<?php require '../inc/odbc.php';?>
|
<?php
|
include_once "WXBizMsgCrypt.php";
|
// 假设企业号在公众平台上设置的参数如下
|
$encodingAesKey = "p53txECFAcKYMQ4vzBEvJffCbugNgzapBq7IatW2sV1";
|
$token = "QDG6eK";
|
$corpId = "wx248505bfbab6d0c1";
|
|
$sReqMsgSig=empty($_REQUEST['msg_signature'])!=false ? "" : $_REQUEST['msg_signature'];
|
$sReqTimeStamp=empty($_REQUEST['timestamp'])!=false ? "" : $_REQUEST['timestamp'];
|
$sReqNonce=empty($_REQUEST['nonce'])!=false ? "" : $_REQUEST['nonce'];
|
|
// post请求的密文数据
|
$sReqData = $GLOBALS['HTTP_RAW_POST_DATA'];
|
//$sReqData = json_decode(json_encode(simplexml_load_string($sReqData, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
|
|
|
$sMsg = ""; // 解析之后的明文
|
$wxcpt = new WXBizMsgCrypt($token, $encodingAesKey, $corpId);
|
$errCode = $wxcpt->DecryptMsg($sReqMsgSig, $sReqTimeStamp, $sReqNonce, $sReqData, $sMsg);
|
if ($errCode == 0) {
|
// 解密成功，sMsg即为xml格式的明文
|
//var_dump($sMsg);
|
// TODO: 对明文的处理
|
$sMsgData = json_decode(json_encode(simplexml_load_string($sMsg, 'SimpleXMLElement', LIBXML_NOCDATA)), true);
|
//$sql="insert into API_Json (method,Json) values ('contactsApi','".json_encode($sMsgData)."')";
|
//$UPsql = sqlsrv_query($conn,$sql);
|
$Event = $sMsgData['Event']; //事件的类型
|
if ($Event=='change_contact'){
|
$ChangeType = $sMsgData['ChangeType']; //create_user成员新建,update_user成员更新,delete_user成员删除,create_party新增部门,update_party更新部门,delete_party删除部门
|
|
//新增成员事件
|
if ($ChangeType=='create_user'){
|
$OA_User = $sMsgData['UserID'];
|
$OA_Name=empty($sMsgData['Name'])!=false ? "" : $sMsgData['Name'];
|
$OA_gender=empty($sMsgData['Gender'])!=false ? 1 : $sMsgData['Gender'];
|
$OA_mobile=empty($sMsgData['Mobile'])!=false ? "" : $sMsgData['Mobile'];
|
$OA_email=empty($sMsgData['Email'])!=false ? "" : $sMsgData['Email'];
|
$OA_Position=empty($sMsgData['Position'])!=false ? "" : $sMsgData['Position'];
|
$OA_weixinAvatar=empty($sMsgData['Avatar'])!=false ? "" : $sMsgData['Avatar'];
|
if (!empty($sMsgData['Department'])) {
|
$OA_Department = $sMsgData['Department'];
|
$DepartmentArray = explode(',',$OA_Department);
|
$OA_DepartmentID=$DepartmentArray[0];
|
}else{
|
$OA_DepartmentID=1;
|
}
|
$OA_CompetencyID=0;
|
//其它信息
|
$IdentityCard="";
|
if (!empty($sMsgData['ExtAttr'])) {
|
if (!empty($sMsgData['ExtAttr']['Item'])) {
|
$v=0;
|
foreach ($sMsgData['ExtAttr']['Item'] as $value) {
|
foreach ($value as $value1) {
|
//身份证
|
if ($IdentityCard=="1" and is_numeric($value1)) {$IdentityCard=$value1;}
|
if ($value1=="身份证" and $IdentityCard=="") {$IdentityCard="1";}
|
//身份证--end
|
}
|
$v=$v+1;
|
}
|
|
}
|
}
|
if ($IdentityCard=="1" or $IdentityCard=="0") {$IdentityCard="";}
|
|
//默认部门权限设定
|
$OA_Power="";
|
$OA_OrderClass="";
|
