1142 lines
43 KiB
PHP
1142 lines
43 KiB
PHP
<?php
|
||
/**
|
||
* @package AKSRT
|
||
*/
|
||
|
||
namespace AKSRT\Payment;
|
||
|
||
defined('ABSPATH') || exit;
|
||
|
||
trait OrderRepositoryCore {
|
||
|
||
/**
|
||
* 建单时对「订单号唯一键冲突」的重试次数。
|
||
*
|
||
* 统一流水号规则为 {YmdHis}{8 位随机数}，同一秒内的取值空间为 10^8，
|
||
* 高并发下单仍可能因随机后缀碰撞触发 uniq_order_number 冲突。资金流水侧
|
||
* （FinancialFlowService::record）已有等价的 5 次重试，订单侧此前缺失，
|
||
* 碰撞时会直接把错误抛给用户，故在此对齐。
|
||
*/
|
||
private const ORDER_NUMBER_MAX_ATTEMPTS = 5;
|
||
|
||
/**
|
||
* 调用方自带订单号的合法形态：全数字，14 位时间前缀 + 定长数字后缀。
|
||
*
|
||
* 号码只有一种来源（本类的 allocate_order_number()），所以自带号必须落在
|
||
* 分配器能产出的范围内：22 位是当前规则（见 BusinessNumber），20 位是扩位
|
||
* 之前的历史规则——导入旧数据、旧单重放仍可能带它进来，故一并放行。
|
||
* 带前缀、UUID、非数字、超长等一律视为不受控输入：弃用并回落到分配器，
|
||
* 避免把异常长度写进 VARCHAR(32) 列后再去污染检索与对账。
|
||
*/
|
||
private const ORDER_NUMBER_PATTERN = '/^\d{20}$|^\d{22}$/';
|
||
|
||
|
||
|
||
private function table(): string {
|
||
return \AKSRT\Core\DBMigrator::table('order');
|
||
}
|
||
|
||
|
||
|
||
/* ------------------------------------------------------------------
|
||
* CRUD
|
||
* ----------------------------------------------------------------*/
|
||
|
||
/**
|
||
* 创建订单（写入表）
|
||
*/
|
||
public function create(array $data): string {
|
||
global $wpdb;
|
||
|
||
// [防刷机制]下单限制（后台「扩展&增强 → 网站安全」），管理员不受限，未登录按 IP。
|
||
if (class_exists('\AKSRT\Extensions\SecurityHardening') && !current_user_can('manage_options')) {
|
||
$security = \AKSRT\Settings\ExtensionRuntime::get_security_settings();
|
||
$order_user_id = (int) ($data['user_id'] ?? 0);
|
||
$brush_subject = $order_user_id > 0
|
||
? (string) $order_user_id
|
||
: (function_exists('aksrt_get_client_ip') ? aksrt_get_client_ip() : (string) ($_SERVER['REMOTE_ADDR'] ?? ''));
|
||
$brush = \AKSRT\Extensions\SecurityHardening::brush_allow('order', $brush_subject, (int) $security['security_brush_order_10min'], (int) $security['security_brush_order_day']);
|
||
if ($brush !== true) {
|
||
return '';
|
||
}
|
||
}
|
||
|
||
// 自带订单号先过形态校验：只接受分配器能产出的「全数字、20 或 22 位」。
|
||
// 不合规的一律弃用并回落到分配器（WP_DEBUG 下留痕），既不把非法长度写进库，
|
||
// 也不因此抛错中断调用方。
|
||
$declared_number = isset($data['order_number']) && is_scalar($data['order_number'])
|
||
? trim((string) $data['order_number'])
|
||
: '';
|
||
$caller_supplied = $declared_number !== ''
|
||
&& (bool) preg_match(self::ORDER_NUMBER_PATTERN, $declared_number);
|
||
if ($declared_number !== '' && !$caller_supplied && defined('WP_DEBUG') && WP_DEBUG) {
|
||
error_log(sprintf('[AKSRT Order] 弃用不合规的自带订单号：%s', $declared_number));
|
||
}
|
||
$order_number = $caller_supplied ? $declared_number : $this->allocate_order_number();
|
||
|
||
// Preserve JSON pay meta (VIP/content/coupon). Only strip tags for plain text notes.
|
||
$note_raw = (string) ($data['note'] ?? '');
|
||
$note_trim = trim($note_raw);
|
||
if ($note_trim !== '' && ($note_trim[0] === '{' || $note_trim[0] === '[')) {
|
||
$decoded = json_decode($note_trim, true);
|
||
$note = is_array($decoded)
|
||
? (string) wp_json_encode($decoded, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES)
|
||
: sanitize_textarea_field($note_raw);
|
||
} else {
|
||
$note = sanitize_textarea_field($note_raw);
|
||
}
|
||
|
||
$currency = sanitize_key((string) ($data['currency'] ?? 'CNY'));
|
||
$amount = $this->normalize_order_amount($data['amount'] ?? null, $currency);
|
||
if ($amount === null) {
|
||
return '';
|
||
}
|
||
$status = array_key_exists('status', $data)
|
||
? \AKSRT\Core\DomainModel::normalize_order_status((string) $data['status'])
|
||
: \AKSRT\Core\DomainModel::ORDER_STATUS_PENDING;
|
||
if ($status === '') {
|
||
return '';
|
||
}
|
||
|
||
$row = [
|
||
'order_number' => $order_number,
|
||
'user_id' => (int) ($data['user_id'] ?? 0),
|
||
'product_type' => sanitize_key((string) ($data['product_type'] ?? '')),
|
||
'product_id' => (int) ($data['product_id'] ?? 0),
|
||
'amount' => $amount,
|
||
'currency' => $currency,
|
||
'status' => $status,
|
||
'payment_method' => sanitize_key((string) ($data['payment_method'] ?? '')),
|
||
'payment_transaction_id' => sanitize_text_field((string) ($data['payment_transaction_id'] ?? '')),
|
||
'created_at' => $data['created_at'] ?? current_time('mysql'),
|
||
'paid_at' => $data['paid_at'] ?? null,
|
||
'note' => $note,
|
||
];
|
||
$formats = ['%s', '%d', '%s', '%d', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s'];
|
||
|
||
// Pending orders always receive an expiry. Callers may provide a shorter
|
||
// expiry; otherwise the shared runtime policy supplies it.
