_0_SHIPTOSTATE']          = $orderInfo['customer_address_state_name'];
+        $nvp_array['PAYMENTREQUEST_0_SHIPTOCOUNTRYCODE']    = $orderInfo['customer_address_country'];
+        $nvp_array['PAYMENTREQUEST_0_SHIPTOZIP']            = $orderInfo['customer_address_zip'];
+        $nvp_array['PAYMENTREQUEST_0_SHIPTONAME']           = $orderInfo['customer_firstname'].' '.$orderInfo['customer_lastname'];
+        $nvp_array['PAYMENTREQUEST_0_INVNUM']               = $orderInfo['increment_id'];
+
+        $nvp_array['PAYMENTREQUEST_0_CURRENCYCODE']         = $currency;
+        $nvp_array['PAYMENTREQUEST_0_AMT']                  = $grand_total;
+        $nvp_array['PAYMENTREQUEST_0_ITEMAMT']              = $subtotal;
+        $nvp_array['PAYMENTREQUEST_0_SHIPPINGAMT']          = $shipping_total;
+        if ($this->seller_email) {
+            $nvp_array['PAYMENTREQUEST_0_SELLERPAYPALACCOUNTID']  = $this->seller_email;
+        }
+        $i = 0;
+
+        foreach ($orderInfo['products'] as $item) {
+            $nvp_array['L_PAYMENTREQUEST_0_QTY'.$i]     = $item['qty'];
+            $nvp_array['L_PAYMENTREQUEST_0_NUMBER'.$i]  = $item['sku'];
+            $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i]     = Yii::$service->helper->format->number_format($item['price']);
+            $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i]    = $item['name'];
+            $nvp_array['L_PAYMENTREQUEST_0_CURRENCYCODE'.$i] = $currency;
+            $i++;
+        }
+        $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i] = 'Discount';
+        $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i]  = '-'.$discount_amount;
+        //var_dump($nvp_array);
+        $nvpStr = $this->getRequestUrlStrByArray($nvp_array);
+        //var_dump($nvpStr);
+        return $nvpStr;
+    }
+
+    /**
+     * 【paypal快捷支付部分】将参数组合成字符串。
+     *  通过api token,从paypal获取用户在paypal保存的货运地址。
+     */
+    public function getExpressAddressNvpStr()
+    {
+        $nvp_array = [];
+        $nvp_array['VERSION'] = Yii::$service->payment->paypal->version;
+        $nvp_array['token'] = Yii::$service->payment->paypal->getToken();
+
+        return $this->getRequestUrlStrByArray($nvp_array);
+    }
+
+    /**
+     * @param $landingPage | String ,访问api的类型,譬如login
+     * 【paypal快捷支付部分】通过购物车中的数据,组合成访问paypal express api的url
+     * 这里返回的的字符串,是快捷支付部分获取token和payerId的参数。
+     * 将返回的参数,传递给Yii::$service->payment->paypal->PPHttpPost5($methodName_, $nvpStr_)
+     * 最终得到paypal express的token和payerId
+     */
+    public function getExpressTokenNvpStr($landingPage = 'Login', $return_url='', $cancel_url='')
+    {
+        $nvp_array = [];
+        $nvp_array['LANDINGPAGE'] = $landingPage;
+        
+        
+        if ($return_url) {
+            $nvp_array['RETURNURL'] = $return_url;
+        } else {
+            $nvp_array['RETURNURL'] = Yii::$service->payment->getExpressReturnUrl($this->express_payment_method);
+        }
+        if ($cancel_url) {
+            $nvp_array['CANCELURL'] = $cancel_url;
+        } else {
+            $nvp_array['CANCELURL'] = Yii::$service->payment->getExpressCancelUrl($this->express_payment_method);
+        }
+        $nvp_array['PAYMENTREQUEST_0_PAYMENTACTION'] = 'Sale';
+        $nvp_array['VERSION'] = $this->version;
+        // 得到购物车的信息,通过购物车信息填写。
+        $cartInfo = Yii::$service->cart->getCartInfo(true);
+        $currency = Yii::$service->page->currency->getCurrentCurrency();
+
+        $grand_total = $cartInfo['grand_total'];
+        $subtotal = $cartInfo['product_total'];
+        $shipping_total = $cartInfo['shipping_cost'];
+        $discount_amount = $cartInfo['coupon_cost'];
+        $subtotal = $subtotal - $discount_amount;
+
+        $nvp_array['PAYMENTREQUEST_0_CURRENCYCODE'] = $currency;
+        $nvp_array['PAYMENTREQUEST_0_AMT'] = $grand_total;
+        $nvp_array['PAYMENTREQUEST_0_ITEMAMT'] = $subtotal;
+        $nvp_array['PAYMENTREQUEST_0_SHIPPINGAMT'] = $shipping_total;
+        if ($this->seller_email) {
+            $nvp_array['PAYMENTREQUEST_0_SELLERPAYPALACCOUNTID']  = $this->seller_email;
+        }
+        $i = 0;
+
+        foreach ($cartInfo['products'] as $item) {