$sql="select OA_Power,OA_OrderClass,vtext from dictionary,OA_User where OA_User=vtext+'_部门' and vtitle='OA_Department' and vID=".$OA_DepartmentID;
|
$data = sqlsrv_query($conn,$sql);
|
if($data == true){
|
if (sqlsrv_rows_affected($data)!=0) {
|
while($rs = sqlsrv_fetch_array($data) ) {
|
$OA_Power = $rs['OA_Power'];
|
$OA_OrderClass = $rs['OA_OrderClass'];
|
$OA_DepartmentName = $rs['vtext'];
|
if (stripos($OA_DepartmentName,'客服')!=false){
|
$OA_CompetencyID=1;
|
}elseif (stripos($OA_DepartmentName,'车队')!=false or stripos($OA_DepartmentName,'司机')!=false or stripos($OA_DepartmentName,'车管')!=false){
|
$OA_CompetencyID=2;
|
}elseif (stripos($OA_DepartmentName,'医生')!=false or stripos($OA_DepartmentName,'医疗')!=false){
|
$OA_CompetencyID=3;
|
}elseif (stripos($OA_DepartmentName,'护士')!=false or stripos($OA_DepartmentName,'护理')!=false){
|
$OA_CompetencyID=4;
|
}
|
}
|
}
|
}
|
$sql="insert into OA_User (OA_User,OA_Pass,OA_Name,OA_weixinUserID,OA_gender,OA_mobile,OA_weixinID,OA_email,OA_IdentityCard,OA_Position,OA_province,OA_city,OA_execLevel,OA_Power,OA_DepartmentID,OA_OrderClass,Post_Name,Post_MoneyP,Post_MoneyP1) values ('".$OA_User."',pwdencrypt('000000'),'".$OA_Name."','".$OA_User."',".$OA_gender.",'".$OA_mobile."','','".$OA_email."','".$IdentityCard."','".$OA_Position."','','',1,'".$OA_Power."',".$OA_DepartmentID.",'".$OA_OrderClass."','',0,0.5)";
|
$UPsql = sqlsrv_query($conn,$sql);
|
if ($OA_CompetencyID!=0){
|
$sql="select OA_User_ID from OA_User where OA_User='".$OA_User."'";
|
$data = sqlsrv_query($conn,$sql);
|
if($data == true){
|
if (sqlsrv_rows_affected($data)!=0) {
|
while($rs = sqlsrv_fetch_array($data) ) {
|
$OA_UserID = $rs['OA_User_ID'];
|
$sql="insert into OA_Competency (OA_CompetencyID,OA_CompetencyUserID) values (".$OA_CompetencyID.",".$OA_UserID.")";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
}
|
}
|
}
|
//新增成员事件----end
|
|
//更新成员事件
|
if ($ChangeType=='update_user'){
|
$UserID = $sMsgData['UserID'];
|
$UPdate_Sql="OA_weixinUserID='".$UserID."'";
|
if (!empty($sMsgData['NewUserID'])) {$UPdate_Sql = "OA_weixinUserID='".$sMsgData['NewUserID']."'";} //成员名称，变更时推送
|
if (!empty($sMsgData['Name'])) {$UPdate_Sql = $UPdate_Sql.",OA_Name='".$sMsgData['Name']."'";} //成员名称，变更时推送
|
if (!empty($sMsgData['Mobile'])) {$UPdate_Sql = $UPdate_Sql.",OA_mobile='".$sMsgData['Mobile']."'";} //手机号码，变更时推送
|
if (!empty($sMsgData['Email'])) {$UPdate_Sql = $UPdate_Sql.",OA_email='".$sMsgData['Email']."'";} //邮箱，变更时推送
|
if (!empty($sMsgData['Avatar'])) {$UPdate_Sql = $UPdate_Sql.",OA_weixinAvatar='".$sMsgData['Avatar']."'";} //头像url。注：如果要获取小图将url最后的”/0”改成”/100”即可。变更时推送
|
if (!empty($sMsgData['Position'])) {$UPdate_Sql = $UPdate_Sql.",OA_Position='".$sMsgData['Position']."'";} //职位信息。长度为0~64个字节，变更时推送