|
||
if (array_key_exists('expires_at', $data) && $data['expires_at'] !== null && $data['expires_at'] !== '') {
|
||
$row['expires_at'] = (string) $data['expires_at'];
|
||
$formats[] = '%s';
|
||
} elseif ($row['status'] === Order::STATUS_PENDING) {
|
||
$row['expires_at'] = \AKSRT\Settings\PaymentRuntime::get_order_expiry_at();
|
||
$formats[] = '%s';
|
||
}
|
||
|
||
if (!empty($data['request_key'])) {
|
||
$row['request_key'] = substr(sanitize_text_field((string) $data['request_key']), 0, 191);
|
||
$formats[] = '%s';
|
||
}
|
||
|
||
// 只有本方法自己分配的号码才允许换号重试。调用方显式传入的合规订单号
|
||
// （导入、补单、幂等重放）必须原样使用，冲突就应失败，不得悄悄换号。
|
||
$max_attempts = $caller_supplied ? 1 : self::ORDER_NUMBER_MAX_ATTEMPTS;
|
||
|
||
for ($attempt = 1; $attempt <= $max_attempts; $attempt++) {
|
||
$row['order_number'] = $order_number;
|
||
$wpdb->insert($this->table(), $row, $formats);
|
||
|
||
if ($wpdb->insert_id) {
|
||
return $order_number;
|
||
}
|
||
|
||
// 只对订单号唯一键冲突换号重试；request_key 冲突等属于调用方的
|
||
// 幂等语义，换号重试会掩盖重复提交，必须原样失败。
|
||
if ($attempt >= $max_attempts
|
||
|| stripos((string) $wpdb->last_error, 'uniq_order_number') === false
|
||
) {
|
||
return '';
|
||
}
|
||
|
||
$order_number = $this->allocate_order_number();
|
||
}
|
||
|
||
return '';
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取单个订单
|
||
*/
|
||
public function get(string $order_number): ?array {
|
||
global $wpdb;
|
||
|
||
$row = $wpdb->get_row($wpdb->prepare(
|
||
"SELECT * FROM {$this->table()} WHERE order_number = %s",
|
||
$order_number
|
||
), ARRAY_A);
|
||
|
||
if ($row) {
|
||
return $this->expire_order_if_due($this->normalize_row($row));
|
||
}
|
||
|
||
return null;
|
||
}
|
||
|
||
public function get_by_request_key(string $request_key): ?array {
|
||
global $wpdb;
|
||
$request_key = substr(sanitize_text_field($request_key), 0, 191);
|
||
if ($request_key === '') {
|
||
return null;
|
||
}
|
||
$row = $wpdb->get_row($wpdb->prepare(
|
||
"SELECT * FROM {$this->table()} WHERE request_key = %s",
|
||
$request_key
|
||
), ARRAY_A);
|
||
return is_array($row) ? $this->normalize_row($row) : null;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取用户订单列表
|
||
*/
|
||
public function get_user_orders(int $user_id, array $args = []): array {
|
||
global $wpdb;
|
||
|
||
$this->expire_pending_orders($user_id);
|
||
$parts = $this->get_user_order_query_parts($user_id, $args);
|
||
$limit = max(1, min(100, (int) ($args['limit'] ?? 20)));
|
||
$offset = max(0, (int) ($args['offset'] ?? 0));
|
||
$params = $parts['params'];
|
||
$params[] = $limit;
|
||
$params[] = $offset;
|
||
|
||
$sql = "SELECT * FROM {$this->table()} {$parts['where']} ORDER BY created_at DESC LIMIT %d OFFSET %d";
|
||
$rows = $wpdb->get_results($wpdb->prepare($sql, $params), ARRAY_A);
|
||
|
||
return array_map([$this, 'normalize_row'], (array) $rows);
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取单个用户订单。
|
||
*/
|
||
public function get_user_order(int $user_id, string $order_number): ?array {
|
||
$order = $this->get($order_number);
|
||
if (!$order) {
|
||
return null;
|
||
}
|
||
|
||
if ($user_id > 0 && (int) ($order['user_id'] ?? 0) !== $user_id) {
|
||
return null;
|
||
}
|
||
|
||
return $order;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取用户订单总数。
|
||
*/
|
||
public function count_user_orders(int $user_id, array $args = []): int {
|
||
global $wpdb;
|
||
|
||
if ($user_id <= 0) {
|
||
return 0;
|
||
}
|
||
|
||
$this->expire_pending_orders($user_id);
|
||
|
||
$parts = $this->get_user_order_query_parts($user_id, $args);
|
||
return (int) $wpdb->get_var($wpdb->prepare(
|
||
"SELECT COUNT(*) FROM {$this->table()} {$parts['where']}",
|
||
$parts['params']
|
||
));
|
||
}
|
||
|
||
/**
|
||
* Get the filtered list total and the user's order-center counters in one query.
|
||
*
|
||
* The filtered total mirrors the list query while the counters intentionally keep
|
||
* their existing user-wide semantics, so changing a filter does not change the
|
||
* summary cards. The subquery avoids four independent COUNT statements.
|
||
*
|
||
* @return array{total:int,stats:array<string,int>}
|
||
*/
|
||
public function get_user_order_center_summary(int $user_id, array $args = []): array {
|
||
global $wpdb;
|
||
|
||
if ($user_id <= 0) {
|
||
return [
|
||
'total' => 0,
|
||
'stats' => ['total' => 0, 'pending' => 0, 'paid' => 0, 'refunded' => 0, 'closed' => 0, 'after_sale_pending' => 0],
|
||
];
|
||
}
|
||
|
||
$this->expire_pending_orders($user_id);
|
||
|
||
$parts = $this->get_user_order_query_parts($user_id, $args);
|
||
$known_statuses = OrderCenterQuery::from_array([])->database_statuses();
|
||
$known_placeholders = implode(', ', array_fill(0, count($known_statuses), '%s'));
|
||
$sql = "SELECT
|
||
(SELECT COUNT(*) FROM {$this->table()} {$parts['where']}) AS filtered_total,
|
||
COUNT(*) AS known_total,
|
||
SUM(CASE WHEN status = %s THEN 1 ELSE 0 END) AS pending,
|
||
SUM(CASE WHEN status = %s THEN 1 ELSE 0 END) AS paid,
|
||
SUM(CASE WHEN status = 'refunding' THEN 1 ELSE 0 END) AS paid_legacy,
|
||
SUM(CASE WHEN status = %s THEN 1 ELSE 0 END) AS refunded,
|
||
SUM(CASE WHEN status = %s THEN 1 ELSE 0 END) AS closed
|
||
FROM {$this->table()}
|
||
WHERE user_id = %d AND status IN ({$known_placeholders})";
|
||
$params = array_merge(
|
||
$parts['params'],
|
||
[Order::STATUS_PENDING, Order::STATUS_PAID, Order::STATUS_REFUNDED, Order::STATUS_CLOSED],
|
||
[$user_id],
|
||
$known_statuses
|
||
);
|
||
$row = $wpdb->get_row($wpdb->prepare($sql, $params), ARRAY_A);
|
||
|
||
return [
|
||
'total' => (int) ($row['filtered_total'] ?? 0),
|
||
'stats' => [
|
||
'total' => (int) ($row['known_total'] ?? 0),
|
||
'pending' => (int) ($row['pending'] ?? 0),
|
||
'paid' => (int) ($row['paid'] ?? 0) + (int) ($row['paid_legacy'] ?? 0),
|
||
'refunded' => (int) ($row['refunded'] ?? 0),
|
||
'closed' => (int) ($row['closed'] ?? 0),
|
||
'after_sale_pending' => class_exists(AfterSaleService::class) ? AfterSaleService::get_instance()->count_user_open($user_id) : 0,
|
||
],
|
||
];
|
||
}
|
||
|
||
/**
|
||
* Close every expired, unpaid order for one user (or all users).
