api-functions.php 38 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177
  1. <?php /** @noinspection SqlResolve */
  2. /** @noinspection SqlResolve */
  3. /** @noinspection SqlResolve */
  4. /** @noinspection SqlResolve */
  5. /** @noinspection SyntaxError */
  6. function login($array)
  7. {
  8. // Grab username and Password from login form
  9. $username = $password = $oAuth = $oAuthType = '';
  10. foreach ($array['data'] as $items) {
  11. foreach ($items as $key => $value) {
  12. if ($key == 'name') {
  13. $newKey = $value;
  14. }
  15. if ($key == 'value') {
  16. $newValue = $value;
  17. }
  18. if (isset($newKey) && isset($newValue)) {
  19. $$newKey = $newValue;
  20. }
  21. }
  22. }
  23. $username = (strpos($GLOBALS['authBackend'], 'emby') !== false) ? $username : strtolower($username);
  24. $days = (isset($remember)) ? $GLOBALS['rememberMeDays'] : 1;
  25. $oAuth = (isset($oAuth)) ? $oAuth : false;
  26. try {
  27. $database = new Dibi\Connection([
  28. 'driver' => 'sqlite3',
  29. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  30. ]);
  31. $authSuccess = false;
  32. $function = 'plugin_auth_' . $GLOBALS['authBackend'];
  33. if (!$oAuth) {
  34. $result = $database->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $username, $username);
  35. switch ($GLOBALS['authType']) {
  36. case 'external':
  37. if (function_exists($function)) {
  38. $authSuccess = $function($username, $password);
  39. }
  40. break;
  41. /** @noinspection PhpMissingBreakStatementInspection */
  42. case 'both':
  43. if (function_exists($function)) {
  44. $authSuccess = $function($username, $password);
  45. }
  46. // no break
  47. default: // Internal
  48. if (!$authSuccess) {
  49. // perform the internal authentication step
  50. if (password_verify($password, $result['password'])) {
  51. $authSuccess = true;
  52. }
  53. }
  54. }
  55. } else {
  56. // Has oAuth Token!
  57. switch ($oAuthType) {
  58. case 'plex':
  59. if ($GLOBALS['plexoAuth']) {
  60. $tokenInfo = checkPlexToken($oAuth);
  61. if ($tokenInfo) {
  62. $authSuccess = array(
  63. 'username' => $tokenInfo['user']['username'],
  64. 'email' => $tokenInfo['user']['email'],
  65. 'image' => $tokenInfo['user']['thumb'],
  66. 'token' => $tokenInfo['user']['authToken']
  67. );
  68. coookie('set', 'oAuth', 'true', $GLOBALS['rememberMeDays']);
  69. $authSuccess = ((!empty($GLOBALS['plexAdmin']) && strtolower($GLOBALS['plexAdmin']) == strtolower($tokenInfo['user']['username'])) || (!empty($GLOBALS['plexAdmin']) && strtolower($GLOBALS['plexAdmin']) == strtolower($tokenInfo['user']['email'])) || checkPlexUser($tokenInfo['user']['username'])) ? $authSuccess : false;
  70. }
  71. }
  72. break;
  73. default:
  74. return 'error';
  75. break;
  76. }
  77. $result = ($authSuccess) ? $database->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $authSuccess['username'], $authSuccess['email']) : '';
  78. }
  79. if ($authSuccess) {
  80. // Make sure user exists in database
  81. $userExists = false;
  82. $passwordMatches = ($oAuth) ? true : false;
  83. $token = (is_array($authSuccess) && isset($authSuccess['token']) ? $authSuccess['token'] : '');
  84. if ($result['username']) {
  85. $userExists = true;
  86. $username = $result['username'];
  87. if ($passwordMatches == false) {
  88. $passwordMatches = (password_verify($password, $result['password'])) ? true : false;
  89. }
  90. }
  91. if ($userExists) {
  92. //does org password need to be updated
  93. if (!$passwordMatches) {
  94. $database->query('
  95. UPDATE users SET', [
  96. 'password' => password_hash($password, PASSWORD_BCRYPT)
  97. ], '
  98. WHERE id=?', $result['id']);
  99. writeLog('success', 'Login Function - User Password updated from backend', $username);
  100. }
  101. if ($token !== '') {
  102. if ($token !== $result['plex_token']) {
  103. $database->query('
  104. UPDATE users SET', [
  105. 'plex_token' => $token
  106. ], '
  107. WHERE id=?', $result['id']);
  108. writeLog('success', 'Login Function - User Plex Token updated from backend', $username);
  109. }
  110. }
  111. // 2FA might go here
  112. if ($result['auth_service'] !== 'internal' && strpos($result['auth_service'], '::') !== false) {
  113. $TFA = explode('::', $result['auth_service']);
  114. // Is code with login info?
