支付宝账单中心

使用管理员或核账员账号登录

$max)throw new RuntimeException('证书上传失败或超过 1MB');$v=file_get_contents($_FILES[$field]['tmp_name']);if(!str_contains($v,'BEGIN CERTIFICATE'))throw new RuntimeException('上传内容不是 PEM 证书');return $v;} if($_SERVER['REQUEST_METHOD']==='POST'){ require_csrf();$action=$_POST['action']??''; try{ if($action==='bill_mark'){ $id=(int)$_POST['id'];$w=['id=?'];$a=[$id];accountScope($w,$a,'b');$s=db()->prepare('UPDATE bills b SET is_checked=?,checked_by=?,checked_at=IF(?=1,NOW(),NULL),check_note=?,is_abnormal=?,abnormal_note=?,updated_at=NOW() WHERE '.implode(' AND ',$w));$checked=isset($_POST['is_checked'])?1:0;$s->execute([$checked,$user['id'],$checked,trim($_POST['check_note']??''),isset($_POST['is_abnormal'])?1:0,trim($_POST['abnormal_note']??''),...$a]);flash('ok','核对状态已保存');redirect('?page=bill&id='.$id); } if(in_array($action,['account_save','account_test','account_sync','user_save','settings_save'],true)&&!$admin)throw new RuntimeException('无权执行此操作'); if($action==='account_save'){ $id=(int)($_POST['id']??0);$private=trim($_POST['private_key']??'');$old=null;if($id){$s=db()->prepare('SELECT * FROM alipay_accounts WHERE id=?');$s->execute([$id]);$old=$s->fetch();if(!$old)throw new RuntimeException('账号不存在');} if(!$private&&!$old)throw new RuntimeException('首次添加必须填写应用私钥'); $appCert=uploadText('app_cert')??($old['app_cert']??null);$aliCert=uploadText('alipay_cert')??($old['alipay_cert']??null);$rootCert=uploadText('root_cert')??($old['root_cert']??null);$mode=$_POST['auth_mode']==='certificate'?'certificate':'public_key'; if($mode==='certificate'&&(!$appCert||!$aliCert||!$rootCert))throw new RuntimeException('证书模式需要上传三份证书'); $vals=[trim($_POST['name']),trim($_POST['app_id']),$mode,$private?Crypto::encrypt($private):$old['private_key_enc'],trim($_POST['alipay_public_key']??'')?:($old['alipay_public_key']??null),$appCert,$aliCert,$rootCert,isset($_POST['is_active'])?1:0]; if($id){$q=db()->prepare('UPDATE alipay_accounts SET name=?,app_id=?,auth_mode=?,private_key_enc=?,alipay_public_key=?,app_cert=?,alipay_cert=?,root_cert=?,is_active=?,updated_at=NOW() WHERE id=?');$q->execute([...$vals,$id]);}else{$q=db()->prepare('INSERT INTO alipay_accounts(name,app_id,auth_mode,private_key_enc,alipay_public_key,app_cert,alipay_cert,root_cert,is_active,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,NOW(),NOW())');$q->execute($vals);$id=(int)db()->lastInsertId();} flash('ok','支付宝账号已保存；私钥不会在页面回显');redirect('?page=account&id='.$id); } if($action==='account_test'){$s=db()->prepare('SELECT * FROM alipay_accounts WHERE id=?');$s->execute([(int)$_POST['id']]);$a=$s->fetch();if(!$a)throw new RuntimeException('账号不存在');$r=(new AlipayClient($a))->test();flash('ok','连接成功，已取得 '.$r['date'].' 的账单下载地址');redirect('?page=accounts');} if($action==='account_sync'){$r=SyncService::account((int)$_POST['id'],$_POST['bill_date'],'manual');flash('ok',"同步完成：{$r['date']}，处理 {$r['rows']} 条");redirect('?page=logs');} if($action==='user_save'){ $id=(int)($_POST['id']??0);$pass=$_POST['password']??'';$role=$_POST['role']==='admin'?'admin':'auditor';if(!$id&&strlen($pass)<10)throw new RuntimeException('新用户密码至少 10 位'); if($id){$sql='UPDATE users SET username=?,display_name=?,role=?,is_active=?,updated_at=NOW()'.($pass?',password_hash=?':'').' WHERE id=?';$v=[trim($_POST['username']),trim($_POST['display_name']),$role,isset($_POST['is_active'])?1:0];if($pass)$v[]=password_hash($pass,PASSWORD_DEFAULT);$v[]=$id;db()->prepare($sql)->execute($v);}else{db()->prepare('INSERT INTO users(username,password_hash,display_name,role,is_active,created_at,updated_at) VALUES(?,?,?,?,1,NOW(),NOW())')->execute([trim($_POST['username']),password_hash($pass,PASSWORD_DEFAULT),trim($_POST['display_name']),$role]);$id=(int)db()->lastInsertId();} db()->prepare('DELETE FROM user_account_access WHERE user_id=?')->execute([$id]);if($role==='auditor')foreach($_POST['accounts']??[] as $aid)db()->prepare('INSERT IGNORE INTO user_account_access(user_id,account_id) VALUES(?,?)')->execute([$id,(int)$aid]);flash('ok','用户权限已保存');redirect('?page=users'); } if($action==='settings_save'){if(!preg_match('/^\d{2}:\d{2}$/',$_POST['sync_time']))throw new RuntimeException('同步时间格式错误');save_setting('sync_time',$_POST['sync_time']);save_setting('sync_days_back',(string)max(1,min(7,(int)$_POST['sync_days_back'])));if(isset($_POST['rotate_token']))save_setting('cron_token',bin2hex(random_bytes(24)));flash('ok','系统设置已保存');redirect('?page=settings');} }catch(Throwable $e){flash('bad',$e->getMessage());redirect($_SERVER['HTTP_REFERER']??'index.php');} } $titles=['dashboard'=>'总览','bills'=>'账单查询','bill'=>'账单详情','accounts'=>'支付宝账号','account'=>'账号设置','logs'=>'同步日志','users'=>'用户与权限','user'=>'用户设置','settings'=>'系统设置'];$title=$titles[$page]??'账单中心'; ?><?=e($title)?> · 支付宝账单中心

