mirror of
https://github.com/pierre42100/ComunicAPI
synced 2025-10-31 10:14:51 +00:00
88 lines
2.1 KiB
PHP
88 lines
2.1 KiB
PHP
<?php
|
|
/**
|
|
* Comunic Rest API
|
|
*
|
|
* Serves the data for users
|
|
*
|
|
* @author Pierre HUBERT
|
|
*/
|
|
|
|
/**
|
|
* Page initiator
|
|
*/
|
|
include(__DIR__."/init.php");
|
|
|
|
//Include RestControllers
|
|
foreach(glob(PROJECT_PATH."RestControllers/*.php") as $restControllerFile){
|
|
require_once $restControllerFile;
|
|
}
|
|
|
|
//Include RestServer library
|
|
require PROJECT_PATH."3rdparty/RestServer/RestServer.php";
|
|
|
|
//By default return format is json
|
|
if(!isset($_GET["format"]))
|
|
$_GET['format'] = "json";
|
|
|
|
//Specify we are on Comunic API Server
|
|
header("Technology: Official Comunic API Server");
|
|
|
|
//Check client tokens
|
|
if(!$cs->tokens->checkClientRequestTokens())
|
|
Rest_fatal_error(401, "Please check your client tokens!");
|
|
|
|
//Check for remote requests limit
|
|
if(defined("APIServiceDomain")){
|
|
|
|
//First, limit requests
|
|
header("Access-Control-Allow-Origin: http://".APIServiceDomain.", https://".APIServiceDomain);
|
|
|
|
//Then check for referer
|
|
if(!isset($_SERVER["HTTP_REFERER"]))
|
|
Rest_fatal_error(401, "Access from direct requests denied with this client token !");
|
|
|
|
//Check the referer
|
|
if(get_url_domain($_SERVER["HTTP_REFERER"]) !== APIServiceDomain)
|
|
Rest_fatal_error(401, "Access denied from this domain with this client token !");
|
|
}
|
|
else {
|
|
//Allow remote requests from anywhere
|
|
header("Access-Control-Allow-Origin: *");
|
|
}
|
|
|
|
//Check if login tokens where specified
|
|
if(isset($_POST['userToken1']) AND isset($_POST['userToken2'])){
|
|
//Try to login user
|
|
$userID = $cs->components->user->getUserIDfromToken(APIServiceID, array(
|
|
$_POST['userToken1'],
|
|
$_POST['userToken2']
|
|
));
|
|
|
|
if($userID < 1){
|
|
Rest_fatal_error(401, "Please check your login tokens!");
|
|
}
|
|
|
|
//Else save userID
|
|
define("userID", $userID);
|
|
}
|
|
else {
|
|
//Defined userID is number 0
|
|
define("userID", 0);
|
|
}
|
|
|
|
/**
|
|
* Handle Rest requests
|
|
*/
|
|
$server = new \Jacwright\RestServer\RestServer($cs->config->get("site_mode"));
|
|
|
|
//Include controllers
|
|
foreach(get_included_files() as $filePath){
|
|
if(preg_match("<RestControllers>", $filePath)){
|
|
$className = strstr($filePath, "RestControllers/");
|
|
$className = str_replace(array("RestControllers/", ".php"), "", $className);
|
|
$server->addClass($className);
|
|
}
|
|
}
|
|
|
|
//Hanlde
|
|
$server->handle(); |