|
||
*
|
||
* The status condition makes this idempotent and prevents an expiry sweep
|
||
* from overwriting a payment completed concurrently by a gateway callback.
|
||
*/
|
||
public function expire_pending_orders(?int $user_id = null): int {
|
||
global $wpdb;
|
||
|
||
$where = "status = 'pending' AND expires_at IS NOT NULL AND expires_at <= %s";
|
||
$params = [gmdate('Y-m-d H:i:s')];
|
||
if ($user_id !== null && $user_id > 0) {
|
||
$where .= ' AND user_id = %d';
|
||
$params[] = $user_id;
|
||
}
|
||
|
||
$sql = "UPDATE {$this->table()} SET status = 'closed', cancelled_at = %s WHERE {$where}";
|
||
array_unshift($params, gmdate('Y-m-d H:i:s'));
|
||
$result = $wpdb->query($wpdb->prepare($sql, $params));
|
||
|
||
return is_numeric($result) ? (int) $result : 0;
|
||
}
|
||
|
||
/** @param array<string,mixed> $order @return array<string,mixed> */
|
||
private function expire_order_if_due(array $order): array {
|
||
$status = sanitize_key((string) ($order['status'] ?? ''));
|
||
$expires_at = trim((string) ($order['expires_at'] ?? ''));
|
||
if ($status !== Order::STATUS_PENDING || $expires_at === '') {
|
||
return $order;
|
||
}
|
||
|
||
$expires = strtotime($expires_at . ' UTC');
|
||
if ($expires === false || $expires > time()) {
|
||
return $order;
|
||
}
|
||
|
||
global $wpdb;
|
||
$closed_at = gmdate('Y-m-d H:i:s');
|
||
$updated = $wpdb->update(
|
||
$this->table(),
|
||
['status' => Order::STATUS_CLOSED, 'cancelled_at' => $closed_at],
|
||
['order_number' => (string) $order['order_number'], 'status' => $status],
|
||
['%s', '%s'],
|
||
['%s', '%s']
|
||
);
|
||
if ($updated) {
|
||
$order['status'] = Order::STATUS_CLOSED;
|
||
$order['cancelled_at'] = $closed_at;
|
||
}
|
||
|
||
return $order;
|
||
}
|
||
|
||
|
||
|
||
public function update_status(string $order_number, string $new_status, array $extra = []): bool {
|
||
global $wpdb;
|
||
if ($new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_REFUNDED && empty($extra['allow_refund'])) {
|
||
return false;
|
||
}
|
||
if ($new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_REFUNDED
|
||
&& (!class_exists(AfterSaleService::class) || !AfterSaleService::get_instance()->can_finalize_order_refund((int) ($extra['after_sale_id'] ?? 0), $order_number))
|
||
) {
|
||
return false;
|
||
}
|
||
|
||
$preflight = $this->get($order_number);
|
||
if (!$preflight) {
|
||
return false;
|
||
}
|
||
if (
|
||
$new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_PAID
|
||
&& (string) ($preflight['status'] ?? '') !== 'refunding'
|
||
&& sanitize_key((string) ($preflight['product_type'] ?? '')) === \AKSRT\Core\DomainModel::ORDER_PRODUCT_RECHARGE
|
||
&& class_exists('\AKSRT\Credits\BalanceService')
|
||
) {
|
||
return \AKSRT\Credits\BalanceService::get_instance()->complete_recharge_payment(
|
||
$preflight,
|
||
sanitize_key((string) ($extra['payment_method'] ?? $preflight['payment_method'] ?? '')),
|
||
sanitize_text_field((string) ($extra['payment_transaction_id'] ?? $preflight['payment_transaction_id'] ?? '')),
|
||
(string) ($extra['note'] ?? '')
|
||
);
|
||
}
|
||
|
||
$ledger_active = class_exists('\AKSRT\Ledger\LedgerService')
|
||
&& \AKSRT\Ledger\LedgerService::get_instance()->transaction_active();
|
||
$root_call = $this->status_transaction_depth === 0;
|
||
if ($root_call) {
|
||
$this->status_after_commit_events = [];
|
||
}
|
||
$transaction_managed = !empty($extra['transaction_managed']);
|
||
$owns_transaction = $root_call && !$ledger_active && !$transaction_managed;
|
||
if ($owns_transaction && $wpdb->query('START TRANSACTION') === false) {
|
||
return false;
|
||
}
|
||
|
||
$this->status_transaction_depth++;
|
||
try {
|
||
$result = $this->update_status_in_transaction($order_number, $new_status, $extra);
|
||
if (!$result) {
|
||
if ($owns_transaction) {
|
||
$wpdb->query('ROLLBACK');
|
||
}
|
||
if ($root_call) {
|
||
$this->status_after_commit_events = [];
|
||
}
|
||
return false;
|
||
}
|
||
if ($owns_transaction && $wpdb->query('COMMIT') === false) {
|
||
$wpdb->query('ROLLBACK');
|
||
$this->status_after_commit_events = [];
|
||
return false;
|
||
}
|
||
if ($root_call) {
|
||
$events = $this->status_after_commit_events;
|
||
$this->status_after_commit_events = [];
|
||
if ($owns_transaction) {
|
||
$this->dispatch_status_events($events);
|
||
} elseif ($ledger_active) {
|
||
\AKSRT\Ledger\LedgerService::get_instance()->after_commit(function () use ($events): void {
|
||
$this->dispatch_status_events($events);
|
||
});
|
||
} elseif ($transaction_managed) {
|
||
$this->status_after_commit_events = $events;
|
||
}
|
||
}
|
||
return true;
|
||
} catch (\Throwable $e) {
|
||
if ($owns_transaction) {
|
||
$wpdb->query('ROLLBACK');
|
||
}
|
||
if ($root_call) {
|
||
$this->status_after_commit_events = [];
|
||
}
|
||
if (defined('WP_DEBUG') && WP_DEBUG) {
|
||
error_log('[AKSRT Order] transactional status update failed: ' . $e->getMessage());
|
||
}
|
||
return false;