  115. if ($tfaCode == '') {
  116. return '2FA';
  117. } else {
  118. if (!verify2FA($TFA[1], $tfaCode, $TFA[0])) {
  119. writeLoginLog($username, 'error');
  120. writeLog('error', 'Login Function - Wrong 2FA', $username);
  121. return '2FA-incorrect';
  122. }
  123. }
  124. }
  125. // End 2FA
  126. // authentication passed - 1) mark active and update token
  127. if (createToken($result['username'], $result['email'], $result['image'], $result['group'], $result['group_id'], $GLOBALS['organizrHash'], $days)) {
  128. writeLoginLog($username, 'success');
  129. writeLog('success', 'Login Function - A User has logged in', $username);
  130. $ssoUser = (empty($result['email'])) ? $result['username'] : $result['email'];
  131. ssoCheck($ssoUser, $password, $token); //need to work on this
  132. return true;
  133. } else {
  134. return 'Token Creation Error';
  135. }
  136. } else {
  137. // Create User
  138. //ssoCheck($username, $password, $token);
  139. return authRegister((is_array($authSuccess) && isset($authSuccess['username']) ? $authSuccess['username'] : $username), $password, defaultUserGroup(), (is_array($authSuccess) && isset($authSuccess['email']) ? $authSuccess['email'] : ''), $token);
  140. }
  141. } else {
  142. // authentication failed
  143. writeLoginLog($username, 'error');
  144. writeLog('error', 'Login Function - Wrong Password', $username);
  145. return 'mismatch';
  146. }
  147. } catch (Dibi\Exception $e) {
  148. return $e;
  149. }
  150. }
  151. function createDB($path, $filename)
  152. {
  153. try {
  154. if (!file_exists($path)) {
  155. mkdir($path, 0777, true);
  156. }
  157. $createDB = new Dibi\Connection([
  158. 'driver' => 'sqlite3',
  159. 'database' => $path . $filename,
  160. ]);
  161. // Create Users
  162. $createDB->query('CREATE TABLE `users` (
  163. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  164. `username` TEXT UNIQUE,
  165. `password` TEXT,
  166. `email` TEXT,
  167. `plex_token` TEXT,
  168. `group` TEXT,
  169. `group_id` INTEGER,
  170. `locked` INTEGER,
  171. `image` TEXT,
  172. `register_date` DATE,
  173. `auth_service` TEXT DEFAULT \'internal\'
  174. );');
  175. // Create Tokens
  176. $createDB->query('CREATE TABLE `chatroom` (
  177. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  178. `username` TEXT,
  179. `gravatar` TEXT,
  180. `uid` TEXT,
  181. `date` DATE,
  182. `ip` TEXT,
  183. `message` TEXT
  184. );');
  185. $createDB->query('CREATE TABLE `tokens` (
  186. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  187. `token` TEXT UNIQUE,
  188. `user_id` INTEGER,
  189. `browser` TEXT,
  190. `ip` TEXT,
  191. `created` DATE,
  192. `expires` DATE
  193. );');
  194. $createDB->query('CREATE TABLE `groups` (
  195. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  196. `group` TEXT UNIQUE,
  197. `group_id` INTEGER,
  198. `image` TEXT,
  199. `default` INTEGER
  200. );');
  201. $createDB->query('CREATE TABLE `categories` (
  202. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  203. `order` INTEGER,
  204. `category` TEXT UNIQUE,
  205. `category_id` INTEGER,
  206. `image` TEXT,
  207. `default` INTEGER
  208. );');
  209. // Create Tabs
  210. $createDB->query('CREATE TABLE `tabs` (
  211. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  212. `order` INTEGER,
  213. `category_id` INTEGER,
  214. `name` TEXT,
  215. `url` TEXT,
  216. `url_local` TEXT,
  217. `default` INTEGER,
  218. `enabled` INTEGER,
  219. `group_id` INTEGER,
  220. `image` TEXT,
  221. `type` INTEGER,
  222. `splash` INTEGER,
  223. `ping` INTEGER,
  224. `ping_url` TEXT,
  225. `timeout` INTEGER,
  226. `timeout_ms` INTEGER,
  227. `preload` INTEGER
  228. );');
  229. // Create Options
  230. $createDB->query('CREATE TABLE `options` (
  231. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  232. `name` TEXT UNIQUE,
  233. `value` TEXT
  234. );');
  235. // Create Invites
  236. $createDB->query('CREATE TABLE `invites` (
  237. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  238. `code` TEXT UNIQUE,
  239. `date` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
  240. `email` TEXT,
  241. `username` TEXT,
  242. `dateused` TIMESTAMP,
  243. `usedby` TEXT,
  244. `ip` TEXT,
  245. `valid` TEXT,
  246. `type` TEXT
  247. );');
  248. return true;
  249. } catch (Dibi\Exception $e) {
  250. return false;
  251. }
  252. }
  253. // Upgrade Database
  254. function updateDB($oldVerNum = false)
  255. {
  256. $tempLock = $GLOBALS['dbLocation'] . 'DBLOCK.txt';
  257. if (!file_exists($tempLock)) {
  258. touch($tempLock);
  259. // Create Temp DB First
  260. $migrationDB = 'tempMigration.db';
  261. $pathDigest = pathinfo($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  262. if (file_exists($GLOBALS['dbLocation'] . $migrationDB)) {
  263. unlink($GLOBALS['dbLocation'] . $migrationDB);
  264. }
  265. $backupDB = $pathDigest['dirname'] . '/' . $pathDigest['filename'] . '[' . date('Y-m-d_H-i-s') . ']' . ($oldVerNum ? '[' . $oldVerNum . ']' : '') . '.bak.db';
  266. copy($GLOBALS['dbLocation'] . $GLOBALS['dbName'], $backupDB);
  267. $success = createDB($GLOBALS['dbLocation'], $migrationDB);
