feat: 接入 CCpay 第三支付通道（越南银行QR代收）

- extend/pay/Ccpay.php: SDK封装（签名/验签/下单/查询）
- traits/ccpayPay.php: 下单/回调/结算/轮询，pay_channel_id=9
- config.php: pay_list 加 ccpay 配置
- Pcapi/Order: 注册 ccpayPay trait

application/config.php

@@ -359,5 +359,29 @@ return [
                 '11' => '越南代收'
             ]
         ],
+        'epay' => [//彩虹易支付（USDT/支付宝/微信 聚合）
+            'online_order_fac' => 'epay_online_order',
+            'notify_url'       => 'https://api.g7g7.top/order/epay_recharge_callback',// 异步回调
+            'callback_url'     => 'https://api.g7g7.top/order/epay_return',// 同步跳转回业务
+            'api_url'          => 'https://pay.g7g7.top',
+            'pid'              => '1000',
+            'key'              => 'bf7b83653f5c056a6103e26263a75fa1',
+            'goods_name'       => '账户充值',
+            'type' => [
+                'usdt'   => 'USDT支付',
+                // 'alipay' => '支付宝',
+                // 'wxpay'  => '微信支付',
+            ]
+        ],
+        'ccpay' => [//CCmerchant越南银行代收
+            'online_order_fac' => 'ccpay_online_order',
+            'notify_url'       => 'https://api.g7g7.top/order/ccpay_recharge_callback',
+            'callback_url'     => '',
+            'api_url'          => 'https://c.gmobvfxllc.com/gateway/api/trade',
+            'mch_no'           => 'M8822026041910000352',
+            'pay_secret'       => '820281b0d0b24a6bb701d8fc1c31a197',
+            'timeout'          => 600,
+            'type'             => ['pay' => 'CCpay越南银行'],
+        ],
     ]
 ];

application/onlinechip/controller/Order.php

@@ -14,6 +14,8 @@ class Order Extends Controller{
 	use traits\happyPay;
 	use traits\hengfuPay;
 	use traits\alinPay;
+	use traits\epayPay;
+	use traits\ccpayPay;
 
 	public function __construct()
 	{
@@ -34,10 +36,23 @@ class Order Extends Controller{
 		}
 		$pay_method = $area_list[$user['area_id']]['pay'];
 		if($user && $user['api_token'] == $api_token){
-			$this->assign('online_order_fac',$pay_list[$pay_method]['online_order_fac']);
-			$this->assign('payMethod',$pay_list[$pay_method]['type']);
-			$this->assign('client',1);
-			$this->assign('user_info',$user);
+			$payMethod  = $pay_list[$pay_method]['type'];
+			$pay_routes = [];
+			foreach($payMethod as $k => $v){
+				$pay_routes[$k] = $pay_list[$pay_method]['online_order_fac'];
+			}
+			// 越南地区追加 USDT (Epay)
+			if($user['area_id'] == 3 && !empty($pay_list['epay']['type'])){
+				foreach($pay_list['epay']['type'] as $k => $v){
+					$payMethod[$k]  = $v;
+					$pay_routes[$k] = $pay_list['epay']['online_order_fac'];
+				}
+			}
+			$this->assign('online_order_fac', $pay_list[$pay_method]['online_order_fac']);
+			$this->assign('payMethod',        $payMethod);
+			$this->assign('pay_routes',       $pay_routes);
+			$this->assign('client',           1);
+			$this->assign('user_info',        $user);
 			return $this->fetch();
 		}else{
 			exit('页面错误，请退出再登录！');
@@ -55,10 +70,26 @@ class Order Extends Controller{
 		}
 		$pay_method = $area_list[$user['area_id']]['pay'];
 		if($user && $user['api_token'] == $api_token){
-			$this->assign('online_order_fac',$pay_list[$pay_method]['online_order_fac']);
-			$this->assign('payMethod',$pay_list[$pay_method]['type']);
-			$this->assign('client',2);
-			$this->assign('user_info',$user);
+			// 主通道（按 area_list 的 pay 配置）
+			$payMethod  = $pay_list[$pay_method]['type'];
+			$pay_routes = [];
+			foreach($payMethod as $k => $v){
+				$pay_routes[$k] = $pay_list[$pay_method]['online_order_fac'];
+			}
+
+			// 越南地区追加 USDT (Epay) 通道作为第二选项
+			if($user['area_id'] == 3 && !empty($pay_list['epay']['type'])){
+				foreach($pay_list['epay']['type'] as $k => $v){
+					$payMethod[$k]  = $v;
+					$pay_routes[$k] = $pay_list['epay']['online_order_fac'];
+				}
+			}
+
+			$this->assign('online_order_fac', $pay_list[$pay_method]['online_order_fac']); // 兼容旧模板
+			$this->assign('payMethod',        $payMethod);
+			$this->assign('pay_routes',       $pay_routes);
+			$this->assign('client',           2);
+			$this->assign('user_info',        $user);
 			return $this->fetch();
 		}else{
 			exit('页面错误，请退出再登录！');

application/onlinechip/controller/Pcapi.php

@@ -17,6 +17,8 @@ use Waybill\WaybillRoulette;
 
 class Pcapi extends Controller{
 	use traits\alinPay;
+	use traits\epayPay;
+	use traits\ccpayPay;
 	public function __construct(){
 		parent::__construct();
 		// CORS headers

