添加支付通知签名验证

Author: zoujingli

Wechat/WechatPay.php

@@ -128,15 +128,15 @@ public function getNotify() {
             $this->errMsg = 'Payment notification forbidden access.';
             return false;
         }
-        if (empty($notifyInfo['sign']) || !($sign = $notifyInfo['sign'])) {
+        if (empty($notifyInfo['sign'])) {
             Tools::log('Payment notification signature is missing.' . var_export($notifyInfo, true), 'ERR');
             $this->errCode = '403';
             $this->errMsg = 'Payment notification signature is missing.';
             return false;
         }
         $data = $notifyInfo;
         unset($data['sign']);
-        if ($sign !== Tools::getPaySign($data, $this->partnerKey)) {
+        if ($notifyInfo['sgin'] !== Tools::getPaySign($data, $this->partnerKey)) {
             Tools::log('Payment notification signature verification failed.' . var_export($notifyInfo, true), 'ERR');
             $this->errCode = '403';
             $this->errMsg = 'Payment signature verification failed.';