  268. if ($success) {
  269. try {
  270. $connectOldDB = new Dibi\Connection([
  271. 'driver' => 'sqlite3',
  272. 'database' => $backupDB,
  273. ]);
  274. $connectNewDB = new Dibi\Connection([
  275. 'driver' => 'sqlite3',
  276. 'database' => $GLOBALS['dbLocation'] . $migrationDB,
  277. ]);
  278. $tables = $connectOldDB->fetchAll('SELECT name FROM sqlite_master WHERE type="table"');
  279. foreach ($tables as $table) {
  280. $data = $connectOldDB->fetchAll('SELECT * FROM ' . $table['name']);
  281. writeLog('success', 'Update Function - Grabbed Table data for Table: ' . $table['name'], 'Database');
  282. foreach ($data as $row) {
  283. $connectNewDB->query('INSERT into ' . $table['name'], $row);
  284. }
  285. writeLog('success', 'Update Function - Wrote Table data for Table: ' . $table['name'], 'Database');
  286. }
  287. writeLog('success', 'Update Function - All Table data converted - Starting Movement', 'Database');
  288. $connectOldDB->disconnect();
  289. $connectNewDB->disconnect();
  290. // Remove Current Database
  291. if (file_exists($GLOBALS['dbLocation'] . $migrationDB)) {
  292. $oldFileSize = filesize($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  293. $newFileSize = filesize($GLOBALS['dbLocation'] . $migrationDB);
  294. if ($newFileSize > 0) {
  295. writeLog('success', 'Update Function - Table Size of new DB ok..', 'Database');
  296. @unlink($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  297. copy($GLOBALS['dbLocation'] . $migrationDB, $GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  298. @unlink($GLOBALS['dbLocation'] . $migrationDB);
  299. writeLog('success', 'Update Function - Migrated Old Info to new Database', 'Database');
  300. @unlink($tempLock);
  301. return true;
  302. }
  303. }
  304. @unlink($tempLock);
  305. return false;
  306. } catch (Dibi\Exception $e) {
  307. writeLog('error', 'Update Function - Error [' . $e . ']', 'Database');
  308. @unlink($tempLock);
  309. return false;
  310. }
  311. }
  312. @unlink($tempLock);
  313. return false;
  314. }
  315. return false;
  316. }
  317. function createFirstAdmin($path, $filename, $username, $password, $email)
  318. {
  319. try {
  320. $createDB = new Dibi\Connection([
  321. 'driver' => 'sqlite3',
  322. 'database' => $path . $filename,
  323. ]);
  324. $userInfo = [
  325. 'username' => $username,
  326. 'password' => password_hash($password, PASSWORD_BCRYPT),
  327. 'email' => $email,
  328. 'group' => 'Admin',
  329. 'group_id' => 0,
  330. 'image' => gravatar($email),
  331. 'register_date' => $GLOBALS['currentTime'],
  332. ];
  333. $groupInfo0 = [
  334. 'group' => 'Admin',
  335. 'group_id' => 0,
  336. 'default' => false,
  337. 'image' => 'plugins/images/groups/admin.png',
  338. ];
  339. $groupInfo1 = [
  340. 'group' => 'Co-Admin',
  341. 'group_id' => 1,
  342. 'default' => false,
  343. 'image' => 'plugins/images/groups/coadmin.png',
  344. ];
  345. $groupInfo2 = [
  346. 'group' => 'Super User',
  347. 'group_id' => 2,
  348. 'default' => false,
  349. 'image' => 'plugins/images/groups/superuser.png',
  350. ];
  351. $groupInfo3 = [
  352. 'group' => 'Power User',
  353. 'group_id' => 3,
  354. 'default' => false,
  355. 'image' => 'plugins/images/groups/poweruser.png',
  356. ];
  357. $groupInfo4 = [
  358. 'group' => 'User',
  359. 'group_id' => 4,
  360. 'default' => true,
  361. 'image' => 'plugins/images/groups/user.png',
  362. ];
  363. $groupInfoGuest = [
  364. 'group' => 'Guest',
  365. 'group_id' => 999,
  366. 'default' => false,
  367. 'image' => 'plugins/images/groups/guest.png',
  368. ];
  369. $settingsInfo = [
  370. 'order' => 1,
  371. 'category_id' => 0,
  372. 'name' => 'Settings',
  373. 'url' => 'api/?v1/settings/page',
  374. 'default' => false,
  375. 'enabled' => true,
  376. 'group_id' => 1,
  377. 'image' => 'fontawesome::cog',
  378. 'type' => 0
  379. ];
  380. $homepageInfo = [
  381. 'order' => 2,
  382. 'category_id' => 0,
  383. 'name' => 'Homepage',
  384. 'url' => 'api/?v1/homepage/page',
  385. 'default' => false,
  386. 'enabled' => false,
  387. 'group_id' => 4,
  388. 'image' => 'fontawesome::home',
  389. 'type' => 0
  390. ];
  391. $unsortedInfo = [
  392. 'order' => 1,
  393. 'category' => 'Unsorted',
  394. 'category_id' => 0,
  395. 'image' => 'plugins/images/categories/unsorted.png',
  396. 'default' => true
  397. ];
  398. $createDB->query('INSERT INTO [users]', $userInfo);
  399. $createDB->query('INSERT INTO [groups]', $groupInfo0);
  400. $createDB->query('INSERT INTO [groups]', $groupInfo1);
  401. $createDB->query('INSERT INTO [groups]', $groupInfo2);
  402. $createDB->query('INSERT INTO [groups]', $groupInfo3);
  403. $createDB->query('INSERT INTO [groups]', $groupInfo4);
  404. $createDB->query('INSERT INTO [groups]', $groupInfoGuest);
  405. $createDB->query('INSERT INTO [tabs]', $settingsInfo);
  406. $createDB->query('INSERT INTO [tabs]', $homepageInfo);
  407. $createDB->query('INSERT INTO [categories]', $unsortedInfo);
  408. return true;
  409. } catch (Dibi\Exception $e) {
  410. writeLog('error', 'Wizard Function - Error [' . $e . ']', 'Wizard');
  411. return false;
  412. }
  413. }
  414. function defaultUserGroup()