·
prepare($sql);$s->execute($args);$sum=$s->fetch(); $w2=['b.bill_date BETWEEN ? AND ?'];$a2=[$start,$end];accountScope($w2,$a2);$s=db()->prepare('SELECT a.id,a.name,SUM(IF(b.type="income",b.amount,0)) income,SUM(IF(b.type="refund",-b.amount,0)) refund,COUNT(b.id) cnt,SUM(b.is_abnormal=1) abnormal FROM alipay_accounts a LEFT JOIN bills b ON b.account_id=a.id AND '.implode(' AND ',$w2).' GROUP BY a.id,a.name ORDER BY a.name');$s->execute($a2);$by=$s->fetchAll();?>
收入¥
退款¥
净额¥
待核对 / 异常 /

账号汇总

支付宝账号收入退款笔数异常
¥¥
'b.account_id','type'=>'b.type','checked'=>'b.is_checked','abnormal'=>'b.is_abnormal'] as $k=>$col)if(isset($_GET[$k])&&$_GET[$k]!==''){$w[]="$col=?";$args[]=$_GET[$k];}if(!empty($_GET['start'])){$w[]='b.bill_date>=?';$args[]=$_GET['start'];}if(!empty($_GET['end'])){$w[]='b.bill_date<=?';$args[]=$_GET['end'];}if(isset($_GET['amount'])&&$_GET['amount']!==''){$w[]='ABS(b.amount)=?';$args[]=(float)$_GET['amount'];}if(!empty($_GET['q'])){$w[]='(b.alipay_trade_no LIKE ? OR b.merchant_order_no LIKE ?)';$args[]='%'.$_GET['q'].'%';$args[]='%'.$_GET['q'].'%';}$p=max(1,(int)($_GET['p']??1));$count=db()->prepare('SELECT COUNT(*) FROM bills b WHERE '.implode(' AND ',$w));$count->execute($args);$total=(int)$count->fetchColumn();$s=db()->prepare('SELECT b.*,a.name account_name FROM bills b JOIN alipay_accounts a ON a.id=b.account_id WHERE '.implode(' AND ',$w).' ORDER BY b.occurred_at DESC,b.id DESC LIMIT '.(($p-1)*50).',50');$s->execute($args);$rows=$s->fetchAll();$aw=['is_active=1'];$aa=[];if(!$admin){$aw[]=$allowed?'id IN ('.implode(',',array_fill(0,count($allowed),'?')).')':'1=0';$aa=$allowed;}$as=db()->prepare('SELECT id,name FROM alipay_accounts WHERE '.implode(' AND ',$aw));$as->execute($aa);$accounts=$as->fetchAll();?>
共 条，每页 50 条
时间账号类型金额支付宝交易号 / 商户订单号状态
'收入','expense'=>'支出','refund'=>'退款','other'=>'其他'][$r['type']]?>
已核对':'待核对'?> 异常':''?>
1):?>上一页下一页
prepare('SELECT b.*,a.name account_name,u.display_name checked_name FROM bills b JOIN alipay_accounts a ON a.id=b.account_id LEFT JOIN users u ON u.id=b.checked_by WHERE '.implode(' AND ',$w));$s->execute($args);$r=$s->fetch();if(!$r):http_response_code(404);echo '账单不存在';else:?>
账号

金额

¥

支付宝交易号

商户订单号

发生时间

对方 / 摘要

·

query('SELECT * FROM alipay_accounts ORDER BY id')->fetchAll();?>
新增支付宝账号
名称 / APPID模式最近同步状态操作


编辑
0,'name'=>'','app_id'=>'','auth_mode'=>'public_key','alipay_public_key'=>'','is_active'=>1];if(!empty($_GET['id'])){$s=db()->prepare('SELECT * FROM alipay_accounts WHERE id=?');$s->execute([(int)$_GET['id']]);$r=$s->fetch()?:$r;}?>

已保存证书：应用 　支付宝 　根证书

query('SELECT l.*,a.name FROM sync_logs l JOIN alipay_accounts a ON a.id=l.account_id ORDER BY l.id DESC LIMIT 200')->fetchAll();?>
开始时间账号 / 日期触发结果消息

 条
query('SELECT * FROM users ORDER BY id')->fetchAll();?>新增用户
用户名显示名称角色状态
编辑
0,'username'=>'','display_name'=>'','role'=>'auditor','is_active'=>1];$selected=[];if(!empty($_GET['id'])){$s=db()->prepare('SELECT * FROM users WHERE id=?');$s->execute([(int)$_GET['id']]);$r=$s->fetch()?:$r;$s=db()->prepare('SELECT account_id FROM user_account_access WHERE user_id=?');$s->execute([$r['id']]);$selected=$s->fetchAll(PDO::FETCH_COLUMN);}$accounts=db()->query('SELECT id,name FROM alipay_accounts ORDER BY name')->fetchAll();?>

核账员可查看的支付宝账号

宝塔计划任务（只配置一次）

类型选择“访问 URL”，执行周期设为每 5 分钟：

系统仅在设定时间前后 10 分钟执行，并使用文件锁防止重复任务。请妥善保管此地址。

页面不存在或无权访问。