api.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390
  1. <?php
  2. require_once('php/include.php');
  3. // TODO - Add API handling.
  4. $method = $_SERVER['REQUEST_METHOD'];
  5. $ret = array();
  6. if(isset($_GET['type'])){
  7. if(isset($_GET['id'])){
  8. $id = $_GET['id'];
  9. switch($_GET['type']){
  10. case 'user':
  11. back(true);
  12. $ret['template'] = array(
  13. 'type'=>'pages',
  14. 'name'=>'user'
  15. );
  16. if($user = userObj($id)){
  17. $context = array(
  18. 'name'=>$user['name'],
  19. 'email'=>$user['email']
  20. );
  21. if($LOGGEDIN){
  22. $context['key'] = true;
  23. $context['user'] = userObj($_SESSION['username']);
  24. };
  25. $ret['context'] = $context;
  26. }else{
  27. $ret['state'] = array(
  28. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  29. );
  30. }
  31. retj($ret,'User - '.$context['name']);
  32. break;
  33. case 'group':
  34. back(true);
  35. // TODO - handle group requests
  36. if(false){
  37. // TODO
  38. }else{
  39. $ret['state'] = array(
  40. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  41. );
  42. }
  43. retj($ret);
  44. break;
  45. case 'issue':
  46. back(true);
  47. $ret['template'] = array(
  48. 'type'=>'pages',
  49. 'name'=>'issue'
  50. );
  51. if($context = issueObj($id)){
  52. $context['user'] = userObj($context['user']);
  53. if($LOGGEDIN){
  54. $context['key'] = true;
  55. $context['user'] = userObj($_SESSION['username']);
  56. };
  57. $ret['context'] = $context;
  58. }else{
  59. $ret['state'] = array(
  60. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  61. );
  62. }
  63. retj($ret,'Issue #'.$id. ' - '.$context['title']);
  64. break;
  65. case 'scrum':
  66. back(true);
  67. // TODO - handle scrum requests
  68. if(false){
  69. // TODO
  70. }else{
  71. $ret['state'] = array(
  72. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  73. );
  74. }
  75. retj($ret);
  76. break;
  77. case 'project':
  78. back(true);
  79. $ret['template'] = array(
  80. 'type'=>'pages',
  81. 'name'=>'project'
  82. );
  83. if($context = projectObj($id)){
  84. $context['user'] = userObj($context['user']);
  85. if($LOGGEDIN){
  86. $context['key'] = true;
  87. $context['user'] = userObj($_SESSION['username']);
  88. };
  89. $ret['context'] = $context;
  90. }else{
  91. $ret['state'] = array(
  92. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  93. );
  94. }
  95. retj($ret,'Project - '.$context['title']);
  96. break;
  97. case 'message':
  98. // TODO - handle message requests
  99. $context = array();
  100. if(false){
  101. // TODO
  102. }else{
  103. $ret['state'] = array(
  104. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  105. );
  106. }
  107. retj($ret,'Project - '.$context['title']);
  108. break;
  109. case 'admin':
  110. back(true);
  111. // TODO - handle admin requests
  112. if(false){
  113. // TODO
  114. }else{
  115. $ret['state'] = array(
  116. 'url'=>isset($_GET['back'])?$_GET['back']:'page-index'
  117. );
  118. }
  119. retj($ret);
  120. break;
  121. case 'page':
  122. $title = $id;
  123. if(file_exists(PATH_DATA.'pages/'.$id.'.template')){
  124. $context = array();
  125. $ret['template'] = array(
  126. 'type'=>'pages',
  127. 'name'=>$id
  128. );
  129. if($LOGGEDIN){
  130. $context['key'] = true;
  131. $context['user'] = userObj($_SESSION['username']);
  132. };
  133. if(file_exists(PATH_DATA.'pages/'.$id.'.options')){
  134. $options = objectToarray(json_decode(file_get_contents(PATH_DATA.'pages/'.$id.'.options'),true));
  135. if(isset($options['secure'])&&$options['secure']&&!$LOGGEDIN){
  136. back(true);
  137. }
  138. if(isset($options['title'])){
  139. $title = $options['title'];