  415. {
  416. try {
  417. $connect = new Dibi\Connection([
  418. 'driver' => 'sqlite3',
  419. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  420. ]);
  421. $all = $connect->fetch('SELECT * FROM groups WHERE `default` = 1');
  422. return $all;
  423. } catch (Dibi\Exception $e) {
  424. return false;
  425. }
  426. }
  427. function defaultTabCategory()
  428. {
  429. try {
  430. $connect = new Dibi\Connection([
  431. 'driver' => 'sqlite3',
  432. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  433. ]);
  434. $all = $connect->fetch('SELECT * FROM categories WHERE `default` = 1');
  435. return $all;
  436. } catch (Dibi\Exception $e) {
  437. return false;
  438. }
  439. }
  440. function getGuest()
  441. {
  442. if (isset($GLOBALS['dbLocation'])) {
  443. try {
  444. $connect = new Dibi\Connection([
  445. 'driver' => 'sqlite3',
  446. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  447. ]);
  448. $all = $connect->fetch('SELECT * FROM groups WHERE `group_id` = 999');
  449. return $all;
  450. } catch (Dibi\Exception $e) {
  451. return false;
  452. }
  453. } else {
  454. return array(
  455. 'group' => 'Guest',
  456. 'group_id' => 999,
  457. 'image' => 'plugins/images/groups/guest.png'
  458. );
  459. }
  460. }
  461. function adminEditGroup($array)
  462. {
  463. switch ($array['data']['action']) {
  464. case 'changeDefaultGroup':
  465. try {
  466. $connect = new Dibi\Connection([
  467. 'driver' => 'sqlite3',
  468. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  469. ]);
  470. $connect->query('UPDATE groups SET `default` = 0');
  471. $connect->query('
  472. UPDATE groups SET', [
  473. 'default' => 1
  474. ], '
  475. WHERE id=?', $array['data']['id']);
  476. writeLog('success', 'Group Management Function - Changed Default Group from [' . $array['data']['oldGroupName'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  477. return true;
  478. } catch (Dibi\Exception $e) {
  479. return false;
  480. }
  481. break;
  482. case 'deleteUserGroup':
  483. try {
  484. $connect = new Dibi\Connection([
  485. 'driver' => 'sqlite3',
  486. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  487. ]);
  488. $connect->query('DELETE FROM groups WHERE id = ?', $array['data']['id']);
  489. writeLog('success', 'Group Management Function - Deleted Group [' . $array['data']['groupName'] . ']', $GLOBALS['organizrUser']['username']);
  490. return true;
  491. } catch (Dibi\Exception $e) {
  492. return false;
  493. }
  494. break;
  495. case 'addUserGroup':
  496. try {
  497. $connect = new Dibi\Connection([
  498. 'driver' => 'sqlite3',
  499. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  500. ]);
  501. $newGroup = [
  502. 'group' => $array['data']['newGroupName'],
  503. 'group_id' => $array['data']['newGroupID'],
  504. 'default' => false,
  505. 'image' => $array['data']['newGroupImage'],
  506. ];
  507. $connect->query('INSERT INTO [groups]', $newGroup);
  508. writeLog('success', 'Group Management Function - Added Group [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  509. return true;
  510. } catch (Dibi\Exception $e) {
  511. return false;
  512. }
  513. break;
  514. case 'editUserGroup':
  515. try {
  516. $connect = new Dibi\Connection([
  517. 'driver' => 'sqlite3',
  518. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  519. ]);
  520. $connect->query('
  521. UPDATE groups SET', [
  522. 'group' => $array['data']['groupName'],
  523. 'image' => $array['data']['groupImage'],
  524. ], '
  525. WHERE id=?', $array['data']['id']);
  526. writeLog('success', 'Group Management Function - Edited Group Info for [' . $array['data']['oldGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  527. return true;
  528. } catch (Dibi\Exception $e) {
  529. return false;
  530. }
  531. break;
  532. default:
  533. return false;
  534. break;
  535. }
  536. }
  537. function adminEditUser($array)
  538. {
  539. switch ($array['data']['action']) {
  540. case 'changeGroup':
  541. if ($array['data']['newGroupID'] == 0) {
  542. return false;
  543. }
  544. try {
  545. $connect = new Dibi\Connection([
  546. 'driver' => 'sqlite3',
  547. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  548. ]);
  549. $connect->query('
  550. UPDATE users SET', [
  551. 'group' => $array['data']['newGroupName'],
  552. 'group_id' => $array['data']['newGroupID'],
  553. ], '
  554. WHERE id=?', $array['data']['id']);
  555. writeLog('success', 'User Management Function - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  556. return true;
  557. } catch (Dibi\Exception $e) {
  558. writeLog('error', 'User Management Function - Error - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  559. return false;
  560. }
  561. break;
  562. case 'editUser':
  563. try {
  564. $connect = new Dibi\Connection([
  565. 'driver' => 'sqlite3',
  566. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  567. ]);
  568. if (!usernameTakenExcept($array['data']['username'], $array['data']['email'], $array['data']['id'])) {
  569. $connect->query('
  570. UPDATE users SET', [
  571. 'username' => $array['data']['username'],