application/onlinechip/controller/traits/ccpayPay.php

@@ -0,0 +1,411 @@
+<?php
+namespace app\onlinechip\controller\traits;
+
+use think\Db;
+use think\Log;
+use think\Request;
+
+trait ccpayPay
+{
+    public function ccpay_online_order()
+    {
+        $post = Request::instance()->post();
+        if (isset($post['encryptData'])) {
+            $post = decrypt_data($post);
+            if (!$post) {
+                $data = encrypt_data(['status' => 0, 'message' => 'Dữ liệu không hợp lệ']);
+                return json(['Success' => 1, 'Data' => $data]);
+            }
+        }
+
+        $user_id  = intval($post['user_id'] ?? 0);
+        $money    = intval($post['price'] ?? 0);
+        $client   = intval($post['client'] ?? 0);
+        $username = trim($post['username'] ?? '');
+
+        $user = Db::name('user')->where([
+            'id'        => $user_id,
+            'status'    => 1,
+            'is_delete' => 0,
+            'agent'     => 0,
+        ])->find();
+
+        if (!$user || $user_id <= 0 || $money <= 0 || $client <= 0) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tham số không hợp lệ, vui lòng thử lại']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $zdlIdArr  = explode(',', $user['agent_parent_id_path']);
+        $area_list = config('area_list');
+
+        if (!isset($area_list[$user['area_id']])) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Khu vực hiện chưa hỗ trợ nạp tiền']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $isAllow = false;
+        foreach ($area_list[$user['area_id']]['limit_agent'] as $allowAgentId) {
+            if (in_array($allowAgentId, $zdlIdArr)) {
+                $isAllow = true;
+            }
+        }
+        if (!$isAllow) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tài khoản này chưa được phép nạp online']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $zdlId = $zdlIdArr[0];
+        $zdl   = Db::name('user')->where([
+            'id'        => $zdlId,
+            'status'    => 1,
+            'is_delete' => 0,
+            'agent'     => 1,
+        ])->find();
+
+        if (!$zdl) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tài khoản đại lý có vấn đề, không thể nạp']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+        if ($zdl['money'] < $money) {
+            $maxAllowed = intval($zdl['money']);
+            $data = encrypt_data([
+                'status'     => 0,
+                'code'       => 'AGENT_LIMIT',
+                'message'    => 'Hạn mức nạp mỗi lần hiện tại là ' . number_format($maxAllowed, 0, '.', ',') . ' VND. Vui lòng nhập số tiền nhỏ hơn hoặc bằng mức trên.',
+                'max_amount' => $maxAllowed,
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $pay_list    = config('pay_list');
+        $pay_orderid = 'C' . date('YmdHis') . rand(100000, 999999);
+        $notify_url  = $pay_list['ccpay']['notify_url'] ?? '';
+        $timeout     = intval($pay_list['ccpay']['timeout'] ?? 600);
+
+        try {
+            $ccpay  = new \pay\Ccpay();
+            $result = $ccpay->createOrder(
+                $pay_orderid,
+                sprintf('%.0f', $money),
+                $notify_url,
+                'uid_' . $user_id
+            );
+
+            if (!is_array($result)) {
+                addLogToFile('ccpay 下单: API 无响应', 'ccpay_error', 'ccpay');
+                $data = encrypt_data(['status' => 0, 'message' => 'Kênh thanh toán không phản hồi, vui lòng thử lại']);
+                return json(['Success' => 1, 'Data' => $data]);
+            }
+
+            $status     = intval($result['status'] ?? -1);
+            $resultCode = intval($result['resultCode'] ?? -1);
+
+            if ($status !== 0 || $resultCode !== 0) {
+                $errMsg = $result['errMsg'] ?? 'Lỗi không xác định';
+                addLogToFile('ccpay 下单失败: order=' . $pay_orderid . ' err=' . $errMsg . ' raw=' . json_encode($result, JSON_UNESCAPED_UNICODE), 'ccpay_error', 'ccpay');
+                $data = encrypt_data(['status' => 0, 'message' => 'Khởi tạo thanh toán thất bại: ' . $errMsg]);
+                return json(['Success' => 1, 'Data' => $data]);
+            }
+
+            $order_id = Db::name('order_record')->insertGetId([
+                'pay_channel_id'   => 9,
+                'pay_channel_name' => 'ccpay',
+                'user_id'          => $user_id,
+                'order_sn'         => $pay_orderid,
+                'appid'            => $ccpay->getConfigInfo()['mch_no'] ?? '',
+                'api_key'          => '',
+                'money'            => $money,
+                'sign'             => '',
+                'create_time'      => time(),
+                'back_order_sn'    => $result['cpOrderNo'] ?? '',
+                'client'           => $client,
+            ]);
+
+            Db::name('order_log')->insert([
+                'pay_channel_id'   => 9,
+                'pay_channel_name' => 'ccpay',
+                'money'            => $money,
+                'create_time'      => time(),
+                'remake'           => 'user_id:' . $user_id . ',用户名:' . $username . ',CCpay发起充值：' . $money . ',时间:' . date('Y-m-d H:i:s'),
+                'order_id'         => $order_id,
+                'client'           => $client,
+            ]);
+
+            $codeUrl = $result['codeUrl'] ?? '';
+            $qrcode  = null;
+
+            $msgJson = $result['message'] ?? '';
+            if ($msgJson) {
+                $bankInfo = json_decode($msgJson, true);
+                if (is_array($bankInfo) && !empty($bankInfo['AccNo'])) {
+                    $expiresAt = time() + $timeout;
+                    $qrcode = [
+                        'order_sn'       => $pay_orderid,
+                        'bank_account'   => $bankInfo['AccNo'] ?? '',
+                        'bank_name'      => $bankInfo['AccName'] ?? '',
+                        'bank_branch'    => $bankInfo['Branch'] ?? '',
+                        'bank_short'     => $bankInfo['BankShortName'] ?? '',
+                        'qr_data'        => $bankInfo['qrcode'] ?? '',
+                        'remark'         => $bankInfo['remark'] ?? '',
+                        'amount'         => $money,
+                        'expires_at'     => $expiresAt,
+                        'timeout_sec'    => $timeout,
+                    ];
+                }
+            }
+
+            addLogToFile('ccpay 下单成功: order=' . $pay_orderid . ' cp=' . ($result['cpOrderNo'] ?? ''), 'ccpay_request', 'ccpay');
+
+            $data = encrypt_data([
+                'status'  => 1,
+                'message' => 'Khởi tạo thanh toán thành công',
+                'url'     => $codeUrl,
+                'qrcode'  => $qrcode,
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        } catch (\Exception $e) {
+            addLogToFile('ccpay 下单异常: ' . $e->getMessage() . ' | file:' . $e->getFile() . ':' . $e->getLine(), 'ccpay_error', 'ccpay');
+            $data = encrypt_data(['status' => 0, 'message' => 'Khởi tạo thanh toán thất bại: ' . $e->getMessage()]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+    }
+
+    public function ccpay_order_status()
+    {
+        $post = Request::instance()->post();
+        if (isset($post['encryptData'])) {
+            $post = decrypt_data($post);
+            if (!$post) {
+                return json(['status' => 0, 'message' => '数据解密失败']);
+            }
+        }
+
+        $order_sn = trim($post['order_sn'] ?? '');
+        $user_id  = intval($post['user_id'] ?? 0);
+
+        if ($order_sn === '' || $user_id <= 0) {
+            $data = encrypt_data(['status' => 0, 'message' => '参数错误']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $order = Db::name('order_record')
+            ->where([
+                'order_sn'       => $order_sn,
+                'user_id'        => $user_id,
+                'pay_channel_id' => 9,
+            ])
+            ->find();
+
+        if (!$order) {
+            $data = encrypt_data(['status' => 0, 'message' => '订单不存在']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        if (intval($order['status']) == 3) {
+            $data = encrypt_data([
+                'status'    => 1,
+                'message'   => 'Nạp tiền thành công',
+                'money'     => $order['money'],
+                'paid_time' => $order['back_time'],
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $pay_list = config('pay_list');
