mirror of
https://github.com/hotspotbilling/phpnuxbill.git
synced 2024-09-21 23:36:52 +08:00
108 lines
2.7 KiB
PHP
108 lines
2.7 KiB
PHP
<?php
|
|
|
|
/**
|
|
* PHP Mikrotik Billing (https://github.com/hotspotbilling/phpnuxbill/)
|
|
* by https://t.me/ibnux
|
|
*
|
|
* This File is for API Access
|
|
**/
|
|
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === "OPTIONS" || $_SERVER['REQUEST_METHOD'] === "HEAD") {
|
|
header('Access-Control-Allow-Origin: *');
|
|
header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization");
|
|
header("HTTP/1.1 200 OK");
|
|
die();
|
|
}
|
|
|
|
include "../init.php";
|
|
|
|
$isApi = true;
|
|
|
|
// Dummy Class
|
|
$ui = new class($key)
|
|
{
|
|
var $assign = [];
|
|
function display($key)
|
|
{
|
|
}
|
|
function assign($key, $value)
|
|
{
|
|
$this->assign[$key] = $value;
|
|
}
|
|
|
|
function get($key, )
|
|
{
|
|
if(isset($this->assign[$key])){
|
|
return $this->assign[$key];
|
|
}
|
|
return '';
|
|
}
|
|
};
|
|
|
|
$req = _get('r');
|
|
# a/c.id.time.md5
|
|
# md5(a/c.id.time.$api_secret)
|
|
$token = _get('token');
|
|
$routes = explode('/', $req);
|
|
$handler = $routes[0];
|
|
|
|
if(empty($token)){
|
|
showResult(false, Lang::T("Token is invalid"));
|
|
}
|
|
|
|
if($token == $config['api_key']){
|
|
$admin = ORM::for_table('tbl_users')->where('user_type','SuperAdmin')->find_one($id);
|
|
if(empty($admin)){
|
|
$admin = ORM::for_table('tbl_users')->where('user_type','Admin')->find_one($id);
|
|
if(empty($admin)){
|
|
showResult(false, Lang::T("Token is invalid"));
|
|
}
|
|
}
|
|
}else{
|
|
# validate token
|
|
list($tipe, $uid, $time, $md5) = explode('.', $token);
|
|
if ($md5 != md5($uid . '.' . $time . '.' . $api_secret)) {
|
|
showResult(false, Lang::T("Token is invalid"));
|
|
}
|
|
|
|
#cek token expiration
|
|
if ($time != 0 && time() > $time) {
|
|
showResult(false, Lang::T("Token Expired"), [], ['login' => true]);
|
|
}
|
|
|
|
if($tipe=='a'){
|
|
$_SESSION['aid'] = $uid;
|
|
}else if($tipe=='c'){
|
|
$_SESSION['uid'] = $uid;
|
|
}else{
|
|
showResult(false, Lang::T("Unknown Token"), [], ['login' => true]);
|
|
}
|
|
}
|
|
|
|
if(!isset($handler) || empty($handler)){
|
|
showResult(true, Lang::T("Token is valid"));
|
|
}
|
|
|
|
|
|
if($handler == 'isValid'){
|
|
showResult(true, Lang::T("Token is valid"));
|
|
}
|
|
|
|
function showResult($success, $message = '', $result = [], $meta = [])
|
|
{
|
|
header("Content-Type: Application/json; charset=utf-8");
|
|
die(json_encode(array('success' => $success, 'message' => $message, 'result' => $result, 'meta' => $meta)));
|
|
}
|
|
|
|
try {
|
|
$sys_render = File::pathFixer($root_path.'system/controllers/' . $handler . '.php');
|
|
if (file_exists($sys_render)) {
|
|
include($sys_render);
|
|
}else{
|
|
showResult(false, Lang::T('Command not found'));
|
|
}
|
|
} catch (Exception $e) {
|
|
showResult(false, $e->getMessage());
|
|
}
|