  572. 'email' => $array['data']['email'],
  573. 'image' => gravatar($array['data']['email']),
  574. ], '
  575. WHERE id=?', $array['data']['id']);
  576. if (!empty($array['data']['password'])) {
  577. $connect->query('
  578. UPDATE users SET', [
  579. 'password' => password_hash($array['data']['password'], PASSWORD_BCRYPT)
  580. ], '
  581. WHERE id=?', $array['data']['id']);
  582. }
  583. writeLog('success', 'User Management Function - User: ' . $array['data']['username'] . '\'s info was changed', $GLOBALS['organizrUser']['username']);
  584. return true;
  585. } else {
  586. return false;
  587. }
  588. } catch (Dibi\Exception $e) {
  589. writeLog('error', 'User Management Function - Error - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  590. return false;
  591. }
  592. break;
  593. case 'addNewUser':
  594. $defaults = defaultUserGroup();
  595. if (createUser($array['data']['username'], $array['data']['password'], $defaults, $array['data']['email'])) {
  596. writeLog('success', 'Create User Function - Account created for [' . $array['data']['username'] . ']', $GLOBALS['organizrUser']['username']);
  597. return true;
  598. } else {
  599. writeLog('error', 'Registration Function - An error occurred', $GLOBALS['organizrUser']['username']);
  600. return 'username taken';
  601. }
  602. break;
  603. case 'deleteUser':
  604. try {
  605. $connect = new Dibi\Connection([
  606. 'driver' => 'sqlite3',
  607. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  608. ]);
  609. $connect->query('DELETE FROM users WHERE id = ?', $array['data']['id']);
  610. writeLog('success', 'User Management Function - Deleted User [' . $array['data']['username'] . ']', $GLOBALS['organizrUser']['username']);
  611. return true;
  612. } catch (Dibi\Exception $e) {
  613. return false;
  614. }
  615. break;
  616. default:
  617. return false;
  618. break;
  619. }
  620. }
  621. function editTabs($array)
  622. {
  623. switch ($array['data']['action']) {
  624. case 'changeGroup':
  625. try {
  626. $connect = new Dibi\Connection([
  627. 'driver' => 'sqlite3',
  628. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  629. ]);
  630. $connect->query('
  631. UPDATE tabs SET', [
  632. 'group_id' => $array['data']['newGroupID'],
  633. ], '
  634. WHERE id=?', $array['data']['id']);
  635. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s group was changed to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  636. return true;
  637. } catch (Dibi\Exception $e) {
  638. return false;
  639. }
  640. break;
  641. case 'changeCategory':
  642. try {
  643. $connect = new Dibi\Connection([
  644. 'driver' => 'sqlite3',
  645. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  646. ]);
  647. $connect->query('
  648. UPDATE tabs SET', [
  649. 'category_id' => $array['data']['newCategoryID'],
  650. ], '
  651. WHERE id=?', $array['data']['id']);
  652. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s category was changed to [' . $array['data']['newCategoryName'] . ']', $GLOBALS['organizrUser']['username']);
  653. return true;
  654. } catch (Dibi\Exception $e) {
  655. return false;
  656. }
  657. break;
  658. case 'changeType':
  659. try {
  660. $connect = new Dibi\Connection([
  661. 'driver' => 'sqlite3',
  662. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  663. ]);
  664. $connect->query('
  665. UPDATE tabs SET', [
  666. 'type' => $array['data']['newTypeID'],
  667. ], '
  668. WHERE id=?', $array['data']['id']);
  669. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s type was changed to [' . $array['data']['newTypeName'] . ']', $GLOBALS['organizrUser']['username']);
  670. return true;
  671. } catch (Dibi\Exception $e) {
  672. return false;
  673. }
  674. break;
  675. case 'changeEnabled':
  676. try {
  677. $connect = new Dibi\Connection([
  678. 'driver' => 'sqlite3',
  679. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  680. ]);
  681. $connect->query('
  682. UPDATE tabs SET', [
  683. 'enabled' => $array['data']['tabEnabled'],
  684. ], '
  685. WHERE id=?', $array['data']['id']);
  686. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s enable status was changed to [' . $array['data']['tabEnabledWord'] . ']', $GLOBALS['organizrUser']['username']);
  687. return true;
  688. } catch (Dibi\Exception $e) {
  689. return false;
  690. }
  691. break;
  692. case 'changeSplash':
  693. try {
  694. $connect = new Dibi\Connection([
  695. 'driver' => 'sqlite3',
  696. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  697. ]);
  698. $connect->query('
  699. UPDATE tabs SET', [
  700. 'splash' => $array['data']['tabSplash'],
  701. ], '
  702. WHERE id=?', $array['data']['id']);
  703. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s splash status was changed to [' . $array['data']['tabSplashWord'] . ']', $GLOBALS['organizrUser']['username']);
  704. return true;
  705. } catch (Dibi\Exception $e) {
  706. return false;
  707. }
  708. break;
  709. case 'changePing':
  710. try {
  711. $connect = new Dibi\Connection([
  712. 'driver' => 'sqlite3',
  713. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  714. ]);
  715. $connect->query('