+        $timeout  = intval($pay_list['ccpay']['timeout'] ?? 600);
+        if (time() - intval($order['create_time']) > $timeout) {
+            $data = encrypt_data([
+                'status'  => 2,
+                'message' => 'Đơn hàng đã hết hạn',
+                'money'   => $order['money'],
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $data = encrypt_data([
+            'status'  => 0,
+            'message' => 'Đang chờ thanh toán',
+            'money'   => $order['money'],
+        ]);
+        return json(['Success' => 1, 'Data' => $data]);
+    }
+
+    public function ccpay_recharge_callback()
+    {
+        $raw = file_get_contents('php://input');
+        $post = json_decode($raw, true);
+        if (!$post) {
+            $post = Request::instance()->post();
+        }
+
+        $json = json_encode($post, JSON_UNESCAPED_UNICODE);
+        addLogToFile('ccpay 回调原始数据: ' . $json, 'ccpay_callback', 'ccpay');
+
+        if (!is_array($post) || empty($post['mchOrderNo']) || empty($post['sign'])) {
+            Log::record($post, 'ccpay_error_callback');
+            exit('fail');
+        }
+
+        $logId = Db::name('pay_callback_log')->insertGetId([
+            'pay_channel' => 'CCPAY_RECHARGE',
+            'type'        => 'recharge',
+            'json'        => $json,
+            'create_time' => date('Y-m-d H:i:s'),
+        ]);
+
+        try {
+            $ccpay = new \pay\Ccpay();
+
+            $verifyData = [];
+            $verifyData['status']     = strval($post['status'] ?? '');
+            $verifyData['mchNo']      = $post['mchNo'] ?? '';
+            $verifyData['resultCode'] = strval($post['resultCode'] ?? '');
+            $verifyData['cpOrderNo']  = $post['cpOrderNo'] ?? '';
+            $verifyData['mchOrderNo'] = $post['mchOrderNo'] ?? '';
+            $verifyData['amount']     = strval($post['amount'] ?? '');
+            $verifyData['payResult']  = $post['payResult'] ?? '';
+            $verifyData['traceTime']  = $post['traceTime'] ?? '';
+            $verifyData['message']    = $post['message'] ?? '';
+
+            $signData = array_filter($verifyData, function ($v) {
+                return $v !== '' && $v !== null;
+            });
+            $signData['sign'] = $post['sign'];
+
+            if (!$ccpay->verifySign($signData)) {
+                addLogToFile('ccpay 回调验签失败: ' . $json, 'ccpay_callback_error', 'ccpay');
+                exit('fail');
+            }
+
+            if ($logId && !empty($post['mchOrderNo'])) {
+                Db::name('pay_callback_log')->where('id', $logId)->update(['unique_no' => $post['mchOrderNo']]);
+            }
+
+            $payResult = strval($post['payResult'] ?? '');
+
+            if ($payResult === '0') {
+                $this->ccpay_recharge_settle($post);
+                addLogToFile('ccpay 回调成功: order=' . $post['mchOrderNo'], 'ccpay_callback', 'ccpay');
+                exit('success');
+            } else {
+                addLogToFile('ccpay 回调非成功状态: payResult=' . $payResult . ' order=' . $post['mchOrderNo'], 'ccpay_callback', 'ccpay');
+                exit('success');
+            }
+        } catch (\Exception $e) {
+            addLogToFile('ccpay 回调异常: ' . $e->getMessage(), 'ccpay_callback_error', 'ccpay');
+            exit('fail');
+        }
+    }
+
+    private function ccpay_recharge_settle($data)
+    {
+        $orderNo = $data['mchOrderNo'];
+
+        Db::startTrans();
+        try {
+            $order = Db::name('order_record')->where('order_sn', $orderNo)->lock(true)->find();
+            if (!$order || $order['status'] == 3) {
+                Db::rollback();
+                return;
+            }
+
+            $user = Db::name('user')->where([
+                'id'        => $order['user_id'],
+                'status'    => 1,
+                'is_delete' => 0,
+                'agent'     => 0,
+            ])->lock(true)->find();
+            if (!$user) {
+                Db::rollback();
+                return;
+            }
+
+            $zdlIdArr = explode(',', $user['agent_parent_id_path']);
+            $zdlId    = $zdlIdArr[0];
+
+            $zdl = Db::name('user')->where([
+                'id'        => $zdlId,
+                'status'    => 1,
+                'is_delete' => 0,
+                'agent'     => 1,
+            ])->lock(true)->find();
+
+            if (!$zdl || $zdl['money'] < $order['money']) {
+                Db::rollback();
+                addLogToFile('ccpay 结算失败: 代理余额不足 order=' . $orderNo, 'ccpay_callback_error', 'ccpay');
+                return;
+            }
+
+            $actualMoney = isset($data['amount']) ? intval($data['amount']) : $order['money'];
+
+            Db::name('order_record')->where('id', $order['id'])->update([
+                'back_money'            => $actualMoney,
+                'back_time'             => time(),
+                'status'                => 3,
+                'agent_parent_id'       => $user['agent_parent_id'],
+                'agent_parent_username' => $user['agent_parent_username'],
+                'zdl_id'                => $zdl['id'],
+                'zdl_username'          => $zdl['username'],
+                'zdl_money_before'      => $zdl['money'],
+                'zdl_money_after'       => $zdl['money'] - $order['money'],
+                'money_before'          => $user['money'],
+                'money_after'           => $user['money'] + $order['money'],
+            ]);
+
+            Db::name('order_log')->insert([
+                'pay_channel_id'   => 9,
+                'pay_channel_name' => 'ccpay',
+                'money'            => $order['money'],
+                'create_time'      => time(),
+                'remake'           => 'CCpay回调成功 cp=' . ($data['cpOrderNo'] ?? '') . ' payer=' . ($data['message'] ?? ''),
+                'order_id'         => $order['id'],
+            ]);
+
+            Db::name('recharge')->insert([
+                'type'                 => 4,
+                'amount'               => $order['money'],
+                'mode'                 => 1,
+                'agent_or_admin'       => 3,
+                'controller_id'        => $zdl['id'],
+                'controller_username'  => $zdl['username'],
+                'controller_nickname'  => $zdl['nickname'],
+                'controller_type'      => 'CCpay越南银行第三方充值，扣取总代理余分',
+                'controller_old_money' => $zdl['money'],
+                'controller_new_money' => $zdl['money'] - $order['money'],
+                'user_id'              => $order['user_id'],
+                'user_type'            => $user['agent'],
+                'user_agent_level'     => 0,
+                'username_for'         => $user['username'],
+                'nickname_for'         => $user['nickname'],
+                'user_parent_id'       => $user['agent_parent_id'],
+                'create_time'          => time(),
+                'old_money'            => $user['money'],
+                'new_money'            => $user['money'] + $order['money'],
+                'controller_system'    => 3,
+                'remake'               => 'CCpay越南银行第三方充值成功',
+            ]);
+
+            Db::name('user')->where('id', $zdl['id'])->update([
+                'money'                     => $zdl['money'] - $order['money'],
+                'last_recharge_out'         => $order['money'],
+                'last_recharge_out_time'    => time(),
+                'recharge_out_count'        => $zdl['recharge_out_count'] + 1,
+                'recharge_out_total_amount' => $zdl['recharge_out_total_amount'] + $order['money'],
+            ]);
+
+            Db::name('user')->where('id', $order['user_id'])->update([
+                'money'                 => $user['money'] + $order['money'],
+                'last_recharge'         => $order['money'],
+                'last_recharge_time'    => time(),
+                'recharge_count'        => $user['recharge_count'] + 1,
+                'recharge_total_amount' => $user['recharge_total_amount'] + $order['money'],
+            ]);
+
+            Db::commit();
+            addLogToFile('ccpay 结算成功: order=' . $orderNo . ' money=' . $order['money'], 'ccpay_callback', 'ccpay');
+        } catch (\Exception $e) {
+            Db::rollback();
+            addLogToFile('ccpay 结算异常: ' . $e->getMessage(), 'ccpay_callback_error', 'ccpay');
+        }
+    }
+}