|
//成员部门列表，变更时推送，仅返回该应用有查看权限的部门id
|
if (!empty($sMsgData['Department'])) {
|
$OA_Department = $sMsgData['Department'];
|
$DepartmentArray = explode(',',$OA_Department);
|
$OA_DepartmentID=$DepartmentArray[0];
|
$UPdate_Sql = $UPdate_Sql.",OA_DepartmentID=".$OA_DepartmentID;
|
}
|
|
//激活状态：1=激活或关注， 2=禁用， 4=未激活（重新启用未激活用户或者退出企业并且取消关注时触发）
|
if (!empty($sMsgData['Status'])) {
|
$Status = $sMsgData['Status'];
|
if ($Status==2){
|
$UPdate_Sql = $UPdate_Sql.",OA_execLevel=-1,OA_weixinStatus=".$Status;
|
}else {
|
$UPdate_Sql = $UPdate_Sql.",OA_weixinStatus=".$Status;
|
}
|
}
|
//其它信息
|
$IdentityCard="";
|
if (!empty($sMsgData['ExtAttr'])) {
|
if (!empty($sMsgData['ExtAttr']['Item'])) {
|
$v=0;
|
foreach ($sMsgData['ExtAttr']['Item'] as $value) {
|
foreach ($value as $value1) {
|
//身份证
|
if ($IdentityCard=="1" and is_numeric($value1)) {$IdentityCard=$value1;}
|
if ($value1=="身份证" and $IdentityCard=="") {$IdentityCard="1";}
|
//身份证--end
|
}
|
$v=$v+1;
|
}
|
|
}
|
}
|
if ($IdentityCard=="1" or $IdentityCard=="0") {$IdentityCard="";}
|
$UPdate_Sql = $UPdate_Sql.",OA_IdentityCard='".$IdentityCard."'";
|
|
//更新数据库
|
if (!empty($UPdate_Sql) and !empty($UserID)) {
|
$sql="update OA_User set ".$UPdate_Sql." where OA_weixinUserID='".$UserID."'";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
//更新成员事件----end
|
|
//delete_user成员删除
|
if ($ChangeType=='delete_user'){
|
$UserID = $sMsgData['UserID'];
|
//更新数据库
|
if (!empty($UserID)) {
|
$sql="delete from OA_User where OA_weixinUserID='".$UserID."'";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
//成员删除----end
|
|
//create_party新增部门
|
if ($ChangeType=='create_party'){
|
$department_id = $sMsgData['Id']; //部门id
|
$department_name = $sMsgData['Name']; //部门名称
|
$department_parentid = $sMsgData['ParentId']; //父亲部门id。根部门为1
|
$department_order = $sMsgData['Order']; //在父部门中的次序值。order值小的排序靠前。
|
|
If (!empty($department_id) and !empty($department_name)) {
|
$sql="select id,vtext from dictionary where vtitle='OA_Department' and vID=".$department_id;
|
$data = sqlsrv_query($conn,$sql);
|
if($data == true){
|
if (sqlsrv_rows_affected($data)!=0) {
|
while($rs = sqlsrv_fetch_array($data) ) {
|
$ID = $rs['id'];
|
$vtext = $rs['vtext'];
|
$sql="update dictionary set vID=".$department_id.",vtext='".$department_name."',vType=".$department_parentid.",vOrder=".$department_order." where id=".$ID;
|
$UPsql = sqlsrv_query($conn,$sql);
|
$sql="update OA_User set OA_User='".$department_name."_部门',OA_Name='".$department_name."_部门' where OA_execLevel=3 and OA_User='".$vtext."_部门'";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}else{
|