+            $nvp_array['L_PAYMENTREQUEST_0_QTY'.$i] = $item['qty'];
+            $nvp_array['L_PAYMENTREQUEST_0_NUMBER'.$i] = $item['sku'];
+            $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i] = $item['product_price'];
+            $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i] = Yii::$service->store->getStoreAttrVal($item['name'], 'name');
+            $nvp_array['L_PAYMENTREQUEST_0_CURRENCYCODE'.$i] = $currency;
+            $i++;
+        }
+        $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i] = 'Discount';
+        $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i] = '-'.$discount_amount;
+
+        return $this->getRequestUrlStrByArray($nvp_array);
+    }
+    
+    /**
+     * @param $landingPage | String ,访问api的类型,譬如login
+     * 【paypal标准支付部分】通过订单中的数据,组合成访问paypal api的url
+     * 这里返回的的字符串,是标准支付部分获取token和payerId的参数。
+     *  通过 $checkoutReturn = Yii::$service->payment->paypal->PPHttpPost5($methodName_, $nvpStr_);
+     *  获取token和payerId的参数。($nvpStr_ 就是本函数的返回值)
+     */
+    public function getStandardTokenNvpStr($landingPage = 'Login', $return_url='', $cancel_url='')
+    {
+        $nvp_array = [];
+        $nvp_array['LANDINGPAGE'] = $landingPage;
+        if ($return_url) {
+            $nvp_array['RETURNURL'] = $return_url;
+        } else {
+            $nvp_array['RETURNURL'] = Yii::$service->payment->getStandardReturnUrl('paypal_standard');
+        }
+        if ($cancel_url) {
+            $nvp_array['CANCELURL'] = $cancel_url;
+        } else {
+            $nvp_array['CANCELURL'] = Yii::$service->payment->getStandardCancelUrl('paypal_standard');
+        }
+        $nvp_array['PAYMENTREQUEST_0_PAYMENTACTION'] = 'Sale';
+        $nvp_array['VERSION'] = $this->version;
+        // 得到购物车的信息,通过购物车信息填写。
+        $orderInfo      = Yii::$service->order->getCurrentOrderInfo();
+        //var_dump($orderInfo);
+        $currency       = $orderInfo['order_currency_code'];
+
+        $grand_total    = Yii::$service->helper->format->number_format($orderInfo['grand_total']);
+        $subtotal       = Yii::$service->helper->format->number_format($orderInfo['subtotal']);
+        $shipping_total = Yii::$service->helper->format->number_format($orderInfo['shipping_total']);
+        $discount_amount= $orderInfo['subtotal_with_discount'] ? $orderInfo['subtotal_with_discount'] : 0;
+        $subtotal = $subtotal - $discount_amount;
+
+        $nvp_array['PAYMENTREQUEST_0_CURRENCYCODE'] = $currency;
+        $nvp_array['PAYMENTREQUEST_0_AMT']          = $grand_total;
+        $nvp_array['PAYMENTREQUEST_0_ITEMAMT']      = $subtotal;
+        $nvp_array['PAYMENTREQUEST_0_SHIPPINGAMT']  = $shipping_total;
+        if ($this->seller_email) {
+            $nvp_array['PAYMENTREQUEST_0_SELLERPAYPALACCOUNTID']  = $this->seller_email;
+        }
+        $i = 0;
+
+        foreach ($orderInfo['products'] as $item) {
+            $nvp_array['L_PAYMENTREQUEST_0_QTY'.$i] = $item['qty'];
+            $nvp_array['L_PAYMENTREQUEST_0_NUMBER'.$i] = $item['sku'];
+            $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i] = Yii::$service->helper->format->number_format($item['price']);
+            $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i] = $item['name'];
+            ;
+            $nvp_array['L_PAYMENTREQUEST_0_CURRENCYCODE'.$i] = $currency;
+            $i++;
+        }
+        $nvp_array['L_PAYMENTREQUEST_0_NAME'.$i] = 'Discount';
+        $nvp_array['L_PAYMENTREQUEST_0_AMT'.$i] = '-'.$discount_amount;
+        
+        //var_dump($nvp_array);
+        //exit;
+        return $this->getRequestUrlStrByArray($nvp_array);
+    }
+
+    /**
+     * 从get参数里得到paypal支付的token
+     */
+    public function getToken()
+    {
+        if (!$this->token) {
+            $token = Yii::$app->request->get('token');
+            if (!$token) {
+                $token = Yii::$app->request->post('token');
+            }
+            $token = \Yii::$service->helper->htmlEncode($token);
+            if ($token) {
+                $this->token = $token;
+            }
+        }
+        return $this->token;
+    }
+
+    /**
+     * 从get参数里得到paypal支付的PayerID
+     */