|
||
} finally {
|
||
$this->status_transaction_depth--;
|
||
}
|
||
}
|
||
|
||
private function update_status_in_transaction(string $order_number, string $new_status, array $extra = []): bool {
|
||
global $wpdb;
|
||
$ledger_active = class_exists('\AKSRT\Ledger\LedgerService')
|
||
&& \AKSRT\Ledger\LedgerService::get_instance()->transaction_active();
|
||
|
||
$valid = \AKSRT\Core\DomainModel::order_status_labels();
|
||
if (!isset($valid[$new_status])) return false;
|
||
|
||
$order_row = $wpdb->get_row($wpdb->prepare(
|
||
"SELECT * FROM {$this->table()} WHERE order_number = %s FOR UPDATE",
|
||
$order_number
|
||
), ARRAY_A);
|
||
$database_status = is_array($order_row) ? sanitize_key((string) ($order_row['status'] ?? '')) : '';
|
||
$order = is_array($order_row) ? $this->normalize_row($order_row) : null;
|
||
if (!$order) return false;
|
||
|
||
$current_status = (string) ($order['status'] ?? '');
|
||
if ($database_status === 'refunding' && $new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_REFUNDED) {
|
||
$current_status = \AKSRT\Core\DomainModel::ORDER_STATUS_PAID;
|
||
}
|
||
|
||
if (!\AKSRT\Core\DomainModel::can_transition_order_status($current_status, $new_status)) {
|
||
return false;
|
||
}
|
||
|
||
$update_data = ['status' => $new_status];
|
||
$format = ['%s'];
|
||
|
||
$time_fields = [
|
||
\AKSRT\Core\DomainModel::ORDER_STATUS_PAID => 'paid_at',
|
||
\AKSRT\Core\DomainModel::ORDER_STATUS_CLOSED => 'cancelled_at',
|
||
\AKSRT\Core\DomainModel::ORDER_STATUS_REFUNDED => 'refunded_at',
|
||
];
|
||
|
||
if (isset($time_fields[$new_status])) {
|
||
$field = $time_fields[$new_status];
|
||
// Do not overwrite an existing timestamp on repeated callbacks.
|
||
$existing = is_string($order[$field] ?? null) ? trim((string) $order[$field]) : '';
|
||
if ($existing === '' || str_starts_with($existing, '0000-00-00')) {
|
||
$update_data[$field] = current_time('mysql');
|
||
$format[] = '%s';
|
||
}
|
||
}
|
||
|
||
if ($new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_REFUNDED) {
|
||
$existing_paid = is_string($order['paid_at'] ?? null) ? trim((string) $order['paid_at']) : '';
|
||
if ($existing_paid === '' || str_starts_with($existing_paid, '0000-00-00')) {
|
||
if (!isset($update_data['paid_at'])) {
|
||
$update_data['paid_at'] = current_time('mysql');
|
||
$format[] = '%s';
|
||
}
|
||
}
|
||
}
|
||
|
||
if (!empty($extra['payment_method'])) {
|
||
$update_data['payment_method'] = sanitize_key($extra['payment_method']);
|
||
$format[] = '%s';
|
||
}
|
||
|
||
if (!empty($extra['payment_transaction_id'])) {
|
||
$update_data['payment_transaction_id'] = sanitize_text_field($extra['payment_transaction_id']);
|
||
$format[] = '%s';
|
||
}
|
||
|
||
if (!empty($extra['note'])) {
|
||
// Preserve JSON pay meta (coupon/topic_pay/content_pay/…); stash human text as status_note.
|
||
$status_note = sanitize_textarea_field((string) $extra['note']);
|
||
$raw_note = isset($order['note']) && is_string($order['note']) ? $order['note'] : '';
|
||
$decoded_note = $raw_note !== '' ? json_decode($raw_note, true) : null;
|
||
if (is_array($decoded_note)) {
|
||
$decoded_note['status_note'] = $status_note;
|
||
$merged = wp_json_encode($decoded_note, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
||
$update_data['note'] = is_string($merged) ? $merged : $status_note;
|
||
} else {
|
||
$update_data['note'] = $status_note;
|
||
}
|
||
$format[] = '%s';
|
||
}
|
||
|
||
// Compare-and-swap the status so concurrent callbacks cannot both win the
|
||
// first paid transition and trigger fulfillment twice.
|
||
$result = $wpdb->update(
|
||
$this->table(),
|
||
$update_data,
|
||
['order_number' => $order_number, 'status' => $database_status],
|
||
$format,
|
||
['%s', '%s']
|
||
);
|
||
|
||
if ($result === false) {
|
||
return false;
|
||
}
|
||
|
||
if ($result === 0) {
|
||
if (!empty($extra['require_transition'])) {
|
||
return false;
|
||
}
|
||
$latest = $this->get($order_number);
|
||
return is_array($latest) && ($latest['status'] ?? '') === $new_status;
|
||
}
|
||
|
||
if ($result > 0) {
|
||
$this->status_after_commit_events[] = [
|
||
'hook' => 'aksrt_order_status_changed',
|
||
'args' => [$order_number, $new_status, array_merge($order, $update_data)],
|
||
];
|
||
// 到账事件：让充值/VIP/商品履约等挂接（单一履约入口）。
|
||
// 仅在「首次」转为 paid 时触发，避免回调多次到达重复履约。
|
||
if ($new_status === \AKSRT\Core\DomainModel::ORDER_STATUS_PAID && $current_status === \AKSRT\Core\DomainModel::ORDER_STATUS_PENDING) {
|
||
$paid_order = array_merge($order, [
|
||
'status' => $new_status,
|
||
'payment_method' => $update_data['payment_method'] ?? ($order['payment_method'] ?? ''),
|
||
'payment_transaction_id' => $update_data['payment_transaction_id'] ?? ($order['payment_transaction_id'] ?? ''),
|
||
]);
|
||
if (isset($update_data['note'])) {
|
||
// Keep pre-update JSON payload for listeners (coupon burn etc.);
|
||
// only attach status_note if callers mutated note.