  716. UPDATE tabs SET', [
  717. 'ping' => $array['data']['tabPing'],
  718. ], '
  719. WHERE id=?', $array['data']['id']);
  720. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s ping status was changed to [' . $array['data']['tabPingWord'] . ']', $GLOBALS['organizrUser']['username']);
  721. return true;
  722. } catch (Dibi\Exception $e) {
  723. return false;
  724. }
  725. break;
  726. case 'changePreload':
  727. try {
  728. $connect = new Dibi\Connection([
  729. 'driver' => 'sqlite3',
  730. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  731. ]);
  732. $connect->query('
  733. UPDATE tabs SET', [
  734. 'preload' => $array['data']['tabPreload'],
  735. ], '
  736. WHERE id=?', $array['data']['id']);
  737. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s preload status was changed to [' . $array['data']['tabPreloadWord'] . ']', $GLOBALS['organizrUser']['username']);
  738. return true;
  739. } catch (Dibi\Exception $e) {
  740. return false;
  741. }
  742. break;
  743. case 'changeDefault':
  744. try {
  745. $connect = new Dibi\Connection([
  746. 'driver' => 'sqlite3',
  747. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  748. ]);
  749. $connect->query('UPDATE tabs SET `default` = 0');
  750. $connect->query('
  751. UPDATE tabs SET', [
  752. 'default' => 1
  753. ], '
  754. WHERE id=?', $array['data']['id']);
  755. writeLog('success', 'Tab Editor Function - Changed Default Tab to [' . $array['data']['tab'] . ']', $GLOBALS['organizrUser']['username']);
  756. return true;
  757. } catch (Dibi\Exception $e) {
  758. return false;
  759. }
  760. break;
  761. case 'deleteTab':
  762. try {
  763. $connect = new Dibi\Connection([
  764. 'driver' => 'sqlite3',
  765. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  766. ]);
  767. $connect->query('DELETE FROM tabs WHERE id = ?', $array['data']['id']);
  768. writeLog('success', 'Tab Editor Function - Deleted Tab [' . $array['data']['tab'] . ']', $GLOBALS['organizrUser']['username']);
  769. return true;
  770. } catch (Dibi\Exception $e) {
  771. return false;
  772. }
  773. break;
  774. case 'editTab':
  775. try {
  776. $connect = new Dibi\Connection([
  777. 'driver' => 'sqlite3',
  778. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  779. ]);
  780. $connect->query('
  781. UPDATE tabs SET', [
  782. 'name' => $array['data']['tabName'],
  783. 'url' => $array['data']['tabURL'],
  784. 'url_local' => $array['data']['tabLocalURL'],
  785. 'ping_url' => $array['data']['pingURL'],
  786. 'image' => $array['data']['tabImage'],
  787. ], '
  788. WHERE id=?', $array['data']['id']);
  789. writeLog('success', 'Tab Editor Function - Edited Tab Info for [' . $array['data']['tabName'] . ']', $GLOBALS['organizrUser']['username']);
  790. return true;
  791. } catch (Dibi\Exception $e) {
  792. return false;
  793. }
  794. case 'changeOrder':
  795. try {
  796. $connect = new Dibi\Connection([
  797. 'driver' => 'sqlite3',
  798. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  799. ]);
  800. foreach ($array['data']['tabs']['tab'] as $key => $value) {
  801. if ($value['order'] != $value['originalOrder']) {
  802. $connect->query('
  803. UPDATE tabs SET', [
  804. 'order' => $value['order'],
  805. ], '
  806. WHERE id=?', $value['id']);
  807. writeLog('success', 'Tab Editor Function - ' . $value['name'] . ' Order Changed From ' . $value['order'] . ' to ' . $value['originalOrder'], $GLOBALS['organizrUser']['username']);
  808. }
  809. }
  810. writeLog('success', 'Tab Editor Function - Tab Order Changed', $GLOBALS['organizrUser']['username']);
  811. return true;
  812. } catch (Dibi\Exception $e) {
  813. return false;
  814. }
  815. break;
  816. case 'addNewTab':
  817. try {
  818. $default = defaultTabCategory()['category_id'];
  819. $connect = new Dibi\Connection([
  820. 'driver' => 'sqlite3',
  821. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  822. ]);
  823. $newTab = [
  824. 'order' => $array['data']['tabOrder'],
  825. 'category_id' => $default,
  826. 'name' => $array['data']['tabName'],
  827. 'url' => $array['data']['tabURL'],
  828. 'url_local' => $array['data']['tabLocalURL'],
  829. 'ping_url' => $array['data']['pingURL'],
  830. 'default' => $array['data']['tabDefault'],
  831. 'enabled' => 1,
  832. 'group_id' => $array['data']['tabGroupID'],
  833. 'image' => $array['data']['tabImage'],
  834. 'type' => $array['data']['tabType']
  835. ];
  836. $connect->query('INSERT INTO [tabs]', $newTab);
  837. writeLog('success', 'Tab Editor Function - Created Tab for: ' . $array['data']['tabName'], $GLOBALS['organizrUser']['username']);
  838. return true;
  839. } catch (Dibi\Exception $e) {
  840. return false;
  841. }
  842. break;
  843. default:
  844. return false;
  845. break;
  846. }
  847. }
  848. function editCategories($array)
  849. {
  850. switch ($array['data']['action']) {
  851. case 'changeDefault':
  852. try {
  853. $connect = new Dibi\Connection([
  854. 'driver' => 'sqlite3',
  855. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  856. ]);
  857. $connect->query('UPDATE categories SET `default` = 0');
  858. $connect->query('
  859. UPDATE categories SET', [