application/onlinechip/controller/traits/epayPay.php

@@ -0,0 +1,522 @@
+<?php
+namespace app\onlinechip\controller\traits;
+
+use think\Db;
+use think\Log;
+use think\Request;
+
+/**
+ * 彩虹易支付 Trait
+ *
+ * 业务定位：
+ * - 作为 AlinPay（越南银行卡）之外的第二个充值通道，走易支付接 USDT/支付宝/微信 等
+ * - 当前主要用于 USDT TRC20 收款
+ *
+ * 对接文件：
+ * - extend/pay/Epay.php
+ * - 支付站点：https://pay.g7g7.top
+ *
+ * 公开方法：
+ * - epay_online_order()       发起充值，前端拿到 url 后跳转易支付
+ * - epay_recharge_callback()  接收易支付异步回调，验签后结算
+ *
+ * 通道编号：
+ * - pay_channel_id = 8（AlinPay 是 7，本通道顺延）
+ * - 名称标识：epay
+ */
+trait epayPay
+{
+    /**
+     * 易支付 - 发起充值下单（内嵌二维码模式）
+     *
+     * 直接跨库写 epay.pre_order + 计算 usdtpro 指纹金额，
+     * 前端内嵌渲染二维码，无需跳转 pay.g7g7.top。
+     *
+     * 返回的 Data 结构：
+     * {
+     *   status:     1|0
+     *   message:    文案
+     *   url:        兼容字段（老前端仍可 window.open 跳转 /pay/leader/trade_no/）
+     *   qrcode: {   新字段，前端内嵌渲染
+     *     order_sn:     OG 侧订单号（用于轮询）
+     *     usdt_address: TRC20 收款地址
+     *     usdt_amount:  含指纹尾数的精确金额（如 10.0003）
+     *     vnd_amount:   VND 原始金额
+     *     rate:         汇率
+     *     expires_at:   订单超时绝对时间戳
+     *     timeout_sec:  总超时秒数
+     *   }
+     * }
+     */
+    public function epay_online_order()
+    {
+        // 兼容加密请求（Pcapi）和明文请求（Order）
+        $post = Request::instance()->post();
+        if (isset($post['encryptData'])) {
+            $post = decrypt_data($post);
+            if (!$post) {
+                $data = encrypt_data(['status' => 0, 'message' => 'Dữ liệu không hợp lệ']);
+                return json(['Success' => 1, 'Data' => $data]);
+            }
+        }
+
+        $user_id  = intval($post['user_id'] ?? 0);
+        $money    = intval($post['price'] ?? 0);
+        $client   = intval($post['client'] ?? 0);
+        $username = trim($post['username'] ?? '');
+        // 支付子类型：usdt / alipay / wxpay 等，默认 usdt
+        $pay_type = trim($post['pay_type'] ?? 'usdt');
+
+        $user = Db::name('user')->where([
+            'id'        => $user_id,
+            'status'    => 1,
+            'is_delete' => 0,
+            'agent'     => 0,
+        ])->find();
+
+        if (!$user || $user_id <= 0 || $money <= 0 || $client <= 0) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tham số không hợp lệ, vui lòng thử lại']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        // 地区支线权限（与 AlinPay 一致的风控）
+        $zdlIdArr  = explode(',', $user['agent_parent_id_path']);
+        $area_list = config('area_list');
+
+        if (!isset($area_list[$user['area_id']])) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Khu vực hiện chưa hỗ trợ nạp tiền']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $isAllow = false;
+        foreach ($area_list[$user['area_id']]['limit_agent'] as $allowAgentId) {
+            if (in_array($allowAgentId, $zdlIdArr)) {
+                $isAllow = true;
+            }
+        }
+        if (!$isAllow) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tài khoản này chưa được phép nạp online']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        // 总代理余额校验
+        $zdlId = $zdlIdArr[0];
+        $zdl   = Db::name('user')->where([
+            'id'        => $zdlId,
+            'status'    => 1,
+            'is_delete' => 0,
+            'agent'     => 1,
+        ])->find();
+
+        if (!$zdl) {
+            $data = encrypt_data(['status' => 0, 'message' => 'Tài khoản đại lý có vấn đề, không thể nạp']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+        if ($zdl['money'] < $money) {
+            $maxAllowed = intval($zdl['money']);
+            $data = encrypt_data([
+                'status'     => 0,
+                'code'       => 'AGENT_LIMIT',
+                'message'    => 'Hạn mức nạp mỗi lần hiện tại là ' . number_format($maxAllowed, 0, '.', ',') . ' VND. Vui lòng nhập số tiền nhỏ hơn hoặc bằng mức trên.',
+                'max_amount' => $maxAllowed,
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $pay_list    = config('pay_list');
+        $pay_orderid = 'P' . date('YmdHis') . rand(100000, 999999);  // P 前缀区分 AlinPay 的 E
+        $notify_url  = $pay_list['epay']['notify_url']  ?? '';
+        $return_url  = $pay_list['epay']['callback_url'] ?? '';
+        $goods_name  = $pay_list['epay']['goods_name']  ?? '账户充值';
+        $epay_api    = $pay_list['epay']['api_url']     ?? 'https://pay.g7g7.top';
+        $merchant_id = intval($pay_list['epay']['pid']   ?? 0);
+
+        try {
+            $epay = new \pay\Epay();
+
+            // 写 OG 侧订单
+            $order_id = Db::name('order_record')->insertGetId([
+                'pay_channel_id'   => 8,
+                'pay_channel_name' => 'epay',
+                'user_id'          => $user_id,
+                'order_sn'         => $pay_orderid,
+                'appid'            => strval($epay->getConfigInfo()['pid'] ?? ''),
+                'api_key'          => '',
+                'money'            => $money,
+                'sign'             => '',
+                'create_time'      => time(),
+                'back_order_sn'    => '',
+                'client'           => $client,
+            ]);
+
+            Db::name('order_log')->insert([
+                'pay_channel_id'   => 8,
+                'pay_channel_name' => 'epay',
+                'money'            => $money,
+                'create_time'      => time(),
+                'remake'           => 'user_id:' . $user_id . ',用户名:' . $username . ',发起充值(' . $pay_type . ')：' . $money . ',时间:' . date('Y-m-d H:i:s'),
+                'order_id'         => $order_id,
+                'client'           => $client,
+            ]);
+
+            // 调用 epay 的 mapi.php，让 epay 自己走完整个流程：
+            //  1) INSERT pre_order
+            //  2) Channel::submit 算通道
+            //  3) Plugin::loadForSubmit → usdtpro_plugin::submit() 算 usdtpro 指纹金额并写入 pre_order
+            //  4) 返回 {type:'jump', url:'/pay/leader/TRADE_NO/'}
+            // 注意：usdtpro 指纹金额必须由 epay 侧算，OG 侧算会与 monitor 对账逻辑产生精度漂移，导致充值不到账
+            $apiResult = $epay->createOrderApi(
+                $pay_orderid,
+                $pay_type,
+                sprintf('%.2f', $money),
+                $goods_name,
+                $notify_url,
+                $return_url,
+                'uid:' . $user_id
+            );
+
+            // mapi.php 返回格式：
+            //   {code:0, trade_no, pay_type:'jump', pay_info:'/pay/submit/TRADE_NO/'}  或
+            //   {code:0, trade_no, payurl:'/pay/submit/TRADE_NO/'}  (default 分支)
+            //   {code:1, trade_no, payurl:'...'}  (部分旧版)
+            $submitUrl = '';
+            $trade_no  = '';
+            if (is_array($apiResult)) {
+                if (!empty($apiResult['trade_no'])) $trade_no = strval($apiResult['trade_no']);
+                if (!empty($apiResult['payurl']))   $submitUrl = $apiResult['payurl'];