|
||
$pre_meta = [];
|
||
$pre_raw = isset($order['note']) && is_string($order['note']) ? $order['note'] : '';
|
||
if ($pre_raw !== '') {
|
||
$pre_decoded = json_decode($pre_raw, true);
|
||
if (is_array($pre_decoded)) {
|
||
$pre_meta = $pre_decoded;
|
||
}
|
||
}
|
||
if ($pre_meta !== []) {
|
||
$paid_order['meta_payload'] = $pre_meta;
|
||
// Prefer merged DB note (JSON + status_note) for downstream reads.
|
||
$paid_order['note'] = $update_data['note'];
|
||
}
|
||
}
|
||
|
||
$this->status_after_commit_events[] = [
|
||
'hook' => 'aksrt_order_commission',
|
||
'args' => [$order_number, $new_status, $paid_order],
|
||
];
|
||
|
||
$product_type = sanitize_key((string) ($paid_order['product_type'] ?? ''));
|
||
if (\AKSRT\Core\DomainModel::is_resource_product_type($product_type) && class_exists('\AKSRT\Content\Pay')) {
|
||
$fulfilled = \AKSRT\Content\Pay::get_instance()->fulfill_paid_order($order_number, $paid_order);
|
||
if (is_wp_error($fulfilled)) {
|
||
return false;
|
||
}
|
||
}
|
||
if ($product_type === \AKSRT\Core\DomainModel::ORDER_PRODUCT_VIP && class_exists('\AKSRT\Content\VipService')) {
|
||
$fulfilled = \AKSRT\Content\VipService::get_instance()->fulfill_paid_order($order_number, $paid_order);
|
||
if (is_wp_error($fulfilled)) {
|
||
return false;
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 订单到账。
|
||
*
|
||
* @param string $order_number 订单号
|
||
* @param array $paid_order 订单数据（status=paid）
|
||
*/
|
||
$this->status_after_commit_events[] = [
|
||
'hook' => 'aksrt_order_paid',
|
||
'args' => [$order_number, $paid_order],
|
||
];
|
||
}
|
||
|
||
}
|
||
|
||
return $result !== false;
|
||
}
|
||
|
||
/** @param array<int,array{hook:string,args:array<int,mixed>}> $events */
|
||
private function dispatch_status_events(array $events): void {
|
||
foreach ($events as $event) {
|
||
try {
|
||
do_action((string) $event['hook'], ...$event['args']);
|
||
} catch (\Throwable $e) {
|
||
if (defined('WP_DEBUG') && WP_DEBUG) {
|
||
error_log('[AKSRT Order Event] ' . $e->getMessage());
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* Delete closed orders older than $days days.
|
||
*
|
||
* @return int Number of rows deleted.
|
||
*/
|
||
public function clear_closed_orders(int $days = 14): int {
|
||
global $wpdb;
|
||
|
||
$days = max(1, min(3650, $days));
|
||
$table = $this->table();
|
||
$cutoff = gmdate('Y-m-d H:i:s', time() - ($days * DAY_IN_SECONDS));
|
||
|
||
$deleted = $wpdb->query($wpdb->prepare(
|
||
"DELETE FROM {$table}
|
||
WHERE status = 'closed'
|
||
AND cancelled_at IS NOT NULL
|
||
AND cancelled_at < %s",
|
||
$cutoff
|
||
));
|
||
return $deleted === false ? 0 : (int) $deleted;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* Hard-delete a single order by order_number (admin hygiene).
|
||
*/
|
||
public function delete_order(string $order_number): bool {
|
||
global $wpdb;
|
||
$order_number = sanitize_text_field($order_number);
|
||
if ($order_number === '') {
|
||
return false;
|
||
}
|
||
$ok = $wpdb->delete($this->table(), ['order_number' => $order_number], ['%s']);
|
||
return $ok !== false && $ok > 0;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 获取订单统计
|
||
*/
|
||
public function get_stats(int $user_id = 0): array {
|
||
global $wpdb;
|
||
|
||
$this->expire_pending_orders($user_id > 0 ? $user_id : null);
|
||
|
||
$where = "WHERE status IN ('pending', 'paid', 'refunding', 'refunded', 'closed')";
|
||
$params = [];
|
||
if ($user_id > 0) {
|
||
$where .= ' AND user_id = %d';
|
||
$params[] = $user_id;
|
||
}
|
||
|
||
$sql = "SELECT
|
||
COUNT(*) as total,
|
||
SUM(CASE WHEN status = 'pending' THEN 1 ELSE 0 END) as pending,
|
||
SUM(CASE WHEN status IN ('paid','refunding') THEN 1 ELSE 0 END) as paid,
|
||
SUM(CASE WHEN status = 'refunded' THEN 1 ELSE 0 END) as refunded,
|
||
SUM(CASE WHEN status = 'closed' THEN 1 ELSE 0 END) as closed,
|
||
SUM(CASE WHEN status IN ('paid','refunding') THEN amount ELSE 0 END) as revenue
|
||
FROM {$this->table()} {$where}";
|
||
|
||
if (!empty($params)) {
|
||
$row = $wpdb->get_row($wpdb->prepare($sql, $params), ARRAY_A);
|
||
} else {
|
||
$row = $wpdb->get_row($sql, ARRAY_A);
|
||
}
|
||
|
||
return [
|
||
'total' => (int) ($row['total'] ?? 0),
|
||
'pending' => (int) ($row['pending'] ?? 0),
|
||
'paid' => (int) ($row['paid'] ?? 0),
|
||
'refunded' => (int) ($row['refunded'] ?? 0),
|
||
'closed' => (int) ($row['closed'] ?? 0),
|
||
'revenue' => $this->cash_decimal((string) ($row['revenue'] ?? '0')),
|
||
];
|
||
}
|
||
|
||
/** @return array<string,mixed> */
|
||
public function get_admin_order_stats(array $args = []): array {
|
||
global $wpdb;
|
||
$this->expire_pending_orders();
|
||
$where = [];
|
||
$params = [];
|
||
foreach (['date_from' => '>=', 'date_to' => '<='] as $key => $operator) {
|
||
$date = sanitize_text_field((string) ($args[$key] ?? ''));
|
||
if ($date !== '' && preg_match('/^\d{4}-\d{2}-\d{2}$/', $date)) {
|
||
$where[] = 'created_at ' . $operator . ' %s';
|
||
$params[] = $operator === '>=' ? $date . ' 00:00:00' : $date . ' 23:59:59';