  140. }
  141. if(isset($options['context'])){
  142. foreach($options['context'] as $key){
  143. switch($key){
  144. case 'users':
  145. if($res = query("SELECT name FROM `users`;")){
  146. $context['users'] = fetch_all($res,MYSQLI_ASSOC);
  147. }
  148. break;
  149. case 'projects':
  150. if($res = query("SELECT p.title,p.id,p.description,u.name as user FROM `projects` p JOIN `users` u ON u.id = p.u_id")){
  151. $context['projects'] = fetch_all($res,MYSQLI_ASSOC);
  152. foreach($context['projects'] as $key => $project){
  153. $context['projects'][$key]['user'] = userObj($project['user']);
  154. }
  155. }
  156. break;
  157. case 'messages':
  158. if($LOGGEDIN){
  159. $context['messages'] = messages($context['user']['id'],'user');
  160. }else{
  161. $context['messages'] = array();
  162. }
  163. break;
  164. case 'issues':
  165. if($res = query("SELECT i.id,i.title,i.description,u.name as user FROM `issues` i JOIN `users` u ON u.id = i.u_id")){
  166. $context['issues'] = fetch_all($res,MYSQLI_ASSOC);
  167. foreach($context['issues'] as $key => $issue){
  168. $context['issues'][$key]['user'] = userObj($issue['user']);
  169. }
  170. }
  171. break;
  172. }
  173. }
  174. }
  175. if(isset($options['actions'])){
  176. foreach($options['actions'] as $key){
  177. switch($key){
  178. case 'pm_mark_read':
  179. query("UPDATE `users` SET last_pm_check=CURRENT_TIMESTAMP WHERE id='%d'; ",array(userId($_SESSION['username'])));
  180. break;
  181. }
  182. }
  183. }
  184. }
  185. $ret['context'] = $context;
  186. }else{
  187. $ret['error'] = 'That page does not exist';
  188. }
  189. retj($ret,$title);
  190. break;
  191. case 'manifest':
  192. case 'pages':
  193. if(isset($_GET['id'])){
  194. if($_GET['id'] != 'emails'){
  195. $manifest = array();
  196. $files = array_diff(scandir(PATH_DATA.'/'.$_GET['id']),array('..', '.','.htaccess','version'));
  197. foreach($files as $k => $file){
  198. if(pathinfo(PATH_DATA.'/'.$_GET['id'].'/'.$file,PATHINFO_EXTENSION) == 'template'){
  199. array_push($manifest,basename($file,'.template'));
  200. }
  201. }
  202. retj(array(
  203. 'manifest'=>$manifest,
  204. 'type'=>$_GET['id']
  205. ));
  206. }else{
  207. retj(array(
  208. 'error'=>'Cannot return that manifest'
  209. ));
  210. }
  211. }else{
  212. retj(array(
  213. 'error'=>'Manifest ID not defined'
  214. ));
  215. }
  216. break;
  217. break;
  218. case 'template':
  219. if(isset($_GET['name'])){
  220. if($_GET['id'] != 'emails'){
  221. retj(array(
  222. 'template'=>file_get_contents(PATH_DATA.'/'.$_GET['id'].'/'.$_GET['name'].'.template'),
  223. 'name'=>$_GET['name'],
  224. 'type'=>$_GET['id']
  225. ));
  226. }else{
  227. retj(array(
  228. 'error'=>'Cannot return that type of template'
  229. ));
  230. }
  231. }else{
  232. retj(array(
  233. 'error'=>'Template name missing'
  234. ));
  235. }
  236. break;
  237. case 'action':
  238. switch($id){
  239. case 'login':
  240. $ret['state'] = array(
  241. 'data'=>array(
  242. 'type'=>'page',
  243. 'id'=>'login',
  244. )
  245. );
  246. if(isset($_GET['username'])&&isset($_GET['password'])){
  247. $key = login($_GET['username'],$_GET['password']);
  248. if($key){
  249. $_SESSION['username'] = $_GET['username'];
  250. }else{
  251. $ret['error'] = "Login failed. Username or Password didn't match.";
  252. }
  253. }else{
  254. $ret['error'] = "Please provide a valid username and password.";
  255. }
  256. retj($ret,$id);
  257. break;
  258. case 'register':
  259. $ret['state'] = array(
  260. 'data'=>array(
  261. 'type'=>'page',
  262. 'id'=>'register'
  263. )
  264. );