+                elseif (!empty($apiResult['pay_info'])) $submitUrl = $apiResult['pay_info'];
+                elseif (!empty($apiResult['url']))  $submitUrl = $apiResult['url'];
+            }
+
+            if (!$submitUrl || !$trade_no) {
+                $errMsg = is_array($apiResult) ? (isset($apiResult['msg']) ? $apiResult['msg'] : json_encode($apiResult, JSON_UNESCAPED_UNICODE)) : 'mapi 无响应';
+                addLogToFile('epay mapi 下单失败：order=' . $pay_orderid . ' err=' . $errMsg, 'epay_error', 'epay');
+                $data = encrypt_data(['status' => 0, 'message' => 'Khởi tạo thanh toán thất bại: ' . $errMsg]);
+                return json(['Success' => 1, 'Data' => $data]);
+            }
+
+            // 触发 plugin::submit() 把 usdtpro 指纹金额写入 pre_order
+            // mapi 模式 Plugin::loadForSubmit 只调 mapi() 方法，usdtpro 插件没这个方法，
+            // 所以 usdtpro 不会被写入。必须再访问一次 /pay/submit/TRADE_NO/ 让插件 submit() 跑一次
+            $this->epay_trigger_plugin_submit($submitUrl);
+
+            // 跳转到用户看的页面（pay/leader/TRADE_NO/）
+            $payUrl = str_replace('/pay/submit/', '/pay/leader/', $submitUrl);
+
+            // 默认返回结构（若后续读取 usdtpro 失败仍可回退跳转）
+            $qrcode = null;
+
+            if ($pay_type === 'usdt' && $trade_no) {
+                // 从 epay.pre_order 读 epay 已经算好的 usdtpro 指纹金额 + 通道地址
+                $preOrder = Db::query(
+                    "SELECT o.`trade_no`, o.`usdtpro`, o.`realmoney`, o.`addtime`, c.`config`
+                     FROM `epay`.`pre_order` o
+                     LEFT JOIN `epay`.`pre_channel` c ON c.`id` = o.`channel`
+                     WHERE o.`trade_no` = :tn LIMIT 1",
+                    ['tn' => $trade_no]
+                );
+
+                if (!empty($preOrder) && !empty($preOrder[0]['usdtpro'])) {
+                    $row = $preOrder[0];
+                    $cfg = json_decode($row['config'] ?? '{}', true) ?: [];
+                    $timeout = intval($cfg['timeout'] ?? 600);
+                    $expiresAt = strtotime($row['addtime']) + $timeout;
+
+                    $qrcode = [
+                        'order_sn'     => $pay_orderid,
+                        'trade_no'     => $row['trade_no'],
+                        'usdt_address' => $cfg['address'] ?? '',
+                        'usdt_amount'  => rtrim(rtrim(sprintf('%.5f', floatval($row['usdtpro'])), '0'), '.'),
+                        'vnd_amount'   => $row['realmoney'],
+                        'rate'         => strval($cfg['rate'] ?? ''),
+                        'expires_at'   => $expiresAt,
+                        'timeout_sec'  => $timeout,
+                    ];
+                    addLogToFile('epay 下单读取 usdtpro 成功: order=' . $pay_orderid . ' trade_no=' . $trade_no . ' usdt=' . $qrcode['usdt_amount'], 'epay_request', 'epay');
+                } else {
+                    addLogToFile('epay 下单 pre_order 未取到 usdtpro: order=' . $pay_orderid . ' trade_no=' . $trade_no, 'epay_error', 'epay');
+                }
+            }
+
+            $data = encrypt_data([
+                'status'  => 1,
+                'message' => 'Khởi tạo thanh toán thành công',
+                'url'     => $payUrl,       // 兼容老前端
+                'qrcode'  => $qrcode,        // 新前端内嵌渲染用（usdtpro 由 epay 权威给出）
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        } catch (\Exception $e) {
+            addLogToFile('epay 下单异常：' . $e->getMessage() . ' | file:' . $e->getFile() . ':' . $e->getLine(), 'epay_error', 'epay');
+            $data = encrypt_data(['status' => 0, 'message' => 'Khởi tạo thanh toán thất bại: ' . $e->getMessage()]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+    }
+
+    /**
+     * 触发 epay plugin::submit() 写入 usdtpro 指纹金额
+     * 只请求不处理响应（epay 会返回 302 或 HTML，我们只要副作用）
+     */
+    private function epay_trigger_plugin_submit($submitUrl)
+    {
+        try {
+            $ch = curl_init($submitUrl);
+            curl_setopt_array($ch, [
+                CURLOPT_RETURNTRANSFER  => true,
+                CURLOPT_FOLLOWLOCATION  => false,
+                CURLOPT_CONNECTTIMEOUT  => 3,
+                CURLOPT_TIMEOUT         => 6,
+                CURLOPT_SSL_VERIFYPEER  => false,
+                CURLOPT_SSL_VERIFYHOST  => false,
+                CURLOPT_USERAGENT       => 'OG-EpayInternal/1.0',
+            ]);
+            curl_exec($ch);
+            curl_close($ch);
+        } catch (\Exception $e) {
+            addLogToFile('epay_trigger_plugin_submit 异常：' . $e->getMessage(), 'epay_error', 'epay');
+        }
+    }
+
+    /**
+     * 易支付 - 订单状态轮询
+     *
+     * 前端轮询该接口，判断是否到账或已超时。
+     * 返回 Data 结构：
+     *   { status: 0|1|2, message, money, paid_time }
+     *     0=待支付, 1=已到账, 2=已超时
+     */
+    public function epay_order_status()
+    {
+        $post = Request::instance()->post();
+        if (isset($post['encryptData'])) {
+            $post = decrypt_data($post);
+            if (!$post) {
+                return json(['status' => 0, 'message' => '数据解密失败']);
+            }
+        }
+
+        $order_sn = trim($post['order_sn'] ?? '');
+        $user_id  = intval($post['user_id'] ?? 0);
+
+        if ($order_sn === '' || $user_id <= 0) {
+            $data = encrypt_data(['status' => 0, 'message' => '参数错误']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $order = Db::name('order_record')
+            ->where([
+                'order_sn'       => $order_sn,
+                'user_id'        => $user_id,
+                'pay_channel_id' => 8,
+            ])
+            ->find();
+
+        if (!$order) {
+            $data = encrypt_data(['status' => 0, 'message' => '订单不存在']);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        // status=3 代表已回调结算完成（见 epay_recharge_settle）
+        if (intval($order['status']) == 3) {
+            $data = encrypt_data([
+                'status'    => 1,
+                'message'   => '充值成功',
+                'money'     => $order['money'],
+                'paid_time' => $order['back_time'],
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        // 超时判定：从 epay 配置拿 timeout，兜底 600
+        $pay_list = config('pay_list');
+        $timeout  = intval($pay_list['epay']['timeout'] ?? 600);
+        if (time() - intval($order['create_time']) > $timeout) {
+            $data = encrypt_data([
+                'status'  => 2,
+                'message' => '订单超时',
+                'money'   => $order['money'],
+            ]);
+            return json(['Success' => 1, 'Data' => $data]);
+        }
+
+        $data = encrypt_data([
+            'status'  => 0,
+            'message' => '等待支付',
+            'money'   => $order['money'],
+        ]);
+        return json(['Success' => 1, 'Data' => $data]);
+    }
+
+    /**
+     * 易支付 - 异步回调处理
+     *
+     * 易支付回调是 GET（pay.php 跳转后用 GET 带参数回 notify_url），
+     * 但也可能 POST —— 都兼容
+     */
+    public function epay_recharge_callback()
+    {
+        $request = Request::instance();
