<%
'/***************************************************************************************************************
	'* FileName:	alipay_Notify.asp
	'* Description:	本Asp文件為Asp網店集成支付寶最新payto接口的示例代碼,用于接收支付寶傳遞過來反饋通知（買家已付款請賣家發貨、買家已收到貨物交易結束、支付寶測試商戶接口是否正常）
	'* Copyright:	Copyright (c) 2005/7/24
	'* Company:		淘寶網支付寶開發者論壇(http://dev.alipay.com)、5HD圖展平臺(http://www.5hd.cn)
	'* Author:		yeaome(小葉/葉老四)
	'* Version:		Ver 2.0.0
	'* Contact_Me:	wangwang:yeaome ; QQ:38355624 ; MSN:yeaome@msn.com ; Mobile:13923706355/0755-83302844
'****************************************************************************************************************/
%>
<!--#include file="./myAlipay.asp"-->
<%
	'定義支付寶通知接口傳遞過來的參數
	Dim msg_id,order_no,gross,buyer_email,buyer_name,buyer_address,buyer_zipcode,buyer_tel,buyer_mobile,action,s_date,ac
	
	Dim returnTxt		'返回給支付寶通知接口的結果
	Dim alipayNotifyURL	'支付寶查詢接口URL
	Dim myalipayEmail	'商戶的支付寶Email
	Dim myAlipayObj,ResponseTxt
	
	returnTxt			= "Error"
	alipayNotifyURL		= "http://notify.alipay.com/trade/notify_query.do?"
	myalipayEmail		= "merchanttool@alipay.com"

	'創建一個myAlipay實例,并初始化myAlipay_Initialize()
	Set myAlipayObj		= New myAlipay
	myAlipayObj.myAlipay_Initialize()

	'檢查支付寶通知接口傳遞過來的參數是否合法
	msg_id			= DelStr(Request("msg_id"))
	order_no		= DelStr(Request("order_no"))
	gross			= DelStr(Request("gross"))
	buyer_email		= DelStr(Request("buyer_email"))
	buyer_name		= DelStr(Request("buyer_name"))
	buyer_address	= DelStr(Request("buyer_address"))
	buyer_zipcode	= DelStr(Request("buyer_zipcode"))
	buyer_tel		= DelStr(Request("buyer_tel"))
	buyer_mobile	= DelStr(Request("buyer_mobile"))
	action			= DelStr(Request("action"))
	s_date			= DelStr(Request("date"))
	ac				= DelStr(Request("ac"))

	alipayNotifyURL	= alipayNotifyURL & "msg_id=" & msg_id & "&email=" & myalipayEmail & "&order_no=" & order_no
	ResponseTxt		= myAlipayObj.getHTTPURL(alipayNotifyURL)

	'事務處理流程如下：
	'1、支付寶通知接口請求該鏈接，并把各參數傳遞過來
	'2、商戶URL頁面接收各參數并做簡單處理后，調用支付寶查詢接口，獲得支付寶返回來的true或false結果，用于判斷是否是支付寶發過來的請求
	'3、根據支付寶返回來的true結果，進行后臺數據處理
	'4、處理完成后，把處理結果反饋給支付寶通知接口

	'測試商戶網站URL是否正確安裝
	If action = "test" Then
		returnTxt	= "Y"

	'發貨通知
	ElseIf action = "sendOff" Then
		returnTxt		= "N"
		If (ResponseTxt = "true") Or (ResponseTxt = "false") Then
			'更新數據在商戶系統里的訂單數據；如果已經發貨，則將returnTxt置為Y，否則為N
		Else
			'非法數據，不做更新
		End If
	
	'交易結束通知
	ElseIf action = "checkOut" Then
		returnTxt	= "Y"
		If (ResponseTxt = "true") Or (ResponseTxt = "false") Then
			'更新數據在商戶系統里的訂單數據；如果數據更新成功，則將returnTxt置為Y，否則為N
		Else
			'非法數據，不做更新
			returnTxt	= "N"
		End If

	End If

	Response.Write returnTxt
	

	'調用方法 DelStr(值)，防止SQL注入攻擊
	Function DelStr(Str)
		If IsNull(Str) Or IsEmpty(Str) Then
			Str	= ""
		End If
		DelStr	= Replace(Str,";","")
		DelStr	= Replace(DelStr,"'","")
		DelStr	= Replace(DelStr,"&","")
		DelStr	= Replace(DelStr," ","")
		DelStr	= Replace(DelStr,"　","")
		DelStr	= Replace(DelStr,"%20","")
		DelStr	= Replace(DelStr,"--","")
		DelStr	= Replace(DelStr,"==","")
		DelStr	= Replace(DelStr,"<","")
		DelStr	= Replace(DelStr,">","")
		DelStr	= Replace(DelStr,"%","")
	End Function
%>