WXBizMsgCrypt::encryptMsg() - Code Metrics - tianye/WechatOpenPlatform - Measure and Improve Code Quality continuously with Scrutinizer

WXBizMsgCrypt::encryptMsg() B
last analyzed 2017-08-29 08:44 UTC

↳ Parent: WXBizMsgCrypt

Complexity

Conditions	4
Paths	5

Size

Total Lines	32
Code Lines	18

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	4
eloc	18
nc	5
nop	4
dl	0
loc	32
rs	8.5806
c	0
b	0
f	0

<?php

namespace OpenOauth\Core\WechatCode;;

/**
 * 对公众平台发送给公众账号的消息加解密示例代码.
 *
 * @copyright Copyright (c) 1998-2014 Tencent Inc.
 */

use OpenOauth\Core\WechatCode\Sha1;
use OpenOauth\Core\WechatCode\Xmlparse;
use OpenOauth\Core\WechatCode\Pkcs7Encoder;
use OpenOauth\Core\WechatCode\ErrorCode;
use OpenOauth\Core\WechatCode\Prpcrypt;

/**
 * 1.第三方回复加密消息给公众平台；
 * 2.第三方收到公众平台发送的消息，验证消息的安全性，并对消息进行解密。
 */
class WXBizMsgCrypt
{
    private $token;
    private $encodingAesKey;
    private $appId;

    /**
     * 构造函数
     *
     * @param $token          string 公众平台上，开发者设置的token
     * @param $encodingAesKey string 公众平台上，开发者设置的EncodingAESKey
     * @param $appId          string 公众平台的appId
     */
    public function __construct($token, $encodingAesKey, $appId)
    {
        $this->token          = $token;
        $this->encodingAesKey = $encodingAesKey;
        $this->appId          = $appId;
    }

    /**
     * 将公众平台回复用户的消息加密打包.
     * <ol>
     *    <li>对要发送的消息进行AES-CBC加密</li>
     *    <li>生成安全签名</li>
     *    <li>将消息密文和安全签名打包成xml格式</li>
     * </ol>
     *
     * @param $replyMsg     string 公众平台待回复用户的消息，xml格式的字符串
     * @param $timeStamp    string 时间戳，可以自己生成，也可以用URL参数的timestamp
     * @param $nonce        string 随机串，可以自己生成，也可以用URL参数的nonce
     * @param &$encryptMsg  string 加密后的可以直接回复用户的密文，包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串,
     *                      当return返回0时有效
     *
     * @return int 成功0，失败返回对应的错误码
     */
    public function encryptMsg($replyMsg, $timeStamp = null, $nonce, &$encryptMsg)
    {
        $pc = new Prpcrypt($this->encodingAesKey);
        //加密
        $array = $pc->encrypt($replyMsg, $this->appId);

        $ret = $array[0];
        if ($ret != 0) {
            return $ret;
        }

        if ($timeStamp == null) {
            $timeStamp = time();
        }
        $encrypt = $array[1];

        //生成安全签名
        $sha1  = new SHA1;
        $array = $sha1->getSHA1($this->token, $timeStamp, $nonce, $encrypt);

        $ret = $array[0];
        if ($ret != 0) {
            return $ret;
        }
        $signature = $array[1];

        //生成发送的xml
        $xmlparse   = new XMLParse;
        $encryptMsg = $xmlparse->generate($encrypt, $signature, $timeStamp, $nonce);

        return ErrorCode::$OK;
    }

    /**
     * 检验消息的真实性，并且获取解密后的明文.
     * <ol>
     *    <li>利用收到的密文生成安全签名，进行签名验证</li>
     *    <li>若验证通过，则提取xml中的加密消息</li>
     *    <li>对消息进行解密</li>
     * </ol>
     *
     * @param $msgSignature string 签名串，对应URL参数的msg_signature
     * @param $timestamp    string 时间戳 对应URL参数的timestamp
     * @param $nonce        string 随机串，对应URL参数的nonce
     * @param $postData     string 密文，对应POST请求的数据
     * @param &$msg         string 解密后的原文，当return返回0时有效
     *
     * @return int 成功0，失败返回对应的错误码
     */
    public function decryptMsg($msgSignature, $timestamp = null, $nonce, $postData, &$msg)
    {
        if (strlen($this->encodingAesKey) != 43) {
            return ErrorCode::$IllegalAesKey;
        }
        $pc = new Prpcrypt($this->encodingAesKey);