+        $data = $request->post();
+        if (empty($data)) {
+            $data = $request->get();
+        }
+
+        $json = json_encode($data, JSON_UNESCAPED_UNICODE);
+        addLogToFile('epay 回调原始数据：' . $json, 'epay_callback', 'epay');
+
+        if (!is_array($data) || empty($data['out_trade_no']) || empty($data['sign'])) {
+            Log::record($data, 'epay_error_callback');
+            exit('fail');
+        }
+
+        // 记录回调日志
+        $logId = Db::name('pay_callback_log')->insertGetId([
+            'pay_channel' => 'EPAY_RECHARGE',
+            'type'        => 'recharge',
+            'json'        => $json,
+            'create_time' => date('Y-m-d H:i:s'),
+        ]);
+
+        try {
+            $epay = new \pay\Epay();
+            $result = $epay->verifyNotifyCallback($data, $logId);
+
+            if (!$result['verified']) {
+                exit('fail');
+            }
+
+            if ($result['success']) {
+                $this->epay_recharge_settle($data);
+                exit('success');
+            } else {
+                // 非 TRADE_SUCCESS —— 返 success 让对方不再重试
+                addLogToFile('epay 回调非成功状态，ack 防重试：order=' . ($data['out_trade_no'] ?? ''), 'epay_callback', 'epay');
+                exit('success');
+            }
+        } catch (\Exception $e) {
+            addLogToFile('epay 回调处理异常：' . $e->getMessage(), 'epay_callback_error', 'epay');
+            exit('fail');
+        }
+    }
+
+    /**
+     * 易支付结算（事务保护：加锁 → 扣代理 → 加用户 → 写日志）
+     * 和 alin_recharge_settle 同构，只是 pay_channel 改成 epay
+     */
+    private function epay_recharge_settle($data)
+    {
+        $orderNo = $data['out_trade_no'];
+
+        Db::startTrans();
+        try {
+            $order = Db::name('order_record')->where('order_sn', $orderNo)->lock(true)->find();
+            if (!$order || $order['status'] == 3) {
+                Db::rollback();
+                return;
+            }
+
+            $user = Db::name('user')->where([
+                'id'        => $order['user_id'],
+                'status'    => 1,
+                'is_delete' => 0,
+                'agent'     => 0,
+            ])->lock(true)->find();
+            if (!$user) {
+                Db::rollback();
+                return;
+            }
+
+            $zdlIdArr = explode(',', $user['agent_parent_id_path']);
+            $zdlId    = $zdlIdArr[0];
+
+            $zdl = Db::name('user')->where([
+                'id'        => $zdlId,
+                'status'    => 1,
+                'is_delete' => 0,
+                'agent'     => 1,
+            ])->lock(true)->find();
+
+            if (!$zdl || $zdl['money'] < $order['money']) {
+                Db::rollback();
+                addLogToFile('epay 结算失败：代理余额不足 order=' . $orderNo, 'epay_callback_error', 'epay');
+                return;
+            }
+
+            // 实际到账金额：易支付回调中的 money 字段（CNY）
+            $actualMoney = isset($data['money']) ? floatval($data['money']) : $order['money'];
+
+            // 1. 更新订单
+            Db::name('order_record')->where('id', $order['id'])->update([
+                'back_money'            => $actualMoney,
+                'back_time'             => time(),
+                'status'                => 3,
+                'agent_parent_id'       => $user['agent_parent_id'],
+                'agent_parent_username' => $user['agent_parent_username'],
+                'zdl_id'                => $zdl['id'],
+                'zdl_username'          => $zdl['username'],
+                'zdl_money_before'      => $zdl['money'],
+                'zdl_money_after'       => $zdl['money'] - $order['money'],
+                'money_before'          => $user['money'],
+                'money_after'           => $user['money'] + $order['money'],
+            ]);
+
+            // 2. 订单日志
+            Db::name('order_log')->insert([
+                'pay_channel_id'   => 8,
+                'pay_channel_name' => 'epay',
+                'money'            => $order['money'],
+                'create_time'      => time(),
+                'remake'           => '易支付回调成功 trade_no=' . ($data['trade_no'] ?? '') . ' type=' . ($data['type'] ?? ''),
+                'order_id'         => $order['id'],
+            ]);
+
+            // 3. recharge 流水
+            Db::name('recharge')->insert([
+                'type'                 => 4,
+                'amount'               => $order['money'],
+                'mode'                 => 1,
+                'agent_or_admin'       => 3,
+                'controller_id'        => $zdl['id'],
+                'controller_username'  => $zdl['username'],
+                'controller_nickname'  => $zdl['nickname'],
+                'controller_type'      => '易支付第三方充值，扣取总代理余分',
+                'controller_old_money' => $zdl['money'],
+                'controller_new_money' => $zdl['money'] - $order['money'],
+                'user_id'              => $order['user_id'],
+                'user_type'            => $user['agent'],
+                'user_agent_level'     => 0,
+                'username_for'         => $user['username'],
+                'nickname_for'         => $user['nickname'],
+                'user_parent_id'       => $user['agent_parent_id'],
+                'create_time'          => time(),
+                'old_money'            => $user['money'],
+                'new_money'            => $user['money'] + $order['money'],
+                'controller_system'    => 3,
+                'remake'               => '易支付第三方充值成功(' . ($data['type'] ?? '') . ')',
+            ]);
+
+            // 4. 扣代理
+            Db::name('user')->where('id', $zdl['id'])->update([
+                'money'                     => $zdl['money'] - $order['money'],
+                'last_recharge_out'         => $order['money'],
+                'last_recharge_out_time'    => time(),
+                'recharge_out_count'        => $zdl['recharge_out_count'] + 1,
+                'recharge_out_total_amount' => $zdl['recharge_out_total_amount'] + $order['money'],
+            ]);
+
+            // 5. 加用户
+            Db::name('user')->where('id', $order['user_id'])->update([
+                'money'                 => $user['money'] + $order['money'],
+                'last_recharge'         => $order['money'],
+                'last_recharge_time'    => time(),
+                'recharge_count'        => $user['recharge_count'] + 1,
+                'recharge_total_amount' => $user['recharge_total_amount'] + $order['money'],
+            ]);
+
+            Db::commit();
+            addLogToFile('epay 结算成功：order=' . $orderNo . ' money=' . $order['money'], 'epay_callback', 'epay');
+        } catch (\Exception $e) {
+            Db::rollback();
+            addLogToFile('epay 结算异常：' . $e->getMessage(), 'epay_callback_error', 'epay');
+        }
+    }
+}

