96 lines
2.2 KiB
PHP
96 lines
2.2 KiB
PHP
<?php
|
|
include_once '../controller/DatabaseController.php';
|
|
include_once '../controller/DataController.php';
|
|
include_once __DIR__ . '/../modules/Mail.php';
|
|
|
|
header("Content-Type: application/json");
|
|
header("Access-Control-Allow-Origin: *");
|
|
header("Access-Control-Allow-Headers: Authorization, Function, Content-Type");
|
|
header("Access-Control-Allow-Methods: POST, GET, OPTIONS");
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
|
|
http_response_code(200);
|
|
exit();
|
|
}
|
|
|
|
// $validTokens = [
|
|
// "15a437d128c918633e57dc7d18118a073b807644f21731ed5a7ebcf3eca9e242",
|
|
// ];
|
|
$validTokens = DatabaseShow(
|
|
"API_Credentials",
|
|
"TOKEN"
|
|
);
|
|
|
|
$validTokens = array_column($validTokens, 'TOKEN');
|
|
|
|
$headers = getallheaders();
|
|
$token = $headers['Authorization'] ?? $headers['authorization'] ?? $_SERVER['HTTP_AUTHORIZATION'] ?? '';
|
|
$function = $headers['Function'] ?? $headers['function'] ?? '';
|
|
|
|
if (!in_array($token, $validTokens)) {
|
|
http_response_code(401);
|
|
$error = json_encode([
|
|
"error" => "Unauthorized",
|
|
"debug_received_token" => $token,
|
|
"debug_all_headers" => $headers
|
|
]);
|
|
|
|
DatabaseInsert(
|
|
"API_LOGS",
|
|
"CLIENT_IP, TOKEN, API, FUNKTION, JSON",
|
|
(new getSpecificData())->getClientIP(),
|
|
$token,
|
|
(new getSpecificData())->getRequestURL(),
|
|
$function,
|
|
$error
|
|
);
|
|
|
|
errorMail(
|
|
"API Login failed",
|
|
$error,
|
|
true,
|
|
);
|
|
|
|
echo $error;
|
|
exit;
|
|
}
|
|
|
|
if (in_array($token, $validTokens)) {
|
|
DatabaseInsert(
|
|
"API_LOGS",
|
|
"CLIENT_IP, TOKEN, API, FUNKTION",
|
|
(new getSpecificData())->getClientIP(),
|
|
$token,
|
|
(new getSpecificData())->getRequestURL(),
|
|
$function
|
|
);
|
|
|
|
if ($function === "IPs") {
|
|
$data = DatabaseShow(
|
|
"logs",
|
|
"CLIENT_IP"
|
|
);
|
|
}
|
|
|
|
if ($function === "Ueberstunden") {
|
|
$data = DatabaseShow(
|
|
"Ueberstunden",
|
|
"MINUTEN"
|
|
);
|
|
}
|
|
|
|
if ($function === "Berichte") {
|
|
$data = DatabaseShowWithFK(
|
|
"Berufsschulberichte",
|
|
$Berufsschulberichte,
|
|
);
|
|
}
|
|
|
|
echo json_encode(
|
|
[
|
|
"success" => true,
|
|
"data" => $data,
|
|
]
|
|
);
|
|
exit;
|
|
} |