  860. 'default' => 1
  861. ], '
  862. WHERE id=?', $array['data']['id']);
  863. writeLog('success', 'Category Editor Function - Changed Default Category from [' . $array['data']['oldCategoryName'] . '] to [' . $array['data']['newCategoryName'] . ']', $GLOBALS['organizrUser']['username']);
  864. return true;
  865. } catch (Dibi\Exception $e) {
  866. return false;
  867. }
  868. break;
  869. case 'deleteCategory':
  870. try {
  871. $connect = new Dibi\Connection([
  872. 'driver' => 'sqlite3',
  873. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  874. ]);
  875. $connect->query('DELETE FROM categories WHERE id = ?', $array['data']['id']);
  876. writeLog('success', 'Category Editor Function - Deleted Category [' . $array['data']['category'] . ']', $GLOBALS['organizrUser']['username']);
  877. return true;
  878. } catch (Dibi\Exception $e) {
  879. return false;
  880. }
  881. break;
  882. case 'addNewCategory':
  883. try {
  884. $connect = new Dibi\Connection([
  885. 'driver' => 'sqlite3',
  886. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  887. ]);
  888. $newCategory = [
  889. 'category' => $array['data']['categoryName'],
  890. 'order' => $array['data']['categoryOrder'],
  891. 'category_id' => $array['data']['categoryID'],
  892. 'default' => false,
  893. 'image' => $array['data']['categoryImage'],
  894. ];
  895. $connect->query('INSERT INTO [categories]', $newCategory);
  896. writeLog('success', 'Category Editor Function - Added Category [' . $array['data']['categoryName'] . ']', $GLOBALS['organizrUser']['username']);
  897. return true;
  898. } catch (Dibi\Exception $e) {
  899. return $e;
  900. }
  901. break;
  902. case 'editCategory':
  903. try {
  904. $connect = new Dibi\Connection([
  905. 'driver' => 'sqlite3',
  906. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  907. ]);
  908. $connect->query('
  909. UPDATE categories SET', [
  910. 'category' => $array['data']['name'],
  911. 'image' => $array['data']['image'],
  912. ], '
  913. WHERE id=?', $array['data']['id']);
  914. writeLog('success', 'Category Editor Function - Edited Category Info for [' . $array['data']['name'] . ']', $GLOBALS['organizrUser']['username']);
  915. return true;
  916. } catch (Dibi\Exception $e) {
  917. return false;
  918. }
  919. break;
  920. case 'changeOrder':
  921. try {
  922. $connect = new Dibi\Connection([
  923. 'driver' => 'sqlite3',
  924. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  925. ]);
  926. foreach ($array['data']['categories']['category'] as $key => $value) {
  927. if ($value['order'] != $value['originalOrder']) {
  928. $connect->query('
  929. UPDATE categories SET', [
  930. 'order' => $value['order'],
  931. ], '
  932. WHERE id=?', $value['id']);
  933. writeLog('success', 'Category Editor Function - ' . $value['name'] . ' Order Changed From ' . $value['order'] . ' to ' . $value['originalOrder'], $GLOBALS['organizrUser']['username']);
  934. }
  935. }
  936. writeLog('success', 'Category Editor Function - Category Order Changed', $GLOBALS['organizrUser']['username']);
  937. return true;
  938. } catch (Dibi\Exception $e) {
  939. return false;
  940. }
  941. break;
  942. default:
  943. return false;
  944. break;
  945. }
  946. }
  947. function allUsers()
  948. {
  949. try {
  950. $connect = new Dibi\Connection([
  951. 'driver' => 'sqlite3',
  952. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  953. ]);
  954. $users = $connect->fetchAll('SELECT * FROM users');
  955. $groups = $connect->fetchAll('SELECT * FROM groups ORDER BY group_id ASC');
  956. foreach ($users as $k => $v) {
  957. // clear password from array
  958. unset($users[$k]['password']);
  959. }
  960. $all['users'] = $users;
  961. $all['groups'] = $groups;
  962. return $all;
  963. } catch (Dibi\Exception $e) {
  964. return false;
  965. }
  966. }
  967. function usernameTaken($username, $email)
  968. {
  969. try {
  970. $connect = new Dibi\Connection([
  971. 'driver' => 'sqlite3',
  972. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  973. ]);
  974. $all = $connect->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $username, $email);
  975. return ($all) ? true : false;
  976. } catch (Dibi\Exception $e) {
  977. return false;
  978. }
  979. }
  980. function usernameTakenExcept($username, $email, $id)
  981. {
  982. try {
  983. $connect = new Dibi\Connection([
  984. 'driver' => 'sqlite3',
  985. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  986. ]);
  987. $all = $connect->fetch('SELECT * FROM users WHERE id IS NOT ? AND username = ? COLLATE NOCASE OR id IS NOT ? AND email = ? COLLATE NOCASE', $id, $username, $id, $email);
  988. return ($all) ? true : false;
  989. } catch (Dibi\Exception $e) {
  990. return false;
  991. }
  992. }
  993. function createUser($username, $password, $defaults, $email = null)
  994. {
  995. $email = ($email) ? $email : random_ascii_string(10) . '@placeholder.eml';
  996. try {
  997. if (!usernameTaken($username, $email)) {
  998. $createDB = new Dibi\Connection([
  999. 'driver' => 'sqlite3',
  1000. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1001. ]);
  1002. $userInfo = [