application/onlinechip/view/order/wappay.html

@@ -204,7 +204,7 @@
 		<i class="icon"></i>
 		<select class="select" name="pay_type" id="pay_type">
 			<?php foreach($payMethod as $key=>$method): ?>
-			<option value ="<?=$key?>"><?=$method?></option>
+			<option value ="<?=$key?>" data-url="/order/<?=isset($pay_routes[$key])?$pay_routes[$key]:$online_order_fac?>"><?=$method?></option>
 			<?php endForeach; ?>
 		</select>
 	</div>
@@ -233,7 +233,8 @@
 					query.price = price;
 					query.username = username;
 					query.pay_type = pay_type;
-					url = '/order/<?=$online_order_fac ?>';
+					// 每种支付方式对应的 online_order 路由可能不同
+					url = $('#pay_type option:selected').data('url') || '/order/<?=$online_order_fac ?>';
 					//var winRef = window.open("","_blank");
 					$.ajax({
 						url:url,

extend/pay/Ccpay.php

@@ -0,0 +1,132 @@
+<?php
+namespace pay;
+
+use think\Db;
+
+class Ccpay
+{
+    private $config;
+    private $apiUrl;
+    private $mchNo;
+    private $paySecret;
+
+    public function __construct()
+    {
+        $this->config    = config('pay_list.ccpay') ?: [];
+        $this->apiUrl    = $this->config['api_url']    ?? '';
+        $this->mchNo     = $this->config['mch_no']     ?? '';
+        $this->paySecret = $this->config['pay_secret']  ?? '';
+    }
+
+    public function getConfigInfo()
+    {
+        return $this->config;
+    }
+
+    public function generateSign(array $params)
+    {
+        unset($params['sign']);
+        ksort($params);
+        $str = '';
+        foreach ($params as $k => $v) {
+            if (is_string($v) && strlen($v) > 0) {
+                $str .= "{$k}={$v}&";
+            }
+        }
+        $str = substr($str, 0, -1) . '&paySecret=' . $this->paySecret;
+        return strtoupper(md5($str));
+    }
+
+    public function verifySign(array $params)
+    {
+        $received = $params['sign'] ?? '';
+        if (!$received) return false;
+        $calculated = $this->generateSign($params);
+        return hash_equals($calculated, $received);
+    }
+
+    public function createOrder($orderNo, $amount, $notifyUrl, $memberId = 'og_user', $callbackUrl = '')
+    {
+        $extra = [
+            'bankType'        => 'OFFLINE',
+            'cardType'        => '0',
+            'orderPeriod'     => '30',
+            'memberId'        => $memberId,
+            'merchantName'    => 'OG',
+            'notifyUrl'       => $notifyUrl,
+            'callbackUrl'     => $callbackUrl,
+        ];
+
+        $data = [
+            'tradeType'  => 'cs.pay.submit',
+            'version'    => '2.0',
+            'channel'    => 'union_pay',
+            'mchNo'      => $this->mchNo,
+            'body'       => 'online_pay',
+            'mchOrderNo' => $orderNo,
+            'amount'     => strval(intval($amount)),
+            'currency'   => 'VND',
+            'timePaid'   => date('YmdHis'),
+            'remark'     => 'online-pay',
+        ];
+
+        $signParams = array_merge($data, $extra);
+        $data['sign']  = $this->generateSign($signParams);
+        $data['extra'] = json_encode($extra);
+
+        addLogToFile('ccpay 下单请求: order=' . $orderNo . ' amount=' . $amount . ' params=' . json_encode($data, JSON_UNESCAPED_UNICODE), 'ccpay_request', 'ccpay');
+
+        $result = $this->postForm($this->apiUrl, $data);
+
+        addLogToFile('ccpay 下单返回: ' . json_encode($result, JSON_UNESCAPED_UNICODE), 'ccpay_response', 'ccpay');
+
+        return $result;
+    }
+
+    public function queryOrder($orderNo)
+    {
+        $data = [
+            'tradeType'  => 'cs.order.query',
+            'version'    => '2.0',
+            'mchNo'      => $this->mchNo,
+            'mchOrderNo' => $orderNo,
+        ];
+        $data['sign'] = $this->generateSign($data);
+
+        return $this->postForm($this->apiUrl, $data);
+    }
+
+    private function postForm($url, $params)
+    {
+        $ch = curl_init($url);
+        $body = '';
+        foreach ($params as $k => $v) {
+            if (!is_string($v)) continue;
+            $body .= $k . '=' . urlencode($v) . '&';
+        }
+        $body = rtrim($body, '&');
+
+        curl_setopt_array($ch, [
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_POST           => true,
+            CURLOPT_POSTFIELDS     => $body,
+            CURLOPT_HTTPHEADER     => ['Content-Type: application/x-www-form-urlencoded; charset=UTF-8'],
+            CURLOPT_CONNECTTIMEOUT => 10,
+            CURLOPT_TIMEOUT        => 30,
+            CURLOPT_SSL_VERIFYPEER => false,
+            CURLOPT_SSL_VERIFYHOST => false,
+        ]);
+
+        $resp = curl_exec($ch);
+        $err  = curl_error($ch);
+        $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        if ($resp === false) {
+            addLogToFile("ccpay curl 失败: code={$code} err={$err}", 'ccpay_error', 'ccpay');
+            return null;
+        }
+
+        return json_decode($resp, true);
+    }
+}

