我有一个表单，我们在输入详细信息后提交。提交后，它将数据发送到一个PHP文件，该文件具有我的服务提供者的API调用。
首先，我将所有详细信息保存在本地数据库中，以及从上一个表单传递过来的代理名称和时间戳。保存数据后，我将所有相关数据发送给使用API的服务提供商。我使用curl来发布数据。
如果一切顺利，我得到以下响应
HTTP/1.1 100 Continue HTTP/1.1 200 OK Server: nginx/1.8.0 Date: Fri, 19 Aug 2016 16:38:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST {"success":true,"message":"1 row successfully inserted","warnings":[],"data":{"TRANSACTIONID":"SS_100526","STATUS":"Accepted, Verifying Funds"}}
现在，我只想显示一行，而不是这个冗长的消息- "
数据提交成功。本次交易的交易ID为:SS_100526
"而不是一个新的空白窗口。此外，我希望在调用API之前将返回的事务ID保存在保存销售详细信息的同一本地表中。
我试过使用各种JSON选项，也用它作为一个字符串来解析，但似乎不能让它工作。知道如何正确显示返回响应并在现有数据库中保存返回的事务id吗?
下面是我目前使用的带有注释的PHP代码
<?php
ob_start();
session_start();
require_once '../dbconnect.php';// to connect to the database on my server
if( !isset($_SESSION['user']) ) {
header("Location: ../index.php"); //fetching session details
exit;
}
// select loggedin users detail
$res=mysql_query("SELECT * FROM users WHERE userId=".$_SESSION['user']);
$userRow=mysql_fetch_array($res);
$userid=$userRow['userEmail'];
$usernam=$userRow['userName'];
$timestamp = date('Y-m-d G:i:s');
$apikey = 'xxxxxxxxxxxxxxx'; // Your API Key
$apiEndPoint = 'https://portalDev.example.com'; // URL for API
$link = mysqli_connect("localhost", "root", "", "demodata");
// Check connection
if($link === false){
die("ERROR: Could not connect. " . mysqli_connect_error());
}
//collecting the user details to save in the database
$source = 'client1';
$last_name= mysqli_real_escape_string($link, $_POST['last_name']);//'Doe',
$first_name= mysqli_real_escape_string($link, $_POST['first_name']);//'John',
$address= mysqli_real_escape_string($link, $_POST['address']);//'123 Broadway',
$city= mysqli_real_escape_string($link, $_POST['city']);//'New York',
$state= mysqli_real_escape_string($link, $_POST['state']);//'NY',
$zip= mysqli_real_escape_string($link, $_POST['zip']);//'10016',
$amount= mysqli_real_escape_string($link, $_POST['amount']);//'5.99',
$testmode = 0; // In test mode, you must use 1.
$agentName = $usernam;
$userMail = $userid;
$saletimestamp = $timestamp;
// attempt insert query execution
$sql = "INSERT INTO users (source, last_name, first_name, address, city, state, zip, amount, testmode, agentName, userMail, saletimestamp) VALUES ('$source', '$last_name', '$first_name', '$address', '$city', '$state', '$zip','$amount', '$testmode', '$agentName','$userMail','$saletimestamp')";
if(mysqli_query($link, $sql)){
echo "Records added successfully.";
//header('Location: http://localhost/login/bsdev/success.html');
} else{
echo "ERROR: Could not able to execute $sql. " . mysqli_error($link);
}
// close connection
mysqli_close($link);
//collate data for sending to the service provider in the format they have shared with us.
$postFields = array(
'SOURCE'=> 'client1',
'LASTNAME'=> urlencode($_POST['last_name']),//'Doe',
'FIRSTNAME'=> urlencode($_POST['first_name']),//'John',
'ADDRESS'=> urlencode($_POST['address']),//'123 Broadway',
'CITY'=> urlencode($_POST['city']),//'New York',
'STATE'=> urlencode($_POST['state']),//'NY',
'ZIPCODE'=> urlencode($_POST['zip']),//'10016',
'AMOUNT'=> urlencode($_POST['amount']),//'5.99',
'TESTMODE' => 1 // In test mode, you must use 1.
);
$process = curl_init($apiEndPoint . "/api/v1/transaction");
curl_setopt($process, CURLOPT_HEADER, 1);
curl_setopt($process, CURLOPT_USERPWD, $apikey . ":" . $apikey); // Basic Authentication using your API key
curl_setopt($process, CURLOPT_TIMEOUT, 30);
curl_setopt($process, CURLOPT_POST, 1);
curl_setopt($process, CURLOPT_POSTFIELDS, $postFields);
curl_setopt($process, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($process, CURLOPT_SSL_VERIFYPEER, FALSE);
$response = (string)curl_exec($process);
echo $response;
//This is the response we get after curl_exec:
//Records added successfully.HTTP/1.1 100 Continue HTTP/1.1 200 OK Server: nginx/1.8.0 Date: Fri, 19 Aug 2016 13:58:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST {"success":true,"message":"1 row successfully inserted","warnings":[],"data":{"TRANSACTIONID":"SS_100526","STATUS":"Accepted, Verifying Funds"}}
curl_close($process);
?>首先，我建议您使用框架而不是普通的php，因为这些代码在生产环境中使用并不真正安全。
$sql = "INSERT INTO users (source, last_name, first_name, address, city, state, zip, amount, testmode, agentName, userMail, saletimestamp) VALUES ('$source', '$last_name', '$first_name', '$address', '$city', '$state', '$zip','$amount', '$testmode', '$agentName','$userMail','$saletimestamp')";
当你写这样一个查询，它是不安全的SQL注入。恶意用户可以像这样危害您的web应用程序的安全性。使用PDO来编写查询
现在回到你的问题。我希望一旦您向API发出请求，您就已经知道事务ID。当使用cURL发出HTTP请求时，您可以使用curl_getinfo()从响应中获取所需的信息。
curl_getinfo($process, $options)
$options在这里是一个可选的数组，您可以传递。使用curl_setopt_array()将所有cURL设置放在一个数组中。这样你只需要使用一个函数，而不是使用curl_setopt()七次。
从curl_getinfo的响应中检索状态码，然后像这样编写if语句。
if($statusCode === 200) {
echo 'Data submitted successfully. Transaction ID for this sale is: ' . $id;
} else {
echo 'Something went wrong.';
}
运行curl_exec()后，需要关闭cURL会话以释放资源。使用curl_close($process)。确保$response是一个像$response[]一样的数组。删除curl_exec之前的(string)
之后，使用json_decode($response)将JSON字符串转换为PHP数组，可以使用该数组检索所需的数据。