+    public function getPayerID()
+    {
+        if (!$this->payerID) {
+            $payerID = Yii::$app->request->get('PayerID');
+            if (!$payerID) {
+                $payerID = Yii::$app->request->post('PayerID');
+            }
+            $payerID = \Yii::$service->helper->htmlEncode($payerID);
+            if ($payerID) {
+                $this->payerID = $payerID;
+            }
+        }
+        return $this->payerID;
+    }
+
+    /**
+     * @param $doCheckoutReturn | Array ,
+     * paypal付款状态提交后,更新订单的支付部分的信息。
+     */
+    public function updateOrderPayment($doCheckoutReturn, $token)
+    {
+        if ($doCheckoutReturn) {
+            $order = Yii::$service->order->getByPaymentToken($token);
+            $order_cancel_status = Yii::$service->order->payment_status_canceled;
+            // 如果订单状态被取消,那么不能进行支付。
+            if ($order['order_status'] == $order_cancel_status) {
+                Yii::$service->helper->errors->add('The order status has been canceled and you can not pay for item ,you can create a new order to pay');
+
+                return false;
+            }
+            $updateArr = [];
+            if ($order['increment_id']) {
+                //echo 'bbb';
+                $updateArr['txn_id'] = $doCheckoutReturn['PAYMENTINFO_0_TRANSACTIONID'];
+                $updateArr['txn_type'] = $doCheckoutReturn['PAYMENTINFO_0_TRANSACTIONTYPE'];
+                $PAYMENTINFO_0_AMT = $doCheckoutReturn['PAYMENTINFO_0_AMT'];
+                $updateArr['payment_fee'] = $doCheckoutReturn['PAYMENTINFO_0_FEEAMT'];
+
+                $currency = $doCheckoutReturn['PAYMENTINFO_0_CURRENCYCODE'];
+                $updateArr['base_payment_fee'] = Yii::$service->page->currency->getBaseCurrencyPrice($updateArr['payment_fee'], $currency);
+                $updateArr['payer_id'] = $this->getPayerID();
+
+                $updateArr['correlation_id'] = $doCheckoutReturn['CORRELATIONID'];
+                $updateArr['protection_eligibility'] = $doCheckoutReturn['PAYMENTINFO_0_PROTECTIONELIGIBILITY'];
+                $updateArr['protection_eligibility_type'] = $doCheckoutReturn['PAYMENTINFO_0_PROTECTIONELIGIBILITYTYPE'];
+                $updateArr['secure_merchant_account_id'] = $doCheckoutReturn['PAYMENTINFO_0_SECUREMERCHANTACCOUNTID'];
+                $updateArr['build'] = $doCheckoutReturn['BUILD'];
+                $updateArr['payment_type'] = $doCheckoutReturn['PAYMENTINFO_0_PAYMENTTYPE'];
+                $updateArr['paypal_order_datetime'] = date('Y-m-d H:i:s', $doCheckoutReturn['PAYMENTINFO_0_ORDERTIME']);
+                $PAYMENTINFO_0_PAYMENTSTATUS = $doCheckoutReturn['PAYMENTINFO_0_PAYMENTSTATUS'];
+                $updateArr['updated_at'] = time();
+                if (
+                    strtolower($PAYMENTINFO_0_PAYMENTSTATUS) == $this->payment_status_completed
+                    ||
+                    strtolower($PAYMENTINFO_0_PAYMENTSTATUS) == $this->payment_status_processed
+                ) {
+                    $order_status = Yii::$service->order->payment_status_confirmed;
+                    if ($currency == $order['order_currency_code'] && $PAYMENTINFO_0_AMT == $order['grand_total']) {
+                        $updateArr['order_status'] = $order_status;
+                        $updateColumn = $order->updateAll(
+                            $updateArr,
+                            [
+                                'and',
+                                ['order_id' => $order['order_id']],
+                                ['in','order_status',$this->_allowChangOrderStatus]
+                            ]
+                        );
+                        // 因为IPN消息可能不止发送一次,但是这里只允许一次,
+                        // 如果重复发送,$updateColumn 的更新返回值将为0
+                        if (!empty($updateColumn)) {
+                            // 执行订单支付成功后的事情。
+                            Yii::$service->order->orderPaymentCompleteEvent($order['increment_id']);
+                            // 上面的函数已经执行下面的代码,因此注释掉。
+                            // $orderInfo = Yii::$service->order->getOrderInfoByIncrementId($order['increment_id']);
+                            // Yii::$service->email->order->sendCreateEmail($orderInfo);