|
||
}
|
||
}
|
||
$where_sql = $where ? 'WHERE ' . implode(' AND ', $where) : '';
|
||
$sql = "SELECT COUNT(*) AS total,
|
||
SUM(status = 'pending') AS pending,
|
||
SUM(status IN ('paid','refunding')) AS paid,
|
||
SUM(status = 'refunded') AS refunded,
|
||
SUM(status = 'closed') AS closed,
|
||
SUM(CASE WHEN status IN ('paid','refunding') AND currency <> 'points' THEN amount ELSE 0 END) AS revenue
|
||
FROM {$this->table()} {$where_sql}";
|
||
$row = $params ? $wpdb->get_row($wpdb->prepare($sql, $params), ARRAY_A) : $wpdb->get_row($sql, ARRAY_A);
|
||
$type_sql = "SELECT product_type, note, COUNT(*) AS total FROM {$this->table()} {$where_sql} GROUP BY product_type, note";
|
||
$type_rows = $params ? $wpdb->get_results($wpdb->prepare($type_sql, $params), ARRAY_A) : $wpdb->get_results($type_sql, ARRAY_A);
|
||
$by_type = array_fill_keys(array_keys(\AKSRT\Core\DomainModel::order_product_type_labels()), 0);
|
||
foreach ((array) $type_rows as $type_row) {
|
||
$meta = json_decode((string) ($type_row['note'] ?? ''), true);
|
||
$type = \AKSRT\Core\DomainModel::resolve_order_product_type((string) ($type_row['product_type'] ?? ''), is_array($meta) ? $meta : []);
|
||
if (isset($by_type[$type])) {
|
||
$by_type[$type] += (int) ($type_row['total'] ?? 0);
|
||
}
|
||
}
|
||
return [
|
||
'total' => (int) ($row['total'] ?? 0),
|
||
'pending' => (int) ($row['pending'] ?? 0),
|
||
'paid' => (int) ($row['paid'] ?? 0),
|
||
'refunded' => (int) ($row['refunded'] ?? 0),
|
||
'closed' => (int) ($row['closed'] ?? 0),
|
||
'revenue' => $this->cash_decimal((string) ($row['revenue'] ?? '0')),
|
||
'by_type' => $by_type,
|
||
'after_sale_pending' => class_exists(AfterSaleService::class) ? AfterSaleService::get_instance()->count([
|
||
'status' => AfterSaleService::STATUS_PENDING,
|
||
'date_from' => $args['date_from'] ?? '',
|
||
'date_to' => $args['date_to'] ?? '',
|
||
]) : 0,
|
||
];
|
||
}
|
||
|
||
public function dispatch_managed_status_events(): void {
|
||
$events = $this->status_after_commit_events;
|
||
$this->status_after_commit_events = [];
|
||
$this->dispatch_status_events($events);
|
||
}
|
||
|
||
|
||
|
||
public function has_paid_access(int $user_id, string $product_type, int $product_id): bool {
|
||
if ($user_id <= 0 || $product_id <= 0) {
|
||
return false;
|
||
}
|
||
|
||
if (\AKSRT\Core\DomainModel::is_resource_product_type($product_type)) {
|
||
return null !== $this->find_latest_success_content_order($user_id, $product_id);
|
||
}
|
||
return null !== $this->find_latest_success_order($user_id, $product_type, $product_id);
|
||
}
|
||
|
||
|
||
|
||
public function get_valid_vip_order(int $user_id): ?array {
|
||
return $this->find_latest_success_order($user_id, \AKSRT\Core\DomainModel::ORDER_PRODUCT_VIP, 0, true);
|
||
}
|
||
|
||
|
||
|
||
/* ------------------------------------------------------------------
|
||
* Internal helpers
|
||
* ----------------------------------------------------------------*/
|
||
|
||
/**
|
||
* Build the shared list/count predicate without changing caller semantics.
|
||
*
|
||
* @return array{where:string,params:array<int,mixed>}
|
||
*/
|
||
private function get_user_order_query_parts(int $user_id, array $args = []): array {
|
||
global $wpdb;
|
||
|
||
$where = [];
|
||
$params = [];
|
||
if ($user_id > 0) {
|
||
$where[] = 'user_id = %d';
|
||
$params[] = $user_id;
|
||
}
|
||
|
||
$statuses = array_values(array_filter(array_map('sanitize_key', (array) ($args['status_in'] ?? []))));
|
||
if ($statuses !== []) {
|
||
$where[] = 'status IN (' . implode(', ', array_fill(0, count($statuses), '%s')) . ')';
|
||
array_push($params, ...$statuses);
|
||
} else {
|
||
$status = sanitize_key((string) ($args['status'] ?? ''));
|
||
if ($status !== '') {
|
||
$where[] = 'status = %s';
|
||
$params[] = $status;
|
||
}
|
||
}
|
||
|
||
$product_type = sanitize_key((string) ($args['product_type'] ?? ''));
|
||
if ($product_type !== '') {
|
||
if ($product_type === \AKSRT\Core\DomainModel::ORDER_PRODUCT_RESOURCE) {
|
||
$types = \AKSRT\Core\DomainModel::resource_order_product_types();
|
||
$where[] = 'product_type IN (' . implode(', ', array_fill(0, count($types), '%s')) . ')';
|
||
array_push($params, ...$types);
|
||
} else {
|
||
$legacy_pay_types = [
|
||
\AKSRT\Core\DomainModel::ORDER_PRODUCT_READING => \AKSRT\Core\DomainModel::PAY_TYPE_READING,
|
||
\AKSRT\Core\DomainModel::ORDER_PRODUCT_DOWNLOAD => \AKSRT\Core\DomainModel::PAY_TYPE_DOWNLOAD,
|
||
\AKSRT\Core\DomainModel::ORDER_PRODUCT_IMAGE => \AKSRT\Core\DomainModel::PAY_TYPE_GALLERY,
|
||
\AKSRT\Core\DomainModel::ORDER_PRODUCT_VIDEO => \AKSRT\Core\DomainModel::PAY_TYPE_VIDEO,
|
||
];
|
||
if (isset($legacy_pay_types[$product_type])) {
|
||
$where[] = "(product_type = %s OR (product_type = %s AND note LIKE %s))";
|
||
array_push($params, $product_type, \AKSRT\Core\DomainModel::ORDER_PRODUCT_RESOURCE, '%"pay_type":"' . $wpdb->esc_like($legacy_pay_types[$product_type]) . '"%');
|
||
} else {
|
||
