php;">/**inc 解析接口客戶端接口傳輸規則:1.用cmd參數(base64)來動態調用不同的接口,接口地址統一為 http://a.lovexpp.com2.將要傳過來的參數組成一個數組，數組添加timestamp元素(當前時間戳,精確到秒)，將數組的鍵值按照自然排序從大到小排序3.將數組組成 key=val&key=val的形式的字符串，將字符串與XPP_KEY連接在一起,用md5加密一次(32位小寫),得到sign4.將sign添加到參數數組中5.將參數數組轉換成json用post請求請求接口地址,key值為param服務端接口解析規則:1.接收參數param,將結果解析json得到參數數組2.取出sign,去掉參數數組中的sign3.將參數數組key值按照自然排序從大到小排序4.將排序后的參數數組按照key=val&key=val的形式組成字符串，將字符串與XPP_KEY連接，用md5加密一次(32位小寫)，得到sign5.將sign與客戶端傳過來的sign進行比對,如不一樣則可能是中途被篡改參數，服務器拒絕此次請求6.將sign與session中的sign對比，如果一樣，則為重復提交，服務器拒絕此次請求7.此次的sign存入session8.執行路由cmd(base64解析后),將參數帶到該方法中*/ $xpp_key = "xxx"; //接收參數param,將結果解析json得到參數數組$param = json_decode($_POST['param'] , true); //取出sign,去掉參數數組中的sign$client_sign = $param['sign'];unset($param['sign']); //將參數數組key值按照自然排序從大到小排序krsort($param); //將排序后的參數數組按照key=val&key=val的形式組成字符串，將字符串與XPP_KEY連接，用md5加密一次(32位小寫)，得到sign$sb = '';foreach($param as $key=>$val){  $sb .= $key . '=' . $val . '&';}$sb .= $xpp_key;$server_sign = md5($sb); //將sign與客戶端傳過來的sign進行比對,如不一樣則可能是中途被篡改參數，服務器拒絕此次請求if($server_sign !== $client_sign){  echo json_encode(array('code'=>'invalid request'));  exit;} //將sign與session中的sign對比，如果一樣，則為重復提交，服務器拒絕此次請求if($server_sign == $_SESSION['last_sign']){  echo json_encode(array('code'=>'Repeated requests'));  exit();} //此次的sign存入session$_SESSION['last_sign'] = $server_sign; //執行路由cmd(base64解析后),將參數帶到該方法中$cmd = base64_decode($param['cmd']);list($__controller,$__action) = explode('-' , $cmd); // 設置請求參數unset($param['cmd']);unset($param['timestamp']);foreach($param as $key => $val){  $_REQUEST[$key] = $val;}

package com.xpplove.newxpp.activity;import java.util.HashMap;import java.util.Iterator;import java.util.Map;import java.util.TreeMap;import org.apache.commons.codec.binary.Base64;import android.os.Bundle;import com.alibaba.fastjson.JSON;import com.xpplove.newxpp.BaseActivity;import com.xpplove.newxpp.bean.Params;import com.xpplove.newxpp.net.NetPostTask;import com.xpplove.newxpp.utils.DensityUtil;public class TestActivity extends BaseActivity {  private String url = "http://c.lovexpp.com/";  @Override  protected void onCreate(Bundle savedInstanceState) {    super.onCreate(savedInstanceState);    loadMesage();  }  private void loadMesage() {    Base64 base64 = new Base64();    Map<String, String> paramsMap = new HashMap<String, String>();    paramsMap.put("timestamp", (System.currentTimeMillis() / 1000 + ""));    String cmd = new String(base64.encode("user-camList".getBytes()));    String dcmd = new String(base64.decode(cmd.getBytes()));    paramsMap.put("cmd", cmd);    paramsMap.put("sign", getString(paramsMap));    String str = getKeyValues(paramsMap);    paramsMap = new HashMap<String, String>();    paramsMap.put("param", str);    Params params = new Params();    params.listener = this;    params.url = url;    //new NetWorkTask().executeProxy(params);    new NetPostTask(paramsMap).executeProxy(params);  }  @Override  public void onGetResult(int errorCode, Object result) {    super.onGetResult(errorCode, result);    System.out.println();  }  private String getString(Map<String, String> paramsMap) {    TreeMap tm = new TreeMap(paramsMap);    Iterator i = tm.descendingMap().entrySet().iterator();    StringBuffer buffer = new StringBuffer();    while (i.hasNext()) {      buffer.append(i.next() + "&");    }    buffer.append(AppKey);    return DensityUtil.MD5(buffer.toString());  }  // 得到鍵值對  private String getKeyValues(Map<String, String> paramsMap) {    TreeMap tm = new TreeMap(paramsMap);    Iterator i = tm.descendingKeySet().iterator();    String jsonText = JSON.toJSONString(tm.descendingMap(), true);    return jsonText;  }}