## 一、支付:改由已安装的 epay 插件承载(不再自研签名)
- 下单:\addons\epay\library\Service::submitOrder($amount 元, $orderNo, 'wechat', $body, $notifyUrl, null, 'miniapp', $openid)
- 验签:Service::checkNotify('wechat')(内部 $pay->verify());应答:$pay->success()(v2 = XML)
- 业务编排仍在 application/api/controller/Pay.php,不改插件源码:
POST /pay/prepay(取调起参数,下发前剔除 appId);POST /pay/notify(公开路由:插件验签 → 金额核对 → 幂等分派)
- 配置真源 = addons/epay/config.php(后台「插件管理 → 微信支付宝整合插件 → 配置」);
fc_config 的 wx.mchId / wx.apiKey / wx.payNotifyUrl 废弃;后台「系统设置」支付表单改只读并跳插件配置页
- 插件 API 保持 version=v2(PHP 7.4 可跑);certs/* 为 0 字节占位,不含任何真实密钥
- 修复 BUG-015:Pay::notify() 与基类站内信同名且签名不兼容导致 /pay/* 全 500,动作改名 notifyCallback()
## 二、插件纳入 Git 版本管理
- .gitignore 移除 /addons/* 与 /public/assets/addons/*(保留 .gitkeep 占位)
- 入库 addons/epay、addons/wechat、public/assets/addons/*、addons/.htaccess(deny from all)
- config.php 入库为空白模板;服务器请在填好密钥后执行
git update-index --skip-worktree addons/epay/config.php,避免真实密钥回传仓库
## 三、安全修复:余额充值资损(高危,已实测复现)
- 现象:POST /order/recharge {payType:'balance'} 只加余额不扣款(余额 134.50 → 1022.50),等于凭空增发余额,
可再去买会员 / 付费发布 / 解锁联系方式
- 修复:/order/recharge 仅接受 payType=wxpay,balance → 「余额充值仅支持微信支付」,其它 → 「支付方式不支持」;
订单恒为 status=pending、pay_type=wxpay、paytime=null;入账只发生在 /pay/notify 回调(Order::creditRecharge)
或后台「会员管理 → 余额充值」(fc/userext/recharge)
- 小程序充值页同步为「仅微信支付」+ 防重复提交 + onShow 刷新资产;mock / 用例 / 文档同步
## 四、其他 v1.1.0 能力
- 媒体上传:POST /post/upload(图片 ≤10MB / 视频 ≤50MB,真落盘),发布页 uni.uploadFile 真上传
- LBS:fc_post.lat/lng、首页 sort=nearby(距离升序、无坐标排最后)、卡片 distance、详情页地图
- 互动:举报 POST /report(原因字典)、收藏 / 关注(fc_favorite / fc_follow、/favorite/*、/follow/toggle)
- 交易:余额充值 POST /order/recharge、优惠券 /coupon/list|receive(fc_coupon / fc_user_coupon、我的资产券)
- 发布计费:会员发布折扣(discountRate/discountText)+ 免费发布条数(freeQuota*)
- 后台新增:数据总览 fc/dashboard、系统设置 fc/setting、优惠券管理 fc/coupon(含菜单与权限节点)
## 五、本批审核修复
- 详情页:游客不再请求登录态接口(避免 401 被清 token 踢去登录);微信付费查看改为支付后轮询解锁,
不再读取 wxpay 分支未返回的 contact;加防重复提交
- 发布页:freeLeftToday → freeQuotaLeft / freeQuotaCycle / freeUnlimited(对齐后端出参);
上传图预览拼后端域名(新增 format.js#assetUrl,后端返回相对路径)
- 收藏空态「去首页」:switchTab → reLaunch(项目用自绘 fc-tabbar,无 tabBar,switchTab 必然失败)
- 会员券 days=0 显示「永久有效」;manifest.json 补 requiredPrivateInfos(getLocation / chooseLocation)
- 后端:publishConfig 补 discountRate/discountText 与 memberPostDiscountText();优惠券总开关 coupon.enabled
真生效(关闭后 list/receive 拒绝);后台 fc/Coupon 的 add/edit 补 strip_tags 过滤(防存储型 XSS)、
补 searchFields='name',列表 name 列再做一次 HTML 转义
- FcInstall:补清理后台菜单缓存 __menu__(否则新菜单要等缓存过期才显示),并同步 README 说明
- 后台语言包 fc/setting.php 按「支付只读 + 跳插件配置」的新页面重写
- 文档同步:uniapp/docs/{01,03,04}、uniapp/README.md、docs/05-后端实现规范.md、后台 README 上线步骤
## 六、校验结果(全部通过)
- 后端端到端:tools/verify-api.mjs 226/226(含新增「拒绝余额充值(资损防护)」用例)
- 小程序:uniapp/tests/run.mjs 167/167;validate.mjs 0 错 0 警;check-scss 19/19
- 后台:check-admin-i18n 0 错 0 警;check-theme 0 错 0 警;9 个页面 HTTP 200 全中文
- php -l 改动/新增 PHP 文件 0 语法错误;探针复测:余额不再增长、epay 插件下单/验签链路通
351 行
8.5 KiB
Vue
351 行
8.5 KiB
Vue
<template>
|
||
<view class="mine fc-page">
|
||
<!-- 用户信息头 -->
|
||
<view class="mine__header">
|
||
<view class="mine__status" :style="{ height: statusBarHeight + 'px' }"></view>
|
||
<view class="mine__user" @click="goLogin">
|
||