extend/pay/Epay.php

@@ -0,0 +1,213 @@
+<?php
+namespace pay;
+
+use think\Db;
+
+/**
+ * 彩虹易支付（epay）对接类
+ *
+ * 对应线上支付平台：https://pay.g7g7.top/
+ * 官方文档：https://pay.cccyun.cc/
+ *
+ * 支付流程：
+ * 1. buildPayUrl() 构造带签名的 URL，前端 302 跳转到该 URL 发起支付
+ * 2. 用户在易支付页面完成支付（USDT扫码/银行卡/支付宝 等，取决于通道）
+ * 3. 易支付异步 POST notify_url，携带 sign；本端 verifyNotifyCallback() 验签
+ *
+ * 签名规则（MD5）：
+ *   - 去除 sign、sign_type 字段
+ *   - 过滤空值
+ *   - 按 key 字典序排序
+ *   - 拼接 k=v&k=v（不 urlencode，直接原值）
+ *   - 末尾拼接 {商户key}（不是 &key=）
+ *   - MD5(str) 得 32 位小写
+ */
+class Epay
+{
+    private $config;
+    private $apiUrl;
+
+    public function __construct()
+    {
+        $this->getConfig();
+    }
+
+    /**
+     * 获取配置
+     * 优先读 pay_channel 表（和 AlinPay 一致的存储位置），
+     * 回退到 config('pay_list.epay')
+     */
+    private function getConfig()
+    {
+        $dbConfig = Db::name('pay_channel')->where('key', 'EPAY')->value('value');
+        if ($dbConfig) {
+            $this->config = json_decode($dbConfig, true) ?: [];
+        } else {
+            $this->config = config('pay_list.epay') ?: [];
+        }
+        $this->apiUrl = $this->config['api_url'] ?? 'https://pay.g7g7.top';
+    }
+
+    public function getConfigInfo()
+    {
+        return $this->config;
+    }
+
+    /**
+     * 生成签名
+     *
+     * @param array $params
+     * @return string
+     */
+    public function generateSign(array $params)
+    {
+        unset($params['sign'], $params['sign_type']);
+
+        // 过滤空值（易支付官方要求）
+        $params = array_filter($params, function ($val) {
+            return $val !== '' && $val !== null;
+        });
+
+        ksort($params);
+
+        $parts = [];
+        foreach ($params as $k => $v) {
+            $parts[] = $k . '=' . $v;
+        }
+        $str = implode('&', $parts) . ($this->config['key'] ?? '');
+
+        return md5($str);
+    }
+
+    /**
+     * 验证回调签名（时间安全比较）
+     *
+     * @param array $params
+     * @return bool
+     */
+    public function verifySign(array $params)
+    {
+        $received = $params['sign'] ?? '';
+        $calculated = $this->generateSign($params);
+        return hash_equals($calculated, $received);
+    }
+
+    /**
+     * 构造发起支付的 URL（跳转式 submit.php）
+     * 前端收到该 URL 后直接 window.location 跳转即可
+     *
+     * @param string $orderNo    商户订单号
+     * @param string $type       支付方式：alipay|wxpay|qqpay|bank|jdpay|usdt
+     * @param string $amount     金额（元）
+     * @param string $name       商品名称
+     * @param string $notifyUrl  异步通知地址
+     * @param string $returnUrl  同步跳转地址
+     * @param string $param      业务扩展参数（可选，原样回传）
+     * @return string
+     */
+    public function buildPayUrl($orderNo, $type, $amount, $name, $notifyUrl, $returnUrl = '', $param = '')
+    {
+        $params = [
+            'pid'          => strval($this->config['pid'] ?? ''),
+            'type'         => $type,
+            'out_trade_no' => strval($orderNo),
+            'notify_url'   => $notifyUrl,
+            'return_url'   => $returnUrl,
+            'name'         => $name,
+            'money'        => strval($amount),
+            'param'        => $param,
+            'sign_type'    => 'MD5',
+        ];
+
+        $params['sign'] = $this->generateSign($params);
+
+        $params = array_filter($params, function ($v) {
+            return $v !== '' && $v !== null;
+        });
+
+        return rtrim($this->apiUrl, '/') . '/submit.php?' . http_build_query($params);
+    }
+
+    /**
+     * API 模式下单（mapi.php）
+     *
+     * @param string $clientIp 下单用户的 IP（mapi.php 必填，否则报 "用户IP地址(clientip)不能为空"）
+     * @return array|null
+     */
+    public function createOrderApi($orderNo, $type, $amount, $name, $notifyUrl, $returnUrl = '', $param = '', $clientIp = '')
+    {
+        if ($clientIp === '' || $clientIp === null) {
+            $clientIp = \think\Request::instance()->ip();
+        }
+        $params = [
+            'pid'          => strval($this->config['pid'] ?? ''),
+            'type'         => $type,
+            'out_trade_no' => strval($orderNo),
+            'notify_url'   => $notifyUrl,
+            'return_url'   => $returnUrl,
+            'name'         => $name,
+            'money'        => strval($amount),
+            'param'        => $param,
+            'clientip'     => strval($clientIp),
+            'sign_type'    => 'MD5',
+        ];
+        $params['sign'] = $this->generateSign($params);
+
+        $url = rtrim($this->apiUrl, '/') . '/mapi.php';
+
+        addLogToFile('epay API 下单请求：' . $url . ' params=' . json_encode($params, JSON_UNESCAPED_UNICODE), 'epay_request', 'epay');
+
+        $result = httpPost($url, $params);
+
+        addLogToFile('epay API 下单返回：' . json_encode($result, JSON_UNESCAPED_UNICODE), 'epay_response', 'epay');
+
+        if (is_array($result)) return $result;
+        if (is_string($result)) return json_decode($result, true);
+        return null;
+    }
+
+    /**
+     * 订单查询
+     */
+    public function queryOrder($orderNo)
+    {
+        $params = [
+            'act'          => 'order',
+            'pid'          => strval($this->config['pid'] ?? ''),
+            'out_trade_no' => strval($orderNo),
+        ];
+        $params['sign'] = $this->generateSign($params);
+        $params['sign_type'] = 'MD5';
+
+        $url = rtrim($this->apiUrl, '/') . '/api.php?' . http_build_query($params);
+        $resp = httpGet($url);
+        return is_string($resp) ? json_decode($resp, true) : $resp;
+    }
+
+    /**
+     * 处理异步回调 — 仅验签+解析状态，不操作余额
+     * 余额结算由 trait 内 epay_recharge_settle() 统一处理
+     *
+     * @param array $data  $_POST 或 $_GET
+     * @param int   $logId 日志 ID
+     * @return array ['verified' => bool, 'success' => bool, 'data' => array]
+     */
+    public function verifyNotifyCallback($data, $logId = 0)
+    {
+        if (!$this->verifySign($data)) {
+            addLogToFile('epay 回调验签失败：' . json_encode($data, 320), 'epay_callback_error', 'epay');
+            return ['verified' => false, 'success' => false, 'data' => $data];
+        }
+
+        $orderNo = $data['out_trade_no'] ?? '';
+        if ($logId && $orderNo) {
+            Db::name('pay_callback_log')->where('id', $logId)->update(['unique_no' => $orderNo]);
+        }
+
+        $success = isset($data['trade_status']) && $data['trade_status'] === 'TRADE_SUCCESS';
+
+        addLogToFile('epay 回调验签通过：order=' . $orderNo . ' status=' . ($data['trade_status'] ?? ''), 'epay_callback', 'epay');
+
+        return ['verified' => true, 'success' => $success, 'data' => $data];
+    }
+}