function makeSign(array $params, string $merchantKey): string
{
    unset($params['sign'], $params['sign_type']);
    $params = array_filter($params, static fn($value) => $value !== '');
    ksort($params);

    $pairs = [];
    foreach ($params as $key => $value) {
        $pairs[] = $key . '=' . $value;
    }
    return md5(implode('&', $pairs) . $merchantKey);
}

static String makeSign(Map<String, String> input, String merchantKey) throws Exception {
    TreeMap<String, String> sorted = new TreeMap<>(input);
    sorted.remove("sign");
    sorted.remove("sign_type");
    String source = sorted.entrySet().stream()
        .filter(item -> item.getValue() != null && !item.getValue().isEmpty())
        .map(item -> item.getKey() + "=" + item.getValue())
        .collect(Collectors.joining("&")) + merchantKey;
    byte[] digest = MessageDigest.getInstance("MD5")
        .digest(source.getBytes(StandardCharsets.UTF_8));
    StringBuilder result = new StringBuilder();
    for (byte value : digest) result.append(String.format("%02x", value & 0xff));
    return result.toString();
}

static string MakeSign(IDictionary<string, string> input, string merchantKey)
{
    var source = string.Join("&", input
        .Where(item => item.Key != "sign" && item.Key != "sign_type" && item.Value != "")
        .OrderBy(item => item.Key, StringComparer.Ordinal)
        .Select(item => item.Key + "=" + item.Value)) + merchantKey;
    return Convert.ToHexString(
        MD5.HashData(Encoding.UTF8.GetBytes(source))
    ).ToLowerInvariant();
}

import hashlib

def make_sign(params: dict, merchant_key: str) -> str:
    pairs = [
        f"{name}={value}"
        for name, value in sorted(params.items())
        if name not in ("sign", "sign_type") and value != ""
    ]
    source = "&".join(pairs) + merchant_key
    return hashlib.md5(source.encode("utf-8")).hexdigest()

<?php
// PHP 8 + cURL。请先在服务端配置本页列出的环境变量。
function requiredEnv(string $name): string {
    $value = getenv($name);
    if ($value === false || $value === '') throw new RuntimeException('缺少环境变量: ' . $name);
    return $value;
}
function makeSign(array $params, string $key): string {
    unset($params['sign'], $params['sign_type']);
    $params = array_filter($params, static fn($value) => $value !== '');
    ksort($params, SORT_STRING);
    $pairs = [];
    foreach ($params as $name => $value) $pairs[] = $name . '=' . $value;
    return md5(implode('&', $pairs) . $key);
}
function postForm(string $url, array $params, string $key): array {
    $params['sign'] = makeSign($params, $key);
    $params['sign_type'] = 'MD5';
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => http_build_query($params),
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 15,
        CURLOPT_SSL_VERIFYPEER => true, CURLOPT_SSL_VERIFYHOST => 2,
    ]);
    $body = curl_exec($ch);
    $http = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $error = curl_error($ch);
    curl_close($ch);
    // 超时/非 JSON/HTTP 异常都不能证明下单失败；先按原业务订单号查询。
    if ($body === false) throw new RuntimeException('结果未确认，请先查单: ' . $error);
    if ($http < 200 || $http >= 300) throw new RuntimeException('HTTP ' . $http . ': ' . $body);
    $result = json_decode($body, true, 512, JSON_THROW_ON_ERROR);
    if (!is_array($result) || (int)($result['code'] ?? 0) !== 200) {
        throw new RuntimeException(json_encode($result, JSON_UNESCAPED_UNICODE));
    }
    return $result;
}

$baseUrl = 'https://dy.dyzfzx.com';
$key = requiredEnv('MERCHANT_KEY');
$outTradeNo = requiredEnv('BUSINESS_ORDER_NO'); // 保存后重用，不随重试更换
$params = [
    'pid' => requiredEnv('MERCHANT_PID'),
    'type' => '1',
    'out_trade_no' => $outTradeNo,
    'notify_url' => requiredEnv('NOTIFY_URL'),
    'return_url' => requiredEnv('RETURN_URL'),
    'name' => '业务订单',
    'money' => '100.00',
];
$result = postForm($baseUrl . '/payment/orders', $params, $key);
echo '付款链接: ' . $result['payurl'] . PHP_EOL;
// 将 payurl 交给付款用户；此处不会自动打开或完成付款。
// 演示用同一个业务订单号查询一次；未完成时等待通知或稍后查询。
$query = postForm($baseUrl . '/payment/orders/query', [
    'pid' => $params['pid'],
    'type' => '2', 'order_no' => $outTradeNo,
], $key);
$order = $query['data'];
if ((string)$order['out_trade_no'] !== $outTradeNo) throw new RuntimeException('订单号不一致');
$status = (int)$order['status'];
$states = [0=>'未支付', 1=>'已支付', 2=>'支付超时', 3=>'支付错误', 4=>'订单风控'];
if (!isset($states[$status])) throw new RuntimeException('未知状态，请人工核对');
echo $states[$status] . PHP_EOL;
// 实际记账前还需核对账户、金额等字段，并在事务中幂等保存。