  265. if(is_valid('username')&&is_valid('password')&&is_valid('password1')&&is_valid('email')&&is_valid('captcha')){
  266. if($_GET['password']==$_GET['password1']){
  267. if(compare_captcha($_GET['captcha'])){
  268. if(addUser($_GET['username'],$_GET['password'],$_GET['email'])){
  269. $key = login($_GET['username'],$_GET['password']);
  270. $_SESSION['username'] = $_GET['username'];
  271. sendMail('welcome','Welcome!',$_GET['email'],get('email'),array($_GET['username'],$_GET['password'],get('email')));
  272. }else{
  273. $ret['error'] = "Could not add user. ".$mysqli->error;
  274. }
  275. }else{
  276. $ret['error'] = "Captcha did not match.";
  277. }
  278. }else{
  279. $ret['error'] = "Passwords didn't match.";
  280. }
  281. }else{
  282. $ret['error'] = "Please fill in all the fields.";
  283. }
  284. retj($ret,$id);
  285. break;
  286. case 'project':
  287. back(true);
  288. $ret['state'] = array(
  289. 'data'=>array(
  290. 'type'=>'page',
  291. 'id'=>$id,
  292. )
  293. );
  294. if(isset($_GET['pid'])){
  295. $ret['error'] = 'Invalid Action';
  296. }elseif(is_valid('title')&&is_valid('description')){
  297. if(!newProject($_GET['title'],$_GET['description'])){
  298. $ret['error'] = 'Unable to create project.';
  299. }
  300. }else{
  301. $ret['error'] = 'Fill in all the details.';
  302. }
  303. retj($ret,$id);
  304. break;
  305. case 'message':
  306. back(true);
  307. if(isset($_GET['to'])&&isset($_GET['message'])){
  308. if($uid = userId($_GET['to'])){
  309. if(!personal_message($uid,$_GET['message'])){
  310. $ret['error'] = 'Could not send message';
  311. }
  312. }else{
  313. $ret['error'] = "That user doesn't exist";
  314. }
  315. }else{
  316. $ret['error'] = 'Empty details';
  317. }
  318. retj($ret,$id);
  319. break;
  320. case 'notifications':
  321. if($LOGGEDIN){
  322. if($res = query("SELECT count(m.id) as notifications,UNIX_TIMESTAMP(max(m.timestamp)) as timestamp FROM `messages` m JOIN `users` u ON u.id = m.to_id WHERE u.id = %d AND u.last_pm_check < m.timestamp;",array(userId($_SESSION['username'])))){
  323. $res = $res->fetch_assoc();
  324. $ret['count'] = $res['notifications'];
  325. $ret['timestamp'] = $res['timestamp'];
  326. }
  327. }
  328. retj($ret,$_GET['title']);
  329. break;
  330. case 'comment':
  331. if(isset($_GET['comment_type'])&&isset($_GET['comment_id'])&&isset($_GET['message'])){
  332. $cid = $_GET['comment_id'];
  333. $ret = array(
  334. 'state'=>stateObj($_GET['comment_type'],$cid)
  335. );
  336. switch($_GET['comment_type']){
  337. case 'project':
  338. if(!function_exists('project_comment')){
  339. $ret['error'] = "fn doesn't exist!";
  340. }
  341. if(!project_comment($cid,$_GET['message'])){
  342. $ret = array(
  343. 'error'=>'Could not comment on project'
  344. );
  345. }
  346. break;
  347. case 'issue':
  348. if(!function_exists('issue_comment')){
  349. $ret['error'] = "fn doesn't exist!";
  350. }
  351. if(!issue_comment($cid,$_GET['message'])){
  352. $ret = array(
  353. 'error'=>'Could not comment on project'
  354. );
  355. }
  356. break;
  357. default:
  358. $ret['error'] = 'Comment type not implemented';
  359. }
  360. }else{
  361. $ret['error'] = 'Missing comment paremeters';
  362. $ret['state'] = array(
  363. 'title'=>'error'
  364. );
  365. }
  366. retj($ret,$ret['state']['title']);
  367. break;
  368. default:
  369. retj(array(
  370. 'error'=>'Invalid action.'
  371. ));
  372. }
  373. break;
  374. default:
  375. retj(array(
  376. 'error'=>'Invalid type.'
  377. ));
  378. }
  379. }else{
  380. retj(array(
  381. 'error'=>'ID missing.'
  382. ));
  383. }
  384. }else{
  385. $_GET['type'] = '';
  386. retj(array(
  387. 'error'=>'Type missing.'
  388. ));
  389. }
  390. ?>