+                        }
+                        return true;
+                    } else {
+                        // 金额不一致,判定为欺诈
+                        Yii::$service->helper->errors->add('The amount of payment is inconsistent with the amount of the order');
+                        $order_status = Yii::$service->order->payment_status_suspected_fraud;
+                        $updateArr['order_status'] = $order_status;
+                        $updateColumn = $order->updateAll(
+                            $updateArr,
+                            [
+                                'and',
+                                ['order_id' => $order['order_id']],
+                                ['in','order_status',$this->_allowChangOrderStatus]
+                            ]
+                        );
+                    }
+                } elseif (strtolower($PAYMENTINFO_0_PAYMENTSTATUS) == $this->payment_status_pending) {
+                    // 这种情况代表paypal 信用卡预售,需要等待一段时间才知道是否收到钱
+                    $order_status = Yii::$service->order->payment_status_processing;
+                    if ($currency == $order['order_currency_code'] && $PAYMENTINFO_0_AMT == $order['grand_total']) {
+                        $updateArr['order_status'] = $order_status;
+                        $updateColumn = $order->updateAll(
+                            $updateArr,
+                            [
+                                'and',
+                                ['order_id' => $order['order_id']],
+                                ['order_status' => Yii::$service->order->payment_status_pending]
+                            ]
+                        );
+                        // 这种情况并没有接收到paypal的钱,只是一种支付等待状态,
+                        // 因此,对于这种支付状态,视为正常订单,但是没有支付成功,需要延迟等待,如果支付成功,paypal会继续发送IPN消息。
+                        return true;
+                    } else {
+                        // 金额不一致,判定为欺诈
+                        Yii::$service->helper->errors->add('The amount of payment is inconsistent with the amount of the order');
+                        $order_status = Yii::$service->order->payment_status_suspected_fraud;
+                        $updateArr['order_status'] = $order_status;
+                        $updateColumn = $order->updateAll(
+                            $updateArr,
+                            [
+                                'and',
+                                ['order_id' => $order['order_id']],
+                                ['in','order_status',$this->_allowChangOrderStatus]
+                            ]
+                        );
+                    }
+                } else {
+                    Yii::$service->helper->errors->add('paypal payment is not complete , current payment status is {payment_status}', ['payment_status' => $PAYMENTINFO_0_PAYMENTSTATUS]);
+                }
+            } else {
+                Yii::$service->helper->errors->add('current order is not exist');
+            }
+        } else {
+            Yii::$service->helper->errors->add('CheckoutReturn is empty');
+        }
+
+        return false;
+    }
+}

+ 41 - 15
vendor/fancyecommerce/fecshop/services/payment/Paypal.php

@@ -87,6 +87,12 @@ class Paypal extends Service
     public function init()
     {
         parent::init();
+        
+        $this->_account = Yii::$app->store->get('payment_paypal', 'paypal_account');
+        $this->_password = Yii::$app->store->get('payment_paypal', 'paypal_password');
+        $this->_signature = Yii::$app->store->get('payment_paypal', 'paypal_signature');
+        $this->_env = Yii::$app->store->get('payment_paypal', 'paypal_env');
+
         list($this->_ipnMessageModelName, $this->_ipnMessageModel) = \Yii::mapGet($this->_ipnMessageModelName);
         $this->_allowChangOrderStatus = [
             Yii::$service->order->payment_status_pending,
@@ -164,10 +170,15 @@ class Paypal extends Service
         $urlParamStr   .= '&cmd=_notify-validate';
         $urlParamStr    = substr($urlParamStr, 1);
         $current_payment_method = Yii::$service->payment->getPaymentMethod();
-        if ($current_payment_method == $this->standard_payment_method) {