        //提取密文
        $xmlparse = new XMLParse;
        $array    = $xmlparse->extract($postData);

        $ret = $array[0];

        if ($ret != 0) {
            return $ret;
        }

        if ($timestamp == null) {
            $timestamp = time();
        }

        $encrypt     = $array[1];
        $touser_name = $array[2];
$myVar = 'Value';
$higher = false;

if (rand(1, 6) > 3) {
    $higher = true;
} else {
    $higher = false;
}

        //验证安全签名
        $sha1  = new SHA1;
        $array = $sha1->getSHA1($this->token, $timestamp, $nonce, $encrypt);
        $ret   = $array[0];

        if ($ret != 0) {
            return $ret;
        }

        $signature = $array[1];

        if ($signature != $msgSignature) {
            return ErrorCode::$ValidateSignatureError;
        }

        $result = $pc->decrypt($encrypt, $this->appId);
        if ($result[0] != 0) {
            return $result[0];
        }
        $msg = $result[1];

        return ErrorCode::$OK;
    }
}


1			<?php
			0 ignored issues – show Coding Style Compatibility introduced 2016-08-06 08:39 UTC by Report Bug Copy Issue Report For compatibility and reusability of your code, PSR1 recommends that a file should introduce either new symbols (like classes, functions, etc.) or have side-effects (like outputting something, or including other files), but not both at the same time. The first symbol is defined on line 20 and the first side effect is on line 2. The PSR-1: Basic Coding Standard recommends that a file should either introduce new symbols, that is classes, functions, constants or similar, or have side effects. Side effects are anything that executes logic, like for example printing output, changing ini settings or writing to a file. The idea behind this recommendation is that merely auto-loading a class should not change the state of an application. It also promotes a cleaner style of programming and makes your code less prone to errors, because the logic is not spread out all over the place. To learn more about the PSR-1, please see the PHP-FIG site on the PSR-1. Loading history...
2			namespace OpenOauth\Core\WechatCode;;
3
4			/**
5			* 对公众平台发送给公众账号的消息加解密示例代码.
6			*
7			* @copyright Copyright (c) 1998-2014 Tencent Inc.
8			*/
9
10			use OpenOauth\Core\WechatCode\Sha1;
11			use OpenOauth\Core\WechatCode\Xmlparse;
12			use OpenOauth\Core\WechatCode\Pkcs7Encoder;
13			use OpenOauth\Core\WechatCode\ErrorCode;
14			use OpenOauth\Core\WechatCode\Prpcrypt;
15
16			/**
17			* 1.第三方回复加密消息给公众平台；
18			* 2.第三方收到公众平台发送的消息，验证消息的安全性，并对消息进行解密。
19			*/
20			class WXBizMsgCrypt
21			{
22			private $token;
23			private $encodingAesKey;
24			private $appId;
25
26			/**
27			* 构造函数
28			*
29			* @param $token string 公众平台上，开发者设置的token
30			* @param $encodingAesKey string 公众平台上，开发者设置的EncodingAESKey
31			* @param $appId string 公众平台的appId
32			*/
33			public function __construct($token, $encodingAesKey, $appId)
34			{
35			$this->token = $token;
36			$this->encodingAesKey = $encodingAesKey;
37			$this->appId = $appId;
38			}
39
40			/**
41			* 将公众平台回复用户的消息加密打包.
42			* <ol>
43			* <li>对要发送的消息进行AES-CBC加密</li>
44			* <li>生成安全签名</li>
45			* <li>将消息密文和安全签名打包成xml格式</li>
46			* </ol>
47			*
48			* @param $replyMsg string 公众平台待回复用户的消息，xml格式的字符串
49			* @param $timeStamp string 时间戳，可以自己生成，也可以用URL参数的timestamp
50			* @param $nonce string 随机串，可以自己生成，也可以用URL参数的nonce