  1003. 'username' => $username,
  1004. 'password' => password_hash($password, PASSWORD_BCRYPT),
  1005. 'email' => $email,
  1006. 'group' => $defaults['group'],
  1007. 'group_id' => $defaults['group_id'],
  1008. 'image' => gravatar($email),
  1009. 'register_date' => $GLOBALS['currentTime'],
  1010. ];
  1011. $createDB->query('INSERT INTO [users]', $userInfo);
  1012. return true;
  1013. } else {
  1014. return false;
  1015. }
  1016. } catch (Dibi\Exception $e) {
  1017. return false;
  1018. }
  1019. }
  1020. function importUsers($array)
  1021. {
  1022. $imported = 0;
  1023. $defaults = defaultUserGroup();
  1024. foreach ($array as $user) {
  1025. $password = random_ascii_string(30);
  1026. if ($user['username'] !== '' && $user['email'] !== '' && $password !== '' && $defaults !== '') {
  1027. $newUser = createUser($user['username'], $password, $defaults, $user['email']);
  1028. if (!$newUser) {
  1029. writeLog('error', 'Import Function - Error', $user['username']);
  1030. } else {
  1031. $imported++;
  1032. }
  1033. }
  1034. }
  1035. return $imported;
  1036. }
  1037. function importUsersType($array)
  1038. {
  1039. $type = $array['data']['type'];
  1040. if ($type !== '') {
  1041. switch ($type) {
  1042. case 'plex':
  1043. return importUsers(allPlexUsers(true));
  1044. break;
  1045. default:
  1046. return false;
  1047. }
  1048. }
  1049. return false;
  1050. }
  1051. function allTabs()
  1052. {
  1053. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1054. try {
  1055. $connect = new Dibi\Connection([
  1056. 'driver' => 'sqlite3',
  1057. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1058. ]);
  1059. $all['tabs'] = $connect->fetchAll('SELECT * FROM tabs ORDER BY `order` ASC');
  1060. $all['categories'] = $connect->fetchAll('SELECT * FROM categories ORDER BY `order` ASC');
  1061. $all['groups'] = $connect->fetchAll('SELECT * FROM groups ORDER BY `group_id` ASC');
  1062. return $all;
  1063. } catch (Dibi\Exception $e) {
  1064. return false;
  1065. }
  1066. }
  1067. return false;
  1068. }
  1069. function allGroups()
  1070. {
  1071. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1072. try {
  1073. $connect = new Dibi\Connection([
  1074. 'driver' => 'sqlite3',
  1075. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1076. ]);
  1077. $all = $connect->fetchAll('SELECT * FROM groups ORDER BY `group_id` ASC');
  1078. return $all;
  1079. } catch (Dibi\Exception $e) {
  1080. return false;
  1081. }
  1082. }
  1083. return false;
  1084. }
  1085. function loadTabs()
  1086. {
  1087. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1088. try {
  1089. $connect = new Dibi\Connection([
  1090. 'driver' => 'sqlite3',
  1091. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1092. ]);
  1093. $sort = ($GLOBALS['unsortedTabs'] == 'top') ? 'DESC' : 'ASC';
  1094. $tabs = $connect->fetchAll('SELECT * FROM tabs WHERE `group_id` >= ? AND `enabled` = 1 ORDER BY `order` ' . $sort, $GLOBALS['organizrUser']['groupID']);
  1095. $categories = $connect->fetchAll('SELECT * FROM categories ORDER BY `order` ASC');
  1096. $all['tabs'] = $tabs;
  1097. foreach ($tabs as $k => $v) {
  1098. $v['access_url'] = (!empty($v['url_local']) && ($v['url_local'] !== null) && ($v['url_local'] !== 'null') && isLocal() && $v['type'] !== 0) ? $v['url_local'] : $v['url'];
  1099. }
  1100. $count = array_map(function ($element) {
  1101. return $element['category_id'];
  1102. }, $tabs);
  1103. $count = (array_count_values($count));
  1104. foreach ($categories as $k => $v) {
  1105. $v['count'] = isset($count[$v['category_id']]) ? $count[$v['category_id']] : 0;
  1106. }
  1107. $all['categories'] = $categories;
  1108. return $all;
  1109. } catch (Dibi\Exception $e) {
  1110. return false;
  1111. }
  1112. }
  1113. return false;
  1114. }
  1115. function getActiveTokens()
  1116. {
  1117. try {
  1118. $connect = new Dibi\Connection([
  1119. 'driver' => 'sqlite3',
  1120. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1121. ]);
  1122. $all = $connect->fetchAll('SELECT * FROM `tokens` WHERE `user_id` = ? AND `expires` > ?', $GLOBALS['organizrUser']['userID'], $GLOBALS['currentTime']);
  1123. return $all;
  1124. } catch (Dibi\Exception $e) {
  1125. return false;
  1126. }
  1127. }
  1128. function revokeToken($array)
  1129. {
  1130. if ($array['data']['token']) {
  1131. try {
  1132. $connect = new Dibi\Connection([
  1133. 'driver' => 'sqlite3',
  1134. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1135. ]);
  1136. $connect->query('DELETE FROM tokens WHERE user_id = ? AND token = ?', $GLOBALS['organizrUser']['userID'], $array['data']['token']);
  1137. return true;
  1138. } catch (Dibi\Exception $e) {
  1139. return false;
  1140. }
  1141. }
  1142. }
  1143. function getSchema()
  1144. {
  1145. try {
  1146. $connect = new Dibi\Connection([
  1147. 'driver' => 'sqlite3',
  1148. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1149. ]);
  1150. $result = $connect->fetchAll(' SELECT name, sql FROM sqlite_master WHERE type=\'table\' ORDER BY name');
  1151. return $result;
  1152. } catch (Dibi\Exception $e) {
  1153. return false;
  1154. }
  1155. }