$order_sn = trim($_GET['out_trade_no']);

$order_sn = trim($_GET['out_trade_no']);$order_sn = htmlspecialchars($order_sn);