$where[] = 'product_type = %s';
|
||
$params[] = $product_type;
|
||
}
|
||
}
|
||
}
|
||
|
||
$order_number_prefix = strtoupper(preg_replace('/[^A-Za-z0-9_-]/', '', (string) ($args['order_number_prefix'] ?? '')) ?? '');
|
||
if ($order_number_prefix !== '') {
|
||
$where[] = 'order_number LIKE %s';
|
||
$params[] = $wpdb->esc_like($order_number_prefix) . '%';
|
||
}
|
||
|
||
return [
|
||
'where' => $where ? 'WHERE ' . implode(' AND ', $where) : '',
|
||
'params' => $params,
|
||
];
|
||
}
|
||
|
||
private function normalize_row(array $row): array {
|
||
$row['id'] = (int) $row['id'];
|
||
$row['user_id'] = (int) $row['user_id'];
|
||
$row['product_id'] = (int) $row['product_id'];
|
||
$row['amount'] = $this->normalize_order_amount((string) ($row['amount'] ?? ''), (string) ($row['currency'] ?? ''), true);
|
||
if ($row['amount'] === null) {
|
||
$row['amount'] = (string) ($row['currency'] ?? '') === 'points' ? 0 : '0.00';
|
||
}
|
||
$row['status'] = sanitize_key((string) ($row['status'] ?? ''));
|
||
if ($row['status'] === 'refunding') {
|
||
$row['status'] = Order::STATUS_PAID;
|
||
}
|
||
|
||
$row['meta_payload'] = [];
|
||
if (!empty($row['note']) && is_string($row['note'])) {
|
||
$decoded = json_decode($row['note'], true);
|
||
if (is_array($decoded)) {
|
||
$row['meta_payload'] = $decoded;
|
||
if (isset($decoded['customer_note']) && is_string($decoded['customer_note'])) {
|
||
$row['note_text'] = $decoded['customer_note'];
|
||
}
|
||
} else {
|
||
$row['note_text'] = $row['note'];
|
||
}
|
||
}
|
||
$row['product_type'] = \AKSRT\Core\DomainModel::resolve_order_product_type(
|
||
sanitize_key((string) ($row['product_type'] ?? '')),
|
||
$row['meta_payload']
|
||
);
|
||
|
||
return $row;
|
||
}
|
||
|
||
private function normalize_order_amount(mixed $value, string $currency, bool $from_database = false): string|int|null {
|
||
if ($currency === 'points') {
|
||
$raw = is_int($value) ? (string) $value : (is_string($value) ? trim($value) : '');
|
||
if ($from_database && preg_match('/^(0|[1-9]\d*)\.0+$/', $raw, $matches)) {
|
||
$raw = $matches[1];
|
||
}
|
||
if (!preg_match('/^(0|[1-9]\d*)$/', $raw)) {
|
||
return null;
|
||
}
|
||
$max = (string) PHP_INT_MAX;
|
||
if (strlen($raw) > strlen($max) || (strlen($raw) === strlen($max) && strcmp($raw, $max) > 0)) {
|
||
return null;
|
||
}
|
||
return (int) $raw;
|
||
}
|
||
if (!is_string($value)) {
|
||
return null;
|
||
}
|
||
try {
|
||
return \AKSRT\Ledger\AssetAmount::balance(trim($value))->decimal();
|
||
} catch (\InvalidArgumentException $e) {
|
||
return null;
|
||
}
|
||
}
|
||
|
||
private function cash_decimal(string $value): string {
|
||
try {
|
||
return \AKSRT\Ledger\AssetAmount::balance($value)->decimal();
|
||
} catch (\InvalidArgumentException $e) {
|
||
return '0.00';
|
||
}
|
||
}
|
||
|
||
|
||
|
||
private function find_latest_success_order(int $user_id, string $product_type, int $product_id = 0, bool $ignore_product_id = false): ?array {
|
||
global $wpdb;
|
||
|
||
if ($user_id <= 0 || $product_type === '') {
|
||
return null;
|
||
}
|
||
|
||
$status_placeholders = implode(', ', array_fill(0, count(\AKSRT\Core\DomainModel::paid_order_statuses()), '%s'));
|
||
$params = array_merge(
|
||
[$user_id, sanitize_key($product_type)],
|
||
$ignore_product_id ? [] : [$product_id],
|
||
\AKSRT\Core\DomainModel::paid_order_statuses()
|
||
);
|
||
|
||
$product_sql = $ignore_product_id ? '' : ' AND product_id = %d';
|
||
$sql = "SELECT * FROM {$this->table()}
|
||
WHERE user_id = %d
|
||
AND product_type = %s{$product_sql}
|
||
AND status IN ({$status_placeholders})
|
||
ORDER BY COALESCE(paid_at, created_at) DESC, id DESC
|
||
LIMIT 1";
|
||
|
||
$row = $wpdb->get_row($wpdb->prepare($sql, $params), ARRAY_A);
|
||
|
||
return is_array($row) ? $this->normalize_row($row) : null;
|
||
}
|
||
|
||
private function find_latest_success_content_order(int $user_id, int $product_id): ?array {
|
||
global $wpdb;
|
||
$types = \AKSRT\Core\DomainModel::resource_order_product_types();
|
||
$placeholders = implode(', ', array_fill(0, count($types), '%s'));
|
||
$statuses = \AKSRT\Core\DomainModel::paid_order_statuses();
|
||
$status_placeholders = implode(', ', array_fill(0, count($statuses), '%s'));
|
||
$params = array_merge([$user_id, $product_id], $types, $statuses);
|
||
$row = $wpdb->get_row($wpdb->prepare(
|
||
"SELECT * FROM {$this->table()} WHERE user_id = %d AND product_id = %d AND product_type IN ({$placeholders}) AND status IN ({$status_placeholders}) ORDER BY COALESCE(paid_at, created_at) DESC, id DESC LIMIT 1",
|
||
$params
|
||
), ARRAY_A);
|
||
return is_array($row) ? $this->normalize_row($row) : null;
|
||
}
|
||
|
||
|
||
|
||
/**
|
||
* 分配订单号。
|
||
*
|
||
* 订单号不再是独立编号体系：与资金流水号、提现单号共用统一流水号规则，
|
||
* 由 {@see \AKSRT\Finance\BusinessNumber::allocate()} 生成，不带任何前缀。
|
||
*/
|
||
public function allocate_order_number(): string {
|
||
return \AKSRT\Finance\BusinessNumber::allocate();
|
||
}
|
||
|
||
/**
|
||
* Merge keys into the order note JSON payload (meta_payload).