<view class="mine__avatar">
|
||
<text>{{ nick.slice(0, 1) }}</text>
|
||
</view>
|
||
<view class="mine__user-info">
|
||
<view class="mine__user-name-row">
|
||
<text class="mine__user-name">{{ nick }}</text>
|
||
<text v-if="isBusiness" class="mine__badge">商家</text>
|
||
<text v-else class="mine__badge mine__badge--person">个人</text>
|
||
</view>
|
||
<text class="mine__user-sub">{{ userInfo.phone || '点击登录 / 绑定手机号' }}</text>
|
||
</view>
|
||
<text class="mine__arrow">›</text>
|
||
</view>
|
||
|
||
<!-- 资产 -->
|
||
<view class="mine__assets">
|
||
<view class="mine__asset" @click="go('/pages/member/index')">
|
||
<text class="mine__asset-num">{{ assets.balance != null ? assets.balance : '0.00' }}</text>
|
||
<text class="mine__asset-label">余额(元)</text>
|
||
</view>
|
||
<view class="mine__asset" @click="go('/pages/member/index')">
|
||
<text class="mine__asset-num">{{ assets.points || 0 }}</text>
|
||
<text class="mine__asset-label">积分</text>
|
||
</view>
|
||
<view class="mine__asset" @click="go('/pages/member/index')">
|
||
<text class="mine__asset-num">{{ couponCount }}</text>
|
||
<text class="mine__asset-label">优惠券</text>
|
||
</view>
|
||
</view>
|
||
</view>
|
||
|
||
<!-- 会员卡 -->
|
||
<view class="mine__vip" @click="go('/pages/member/index')">
|
||
<view class="mine__vip-left">
|
||
<image class="fc-icon fc-icon--md" :src="iconUrl('crown')" mode="aspectFit" />
|
||
<view class="mine__vip-texts">
|
||
<text class="mine__vip-title">{{ isMember ? (userInfo.memberLevel || '会员') : '开通会员' }}</text>
|
||
<text class="mine__vip-sub">{{ isMember ? '有效期至 ' + expireText : '免费查看 / 发布折扣 / 专属标识' }}</text>
|
||
</view>
|
||
</view>
|
||
<view class="mine__vip-btn">{{ isMember ? '会员中心' : '去开通' }}</view>
|
||
</view>
|
||
|
||
<!-- 功能入口 -->
|
||
<view class="fc-card mine__grid">
|
||
<view v-for="e in entries" :key="e.text" class="mine__entry" @click="go(e.url)">
|
||
<view class="mine__entry-icon">
|
||
<image class="fc-icon--badge" :src="iconUrl(e.iconKey)" mode="aspectFit" />
|
||
</view>
|
||
<text class="mine__entry-text">{{ e.text }}</text>
|
||
</view>
|
||
</view>
|
||
|
||
<!-- 列表菜单 -->
|
||
<view class="fc-card mine__menu">
|
||
<view v-for="m in menus" :key="m.text" class="mine__menu-item" @click="go(m.url)">
|
||
<image class="fc-icon--badge-sm mine__menu-icon" :src="iconUrl(m.iconKey)" mode="aspectFit" />
|
||
<text class="mine__menu-text">{{ m.text }}</text>
|
||
<text class="mine__menu-arrow">›</text>
|
||
</view>
|
||
</view>
|
||
|
||
<view class="mine__version">同城分类信息 v1.1.0</view>
|
||
|
||
<view class="mine__tabbar-space"></view>
|
||
<fc-tabbar :current="3" />
|
||
</view>
|
||
</template>
|
||
|
||
<script>
|
||
import FcTabbar from '@/components/fc-tabbar/fc-tabbar.vue'
|
||
import memberApi from '@/common/api/member.js'
|
||
import { useUserStore } from '@/common/store/index.js'
|
||
import { iconUrl, loadUiConfig } from '@/common/store/ui.js'
|
||
import { formatTime } from '@/common/utils/format.js'
|
||
|
||
export default {
|
||
components: { FcTabbar },
|
||
data() {
|
||
return {
|
||
statusBarHeight: 20,
|
||
assets: {},
|
||
entries: [
|
||
