php - Facebook 信用回调检测请求

Question

有没有办法检测回调请求是否来自 facebook，因为看起来请求不是 ajax。

Answer 1

来自：http: //developers.facebook.com/docs/credits/callback/

您可以通过解码 signed_request 来验证 Facebook 是否正在调用回调。

{
   "signed_request":"PfjakldsFWWs...",
   "buyer":"221159",
   "receiver":"221159",
   "order_id":"9006136047935",
   "order_info":""fbhat"",
   "method":"payments_get_items"
}