$sql="Insert into dictionary (vID,vtext,vType,vOrder,vtitle) values (".$department_id.",'".$department_name."',".$department_parentid.",".$department_order.",'OA_Department')";
|
$UPsql = sqlsrv_query($conn,$sql);
|
$sql="Insert into OA_User (OA_User,OA_Pass,OA_Name,OA_execLevel,OA_Power) values ('".$department_name."_部门',pwdencrypt('000000'),'".$department_name."_部门',3,'')";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
}
|
}
|
//新增部门事件----end
|
|
//change_contact更新部门
|
if ($ChangeType=='update_party'){
|
$department_id = $sMsgData['Id']; //部门id
|
$department_name=empty($sMsgData['Name'])!=false ? "" : $sMsgData['Name']; //部门名称
|
$department_parentid=empty($sMsgData['ParentId'])!=false ? "" : $sMsgData['ParentId']; //父亲部门id。根部门为1
|
$department_order=empty($sMsgData['Order'])!=false ? "" : $sMsgData['Order']; //在父部门中的次序值。order值小的排序靠前。
|
If (!empty($department_id) and !empty($department_name)) {
|
$sql="select id,vtext from dictionary where vtitle='OA_Department' and vID=".$department_id;
|
$data = sqlsrv_query($conn,$sql);
|
if($data == true){
|
if (sqlsrv_rows_affected($data)!=0) {
|
while($rs = sqlsrv_fetch_array($data) ) {
|
$ID = $rs['id'];
|
$vtext = $rs['vtext'];
|
$UPdate_Sql="vID=".$department_id;
|
if (!empty($department_name)) {$UPdate_Sql = $UPdate_Sql.",vtext='".$department_name."'";}
|
if (!empty($department_parentid)) {$UPdate_Sql = $UPdate_Sql.",vType=".$department_parentid;}
|
if (!empty($department_order)) {$UPdate_Sql = $UPdate_Sql.",vOrder=".$department_order;}
|
$sql="update dictionary set ".$UPdate_Sql." where id=".$ID;
|
$UPsql = sqlsrv_query($conn,$sql);
|
if (!empty($department_name)) {
|
$sql="update OA_User set OA_User='".$department_name."_部门',OA_Name='".$department_name."_部门' where OA_execLevel=3 and OA_User='".$vtext."_部门'";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
}
|
}
|
}
|
}
|
//更新部门事件----end
|
|
//delete_party删除部门
|
if ($ChangeType=='delete_party'){
|
$department_id = $sMsgData['Id']; //部门id
|
If (!empty($department_id)) {
|
$sql="select id,vtext from dictionary where vtitle='OA_Department' and vID=".$department_id;
|
$data = sqlsrv_query($conn,$sql);
|
if($data == true){
|
if (sqlsrv_rows_affected($data)!=0) {
|
while($rs = sqlsrv_fetch_array($data) ) {
|
$ID = $rs['id'];
|
$vtext = $rs['vtext'];
|
$sql="delete from dictionary where id=".$ID;
|
$UPsql = sqlsrv_query($conn,$sql);
|
$sql="delete from OA_User where OA_execLevel=3 and OA_User='".$vtext."_部门'";
|
$UPsql = sqlsrv_query($conn,$sql);
|
}
|
}
|
}
|
|
}
|
}
|
//删除部门----end
|
}
|
|
|
|
} else {
|
//print("ERR: " . $errCode . "\n\n");
|
$sql="insert into API_Json (method,Json) values ('contactsApiErr','".$errCode."')";
|
$UPsql = sqlsrv_query($conn,$sql);
|
//exit(-1);
|
}
|
|
exit();
|
?>
|