|
||
*
|
||
* @param array<string,mixed> $patch
|
||
*/
|
||
public function merge_meta(string $order_number, array $patch): bool {
|
||
global $wpdb;
|
||
|
||
$order = $this->get($order_number);
|
||
if (!$order) {
|
||
return false;
|
||
}
|
||
|
||
$meta = is_array($order['meta_payload'] ?? null) ? $order['meta_payload'] : [];
|
||
foreach ($patch as $key => $value) {
|
||
$meta[(string) $key] = $value;
|
||
}
|
||
|
||
$encoded = wp_json_encode($meta, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
||
if (!is_string($encoded)) {
|
||
return false;
|
||
}
|
||
|
||
$updated = $wpdb->update(
|
||
$this->table(),
|
||
['note' => $encoded],
|
||
['order_number' => $order_number],
|
||
['%s'],
|
||
['%s']
|
||
);
|
||
|
||
return $updated !== false;
|
||
}
|
||
|
||
/**
|
||
* Resolve a local order from a provider out_trade_no (base or attempt-suffixed).
|
||
*
|
||
* The authoritative mapping is the order's own meta (provider_out_trade_no /
|
||
* provider_out_trade_nos); the prefix heuristic is only a fallback and must
|
||
* never be the sole resolver, otherwise a truncated attempt number would
|
||
* strand a real payment.
|
||
*/
|
||
public function resolve_by_out_trade_no(string $out_trade_no): ?array {
|
||
global $wpdb;
|
||
|
||
$out_trade_no = sanitize_text_field($out_trade_no);
|
||
if ($out_trade_no === '') {
|
||
return null;
|
||
}
|
||
|
||
$direct = $this->get($out_trade_no);
|
||
if ($direct) {
|
||
return $direct;
|
||
}
|
||
|
||
// Authoritative: the attempt number was recorded in the order note JSON.
|
||
$needle = '"provider_out_trade_no":"' . $out_trade_no . '"';
|
||
$row = $wpdb->get_row(
|
||
$wpdb->prepare(
|
||
"SELECT * FROM {$this->table()} WHERE note LIKE %s ORDER BY id DESC LIMIT 1",
|
||
'%' . $wpdb->esc_like($needle) . '%'
|
||
),
|
||
ARRAY_A
|
||
);
|
||
if (is_array($row)) {
|
||
return $this->expire_order_if_due($this->normalize_row($row));
|
||
}
|
||
|
||
// Superseded attempts stay in the history array.
|
||
$history_needle = '"' . $out_trade_no . '"';
|
||
$row = $wpdb->get_row(
|
||
$wpdb->prepare(
|
||
"SELECT * FROM {$this->table()}
|
||
WHERE note LIKE %s AND note LIKE %s
|
||
ORDER BY id DESC LIMIT 1",
|
||
'%' . $wpdb->esc_like('"provider_out_trade_nos"') . '%',
|
||
'%' . $wpdb->esc_like($history_needle) . '%'
|
||
),
|
||
ARRAY_A
|
||
);
|
||
if (is_array($row)) {
|
||
return $this->expire_order_if_due($this->normalize_row($row));
|
||
}
|
||
|
||
// Last resort: {order_number}P{n} prefix heuristic.
|
||
if (preg_match('/^(.+)P([0-9]{1,3})$/', $out_trade_no, $m)) {
|
||
$base = $this->get($m[1]);
|
||
if ($base) {
|
||
return $base;
|
||
}
|
||
}
|
||
|
||
return null;
|
||
}
|
||
|
||
/**
|
||
* Provider out_trade_no currently bound to this order (falls back to order_number).
|
||
*
|
||
* @param array<string,mixed> $order
|
||
*/
|
||
public static function provider_out_trade_no(array $order): string {
|
||
$meta = is_array($order['meta_payload'] ?? null) ? $order['meta_payload'] : [];
|
||
$out = sanitize_text_field((string) ($meta['provider_out_trade_no'] ?? ''));
|
||
if ($out !== '') {
|
||
return $out;
|
||
}
|
||
return sanitize_text_field((string) ($order['order_number'] ?? ''));
|
||
}
|
||
|
||
/**
|
||
* Allocate a new provider out_trade_no for a payment attempt.
|
||
* First attempt uses bare order_number; later attempts append Pn (WeChat limit 32).
|
||
*
|
||
* @return array{out_trade_no:string,attempt:int,previous:string}|null
|
||
*/
|
||
public function allocate_payment_attempt(string $order_number): ?array {
|
||
$order = $this->get($order_number);
|
||
if (!$order) {
|
||
return null;
|
||
}
|
||
|
||
$meta = is_array($order['meta_payload'] ?? null) ? $order['meta_payload'] : [];
|
||
$previous = sanitize_text_field((string) ($meta['provider_out_trade_no'] ?? ''));
|
||
$history = is_array($meta['provider_out_trade_nos'] ?? null) ? $meta['provider_out_trade_nos'] : [];
|
||
|
||
// First provider submission keeps the bare order number.
|
||
// Re-pay (provider_out_trade_no already set) always mints a new suffix so
|
||
// WeChat/Alipay/Epay accept the order when amount/subject/notify changed.
|
||
if ($previous === '') {
|
||
$attempt = 1;
|
||
$out = $order_number;
|
||
} else {
|
||
$attempt = max(1, (int) ($meta['pay_attempt'] ?? 1)) + 1;
|
||
$suffix = 'P' . $attempt;
|
||
$base = $order_number;
|
||
if (strlen($base) + strlen($suffix) > 32) {
|
||
$base = substr($base, 0, 32 - strlen($suffix));
|
||
}
|
||
$out = $base . $suffix;
|
||
if ($previous !== '' && !in_array($previous, $history, true)) {
|
||
$history[] = $previous;
|
||
}
|
||
}
|
||
|
||
if (!in_array($out, $history, true)) {
|
||
$history[] = $out;
|
||
}
|
||
if (count($history) > 20) {
|
||
$history = array_slice($history, -20);
|
||
}
|
||
|
||
$ok = $this->merge_meta($order_number, [
|
||
'pay_attempt' => $attempt,
|
||
'provider_out_trade_no' => $out,
|
||
'provider_out_trade_nos' => array_values($history),
|
||
]);
|
||
if (!$ok) {
|
||
return null;
|
||
}
|
||
|
||
return [
|
||
'out_trade_no' => $out,
|
||
'attempt' => $attempt,
|
||
'previous' => $previous,
|
||
];
|
||
}
|
||
|
||
}
|