{ iconKey: 'mine-post', text: '我的发布', url: '/pages/post/mine' },
|
||
{ iconKey: 'mine-order', text: '我的订单', url: '/pages/member/orders' },
|
||
{ iconKey: 'bar-fav-on', text: '我的收藏', url: '/pages/favorite/index' },
|
||
{ iconKey: 'link-recharge', text: '余额充值', url: '/pages/member/recharge' },
|
||
{ iconKey: 'mine-dist', text: '分销中心', url: '/pages/distribution/index' },
|
||
{ iconKey: 'mine-vip', text: '会员中心', url: '/pages/member/index' },
|
||
],
|
||
menus: [
|
||
{ iconKey: 'mine-draft', text: '草稿箱', url: '/pages/post/create' },
|
||
{ iconKey: 'mine-history', text: '搜索记录', url: '/pages/search/index' },
|
||
{ iconKey: 'mine-setting', text: 'LOGO 与图标设置', url: '/pages/admin/setting' },
|
||
{ iconKey: 'mine-about', text: '关于我们', url: '' },
|
||
],
|
||
}
|
||
},
|
||
computed: {
|
||
userInfo() {
|
||
try {
|
||
return useUserStore().state.userInfo || {}
|
||
} catch (e) {
|
||
return {}
|
||
}
|
||
},
|
||
nick() {
|
||
return this.userInfo.nickname || '未登录'
|
||
},
|
||
isMember() {
|
||
try {
|
||
return useUserStore().isMember.value
|
||
} catch (e) {
|
||
return false
|
||
}
|
||
},
|
||
isBusiness() {
|
||
try {
|
||
return useUserStore().isBusiness.value
|
||
} catch (e) {
|
||
return false
|
||
}
|
||
},
|
||
expireText() {
|
||
return this.userInfo.memberExpireAt ? formatTime(this.userInfo.memberExpireAt).slice(0, 10) : '--'
|
||
},
|
||
/** 我的资产优惠券数量(契约:/member/assets 的 couponCount,兼容旧字段 coupons) */
|
||
couponCount() {
|
||
if (this.assets.couponCount != null) return this.assets.couponCount
|
||
return (this.assets.coupons || []).length
|
||
},
|
||
},
|
||
onLoad() {
|
||
try {
|
||
this.statusBarHeight = uni.getSystemInfoSync().statusBarHeight || 20
|
||
} catch (e) {}
|
||
loadUiConfig()
|
||
this.fetchAssets()
|
||
this.fetchProfile()
|
||
},
|
||
methods: {
|
||
iconUrl,
|
||
async fetchAssets() {
|
||
try {
|
||
this.assets = await memberApi.assets()
|
||
} catch (e) {
|
||
this.assets = { balance: 0, points: 0, coupons: [] }
|
||
}
|
||
},
|
||
async fetchProfile() {
|
||
try {
|
||
await useUserStore().fetchProfile()
|
||
} catch (e) {}
|
||
},
|
||
go(url) {
|
||
if (!url) return uni.showToast({ title: '功能建设中', icon: 'none' })
|
||
uni.navigateTo({ url })
|
||
},
|
||
goLogin() {
|
||
const store = useUserStore()
|
||
if (!store.isLogin.value) uni.navigateTo({ url: '/pages/auth/login' })
|
||
},
|
||
},
|
||
}
|
||
</script>
|
||
|
||
<style lang="scss" scoped>
|
||
.mine__header {
|
||
background: $fc-gradient-hero;
|
||
padding-bottom: 120rpx;
|
||
border-radius: 0 0 40rpx 40rpx;
|
||
}
|
||
.mine__user {
|
||
display: flex;
|
||
align-items: center;
|
||
padding: 20rpx 32rpx 0;
|
||
}
|
||
.mine__avatar {
|
||
width: 120rpx;
|
||
height: 120rpx;
|
||
border-radius: 50%;
|
||
background: rgba(255, 255, 255, 0.25);
|
||
color: #ffffff;
|
||
font-size: 52rpx;
|
||
font-weight: 700;
|
||
display: flex;
|
||
align-items: center;
|
||
justify-content: center;
|
||
}
|
||
.mine__user-info {
|
||
flex: 1;
|
||
margin-left: 24rpx;
|
||
}
|
||
.mine__user-name-row {
|
||
display: flex;
|
||
align-items: center;
|
||
}
|
||
.mine__user-name {
|
||