51			* @param &$encryptMsg string 加密后的可以直接回复用户的密文，包括msg_signature, timestamp, nonce, encrypt的xml格式的字符串,
52			* 当return返回0时有效
53			*
54			* @return int 成功0，失败返回对应的错误码
55			*/
56			public function encryptMsg($replyMsg, $timeStamp = null, $nonce, &$encryptMsg)
57			{
58			$pc = new Prpcrypt($this->encodingAesKey);
59			//加密
60			$array = $pc->encrypt($replyMsg, $this->appId);
61
62			$ret = $array[0];
63			if ($ret != 0) {
64			return $ret;
65			}
66
67			if ($timeStamp == null) {
68			$timeStamp = time();
69			}
70			$encrypt = $array[1];
71
72			//生成安全签名
73			$sha1 = new SHA1;
74			$array = $sha1->getSHA1($this->token, $timeStamp, $nonce, $encrypt);
75
76			$ret = $array[0];
77			if ($ret != 0) {
78			return $ret;
79			}
80			$signature = $array[1];
81
82			//生成发送的xml
83			$xmlparse = new XMLParse;
84			$encryptMsg = $xmlparse->generate($encrypt, $signature, $timeStamp, $nonce);
85
86			return ErrorCode::$OK;
87			}
88
89			/**
90			* 检验消息的真实性，并且获取解密后的明文.
91			* <ol>
92			* <li>利用收到的密文生成安全签名，进行签名验证</li>
93			* <li>若验证通过，则提取xml中的加密消息</li>
94			* <li>对消息进行解密</li>
95			* </ol>
96			*
97			* @param $msgSignature string 签名串，对应URL参数的msg_signature
98			* @param $timestamp string 时间戳对应URL参数的timestamp
99			* @param $nonce string 随机串，对应URL参数的nonce
100			* @param $postData string 密文，对应POST请求的数据
101			* @param &$msg string 解密后的原文，当return返回0时有效
102			*
103			* @return int 成功0，失败返回对应的错误码
104			*/
105			public function decryptMsg($msgSignature, $timestamp = null, $nonce, $postData, &$msg)
106			{
107			if (strlen($this->encodingAesKey) != 43) {
108			return ErrorCode::$IllegalAesKey;
109			}
110			$pc = new Prpcrypt($this->encodingAesKey);
111
112			//提取密文
113			$xmlparse = new XMLParse;
114			$array = $xmlparse->extract($postData);
115
116			$ret = $array[0];
117
118			if ($ret != 0) {
119			return $ret;
120			}
121
122			if ($timestamp == null) {
123			$timestamp = time();
124			}
125
126			$encrypt = $array[1];
127			$touser_name = $array[2];
			0 ignored issues – show Unused Code introduced 2016-08-06 08:39 UTC by Report Bug Copy Issue Report `$touser_name` is not used, you could remove the assignment. This check looks for variable assignements that are either overwritten by other assignments or where the variable is not used subsequently. $myVar = 'Value'; $higher = false; if (rand(1, 6) > 3) { $higher = true; } else { $higher = false; } Both the `$myVar` assignment in line 1 and the `$higher` assignment in line 2 are dead. The first because `$myVar` is never used and the second because `$higher` is always overwritten for every possible time line. Loading history...
128
129			//验证安全签名
130			$sha1 = new SHA1;
131			$array = $sha1->getSHA1($this->token, $timestamp, $nonce, $encrypt);
132			$ret = $array[0];
133
134			if ($ret != 0) {
135			return $ret;
136			}
137
138			$signature = $array[1];
139
140			if ($signature != $msgSignature) {
141			return ErrorCode::$ValidateSignatureError;
142			}
143
144			$result = $pc->decrypt($encrypt, $this->appId);
145			if ($result[0] != 0) {
146			return $result[0];
147			}
148			$msg = $result[1];
149
150			return ErrorCode::$OK;
151			}
152			}
153

tianye / WechatOpenPlatform

WXBizMsgCrypt::encryptMsg() B last analyzed 2017-08-29 08:44 UTC

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like

WXBizMsgCrypt::encryptMsg() B
last analyzed 2017-08-29 08:44 UTC