-            $verifyUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
+        // if ($current_payment_method == $this->standard_payment_method) {
+        //     $verifyUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
+        // } else {
+        //     $verifyUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
+        // }
+        if ($this->_env == Yii::$service->payment->env_sanbox) {
+            $verifyUrl = 'https://www.sandbox.paypal.com/cgi-bin/webscr';
         } else {
-            $verifyUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
+            $verifyUrl = 'https://www.paypal.com/cgi-bin/webscr';
         }
         $verifyUrl      = $verifyUrl.'?'.$urlParamStr;
 
@@ -411,8 +422,12 @@ class Paypal extends Service
     public function getExpressCheckoutUrl($token)
     {
         if ($token) {
-            $webscrUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
-
+            //$webscrUrl = Yii::$service->payment->getExpressWebscrUrl($this->express_payment_method);
+            if ($this->_env == Yii::$service->payment->env_sanbox) {
+                $webscrUrl = 'https://www.sandbox.paypal.com/cgi-bin/webscr';
+            } else {
+                $webscrUrl = 'https://www.paypal.com/cgi-bin/webscr';
+            }
             return $webscrUrl.'?cmd=_express-checkout&token='.urlencode($token);
         }
     }
@@ -424,8 +439,12 @@ class Paypal extends Service
     public function getStandardCheckoutUrl($token)
     {
         if ($token) {
-            $webscrUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
-
+            // $webscrUrl = Yii::$service->payment->getStandardWebscrUrl($this->standard_payment_method);
+            if ($this->_env == Yii::$service->payment->env_sanbox) {
+                $webscrUrl = 'https://www.sandbox.paypal.com/cgi-bin/webscr';
+            } else {
+                $webscrUrl = 'https://www.paypal.com/cgi-bin/webscr';
+            }
             return $webscrUrl.'?useraction=commit&cmd=_express-checkout&token='.urlencode($token);
         }
     }
@@ -440,19 +459,26 @@ class Paypal extends Service
     public function PPHttpPost5($methodName_, $nvpStr_, $i = 1)
     {
         $current_payment_method = Yii::$service->payment->getPaymentMethod();
+        $API_NvpUrl     = Yii::$service->payment->getStandardNvpUrl($this->standard_payment_method);
+        $API_Signature  = $this->_signature;
+        $API_UserName   = $this->_account;
+        $API_Password   = $this->_password;
+
+        if ($this->_env == Yii::$service->payment->env_sanbox) {
+            $API_NvpUrl = 'https://api-3t.sandbox.paypal.com/nvp';
+        } else {
+            $API_NvpUrl = 'https://api-3t.paypal.com/nvp';
+        }
+
+
+
         if ($current_payment_method == $this->standard_payment_method) {
-            $API_NvpUrl     = Yii::$service->payment->getStandardNvpUrl($this->standard_payment_method);
-            $API_Signature  = Yii::$service->payment->getStandardSignature($this->standard_payment_method);
-            $API_UserName   = Yii::$service->payment->getStandardAccount($this->standard_payment_method);
-            $API_Password   = Yii::$service->payment->getStandardPassword($this->standard_payment_method);
             $ipn_url        = Yii::$service->payment->getStandardIpnUrl($this->standard_payment_method);
         } else {
-            $API_NvpUrl = Yii::$service->payment->getExpressNvpUrl($this->express_payment_method);
-            $API_Signature  = Yii::$service->payment->getExpressSignature($this->express_payment_method);
-            $API_UserName   = Yii::$service->payment->getExpressAccount($this->express_payment_method);
-            $API_Password   = Yii::$service->payment->getExpressPassword($this->express_payment_method);
             $ipn_url        = Yii::$service->payment->getExpressIpnUrl($this->express_payment_method);
         }
+
+     
         // Set the API operation, version, and API signature in the request.
         $nvpreq  =  "METHOD=$methodName_&PWD=$API_Password&USER=$API_UserName&SIGNATURE=$API_Signature$nvpStr_";
         $nvpreq .=  "&PAYMENTREQUEST_0_NOTIFYURL=".urlencode($ipn_url);