# Python 3：仅使用标准库。先在服务端配置本页列出的环境变量。
import hashlib
import json
import os
import urllib.parse
import urllib.request

def required_env(name):
    value = os.environ.get(name, "")
    if not value:
        raise RuntimeError("缺少环境变量: " + name)
    return value

def make_sign(params, key):
    source = "&".join(f"{k}={v}" for k, v in sorted(params.items())
                      if k not in ("sign", "sign_type") and v != "")
    return hashlib.md5((source + key).encode("utf-8")).hexdigest()

def post_form(url, params, key):
    fields = dict(params)
    fields["sign"] = make_sign(fields, key)
    fields["sign_type"] = "MD5"
    request = urllib.request.Request(url, method="POST",
        data=urllib.parse.urlencode(fields).encode("utf-8"),
        headers={"Content-Type": "application/x-www-form-urlencoded"})
    # HTTPS 验证默认开启。超时/非 JSON/HTTP 异常时先按原业务订单号查单。
    with urllib.request.urlopen(request, timeout=15) as response:
        result = json.load(response)
    if not isinstance(result, dict) or int(result.get("code", 0)) != 200:
        raise RuntimeError(json.dumps(result, ensure_ascii=False))
    return result

base_url = "https://dy.dyzfzx.com"
key = required_env("MERCHANT_KEY")
out_trade_no = required_env("BUSINESS_ORDER_NO")  # 保存后重用
params = {
    "pid": required_env("MERCHANT_PID"),
    "type": "1",
    "out_trade_no": out_trade_no,
    "notify_url": required_env("NOTIFY_URL"),
    "return_url": required_env("RETURN_URL"),
    "name": "业务订单",
    "money": "100.00",
}
result = post_form(base_url + "/payment/orders", params, key)
print("付款链接:", result["payurl"])
# 将 payurl 交给付款用户；此处不会自动打开或完成付款。
# 用同一个业务订单号查询一次；未完成时等待通知或稍后查询。
query = post_form(base_url + "/payment/orders/query", {
    "pid": params["pid"],
    "type": "2", "order_no": out_trade_no,
}, key)
order = query["data"]
if str(order["out_trade_no"]) != out_trade_no:
    raise RuntimeError("订单号不一致")
status = int(order["status"])
states = {0: "未支付", 1: "已支付", 2: "支付超时", 3: "支付错误", 4: "订单风控"}
if status not in states:
    raise RuntimeError("未知状态，请人工核对")
print(states[status])
# 实际记账前还需核对账户、金额等字段，并在事务中幂等保存。

<?php
// PHP 8 + cURL。请先在服务端配置本页列出的环境变量。
function requiredEnv(string $name): string {
    $value = getenv($name);
    if ($value === false || $value === '') throw new RuntimeException('缺少环境变量: ' . $name);
    return $value;
}
function makeSign(array $params, string $key): string {
    unset($params['sign'], $params['sign_type']);
    $params = array_filter($params, static fn($value) => $value !== '');
    ksort($params, SORT_STRING);
    $pairs = [];
    foreach ($params as $name => $value) $pairs[] = $name . '=' . $value;
    return md5(implode('&', $pairs) . $key);
}
function postForm(string $url, array $params, string $key): array {
    $params['sign'] = makeSign($params, $key);
    $params['sign_type'] = 'MD5';
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_POSTFIELDS => http_build_query($params),
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_CONNECTTIMEOUT => 5, CURLOPT_TIMEOUT => 15,
        CURLOPT_SSL_VERIFYPEER => true, CURLOPT_SSL_VERIFYHOST => 2,
    ]);
    $body = curl_exec($ch);
    $http = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $error = curl_error($ch);
    curl_close($ch);
    // 超时/非 JSON/HTTP 异常都不能证明下单失败；先按原业务订单号查询。
    if ($body === false) throw new RuntimeException('结果未确认，请先查单: ' . $error);
    if ($http < 200 || $http >= 300) throw new RuntimeException('HTTP ' . $http . ': ' . $body);
    $result = json_decode($body, true, 512, JSON_THROW_ON_ERROR);
    if (!is_array($result) || (int)($result['code'] ?? 0) !== 200) {
        throw new RuntimeException(json_encode($result, JSON_UNESCAPED_UNICODE));
    }
    return $result;
}