color: #ffffff;
|
||
font-size: 40rpx;
|
||
font-weight: 700;
|
||
}
|
||
.mine__badge {
|
||
margin-left: 14rpx;
|
||
padding: 2rpx 14rpx;
|
||
border-radius: $fc-radius-pill;
|
||
background: #ffffff;
|
||
color: $fc-primary-text;
|
||
font-size: 20rpx;
|
||
font-weight: 600;
|
||
&--person {
|
||
background: rgba(255, 255, 255, 0.3);
|
||
color: #ffffff;
|
||
}
|
||
}
|
||
.mine__user-sub {
|
||
display: block;
|
||
margin-top: 10rpx;
|
||
color: rgba(255, 255, 255, 0.9);
|
||
font-size: $fc-font-sm;
|
||
}
|
||
.mine__arrow {
|
||
color: #ffffff;
|
||
font-size: 44rpx;
|
||
}
|
||
.mine__assets {
|
||
display: flex;
|
||
margin: 36rpx 32rpx 0;
|
||
}
|
||
.mine__asset {
|
||
flex: 1;
|
||
display: flex;
|
||
flex-direction: column;
|
||
align-items: center;
|
||
}
|
||
.mine__asset-num {
|
||
color: #ffffff;
|
||
font-size: 40rpx;
|
||
font-weight: 700;
|
||
}
|
||
.mine__asset-label {
|
||
margin-top: 6rpx;
|
||
color: rgba(255, 255, 255, 0.85);
|
||
font-size: $fc-font-xs;
|
||
}
|
||
.mine__vip {
|
||
margin: -80rpx 24rpx 0;
|
||
padding: 26rpx 28rpx;
|
||
border-radius: $fc-radius-lg;
|
||
background: $fc-gradient-warm;
|
||
display: flex;
|
||
align-items: center;
|
||
justify-content: space-between;
|
||
box-shadow: $fc-shadow-lg;
|
||
}
|
||
.mine__vip-left {
|
||
display: flex;
|
||
align-items: center;
|
||
}
|
||
.mine__vip-texts {
|
||
display: flex;
|
||
flex-direction: column;
|
||
margin-left: 18rpx;
|
||
}
|
||
.mine__vip-title {
|
||
display: block;
|
||
color: #ffffff;
|
||
font-size: $fc-font-lg;
|
||
font-weight: 700;
|
||
}
|
||
.mine__vip-sub {
|
||
display: block;
|
||
margin-top: 6rpx;
|
||
color: rgba(255, 255, 255, 0.9);
|
||
font-size: $fc-font-xs;
|
||
}
|
||
.mine__vip-btn {
|
||
padding: 12rpx 28rpx;
|
||
border-radius: $fc-radius-pill;
|
||
background: #ffffff;
|
||
color: $fc-primary-text;
|
||
font-size: $fc-font-sm;
|
||
font-weight: 700;
|
||
}
|
||
.mine__grid {
|
||
display: flex;
|
||
flex-wrap: wrap;
|
||
}
|
||
.mine__entry {
|
||
width: 33.33%;
|
||
display: flex;
|
||
flex-direction: column;
|
||
align-items: center;
|
||
margin-bottom: 8rpx;
|
||
}
|
||
.mine__entry-icon {
|
||
width: 96rpx;
|
||
height: 96rpx;
|
||
display: flex;
|
||
align-items: center;
|
||
justify-content: center;
|
||
}
|
||
.mine__entry-text {
|
||
margin-top: 12rpx;
|
||
font-size: $fc-font-sm;
|
||
color: $fc-text-regular;
|
||
}
|
||
.mine__menu {
|
||
padding: 8rpx 28rpx;
|
||
}
|
||
.mine__menu-item {
|
||
display: flex;
|
||
align-items: center;
|
||
height: 96rpx;
|
||
border-bottom: 2rpx solid $fc-border;
|
||
&:last-child {
|
||
border-bottom: none;
|
||
}
|
||
}
|
||
.mine__menu-icon {
|
||
width: 76rpx;
|
||
height: 76rpx;
|
||
margin-right: 20rpx;
|
||
}
|
||
.mine__menu-text {
|
||
flex: 1;
|
||
font-size: $fc-font;
|
||
color: $fc-text;
|
||
}
|
||
.mine__menu-arrow {
|
||
color: $fc-text-placeholder;
|
||
font-size: 34rpx;
|
||
}
|
||
.mine__version {
|
||
text-align: center;
|
||
padding: 40rpx 0;
|
||
font-size: $fc-font-xs;
|
||
color: $fc-text-placeholder;
|
||
}
|
||
.mine__tabbar-space {
|
||
height: 130rpx;
|
||
}
|
||
</style>
|
||
|