$baseUrl = 'https://dy.dyzfzx.com';
$key = requiredEnv('SUPPLIER_KEY');
$outTradeNo = requiredEnv('BUSINESS_ORDER_NO'); // 保存后重用，不随重试更换
$params = [
    'pid' => requiredEnv('SUPPLIER_PID'),
    'order_code' => 'hx',
    'out_trade_no' => $outTradeNo,
    'target_account' => requiredEnv('TARGET_ACCOUNT'),
    'money' => '100',
    'valid_minutes' => '60',
    'notify_url' => requiredEnv('NOTIFY_URL'),
];
$result = postForm($baseUrl . '/supplier/orders', $params, $key);
// 演示用同一个业务订单号查询一次；未完成时等待通知或稍后查询。
$query = postForm($baseUrl . '/supplier/orders/query', [
    'pid' => $params['pid'],
    'order_code' => 'hx', 'out_trade_no' => $outTradeNo,
], $key);
$order = $query['data'];
if ((string)$order['out_trade_no'] !== $outTradeNo) throw new RuntimeException('订单号不一致');
$status = (int)$order['status'];
$states = [0=>'待处理', 1=>'处理中', 2=>'处理成功', 3=>'处理失败'];
if (!isset($states[$status])) throw new RuntimeException('未知状态，请人工核对');
echo $states[$status] . PHP_EOL;
// 实际记账前还需核对账户、金额等字段，并在事务中幂等保存。

# Python 3：仅使用标准库。先在服务端配置本页列出的环境变量。
import hashlib
import json
import os
import urllib.parse
import urllib.request

def required_env(name):
    value = os.environ.get(name, "")
    if not value:
        raise RuntimeError("缺少环境变量: " + name)
    return value

def make_sign(params, key):
    source = "&".join(f"{k}={v}" for k, v in sorted(params.items())
                      if k not in ("sign", "sign_type") and v != "")
    return hashlib.md5((source + key).encode("utf-8")).hexdigest()

def post_form(url, params, key):
    fields = dict(params)
    fields["sign"] = make_sign(fields, key)
    fields["sign_type"] = "MD5"
    request = urllib.request.Request(url, method="POST",
        data=urllib.parse.urlencode(fields).encode("utf-8"),
        headers={"Content-Type": "application/x-www-form-urlencoded"})
    # HTTPS 验证默认开启。超时/非 JSON/HTTP 异常时先按原业务订单号查单。
    with urllib.request.urlopen(request, timeout=15) as response:
        result = json.load(response)
    if not isinstance(result, dict) or int(result.get("code", 0)) != 200:
        raise RuntimeError(json.dumps(result, ensure_ascii=False))
    return result

base_url = "https://dy.dyzfzx.com"
key = required_env("SUPPLIER_KEY")
out_trade_no = required_env("BUSINESS_ORDER_NO")  # 保存后重用
params = {
    "pid": required_env("SUPPLIER_PID"),
    "order_code": "hx",
    "out_trade_no": out_trade_no,
    "target_account": required_env("TARGET_ACCOUNT"),
    "money": "100",
    "valid_minutes": "60",
    "notify_url": required_env("NOTIFY_URL"),
}
result = post_form(base_url + "/supplier/orders", params, key)
# 用同一个业务订单号查询一次；未完成时等待通知或稍后查询。
query = post_form(base_url + "/supplier/orders/query", {
    "pid": params["pid"],
    "order_code": "hx", "out_trade_no": out_trade_no,
}, key)
order = query["data"]
if str(order["out_trade_no"]) != out_trade_no:
    raise RuntimeError("订单号不一致")
status = int(order["status"])
states = {0: "待处理", 1: "处理中", 2: "处理成功", 3: "处理失败"}
if status not in states:
    raise RuntimeError("未知状态，请人工核对")
print(states[status])
# 实际记账前还需核对账户、金额等字段，并在事务中幂等保存。