4
0

index.php 30 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060
  1. <?php
  2. $generationTime = -microtime(true);
  3. //include functions
  4. require_once 'functions.php';
  5. //Set result array
  6. $result = array();
  7. //Get request method
  8. $method = $_SERVER['REQUEST_METHOD'];
  9. reset($_GET);
  10. $function = (key($_GET) ? str_replace("/", "_", key($_GET)) : false);
  11. //Exit if $function is blank
  12. if ($function === false) {
  13. $result['status'] = "error";
  14. $result['statusText'] = "No API Path Supplied";
  15. exit(json_encode($result));
  16. }
  17. $result['request'] = key($_GET);
  18. switch ($function) {
  19. case 'v1_settings_page':
  20. switch ($method) {
  21. case 'GET':
  22. if (qualifyRequest(1)) {
  23. $result['status'] = 'success';
  24. $result['statusText'] = 'success';
  25. $result['data'] = $pageSettings;
  26. writeLog('success', 'Admin Function - Accessed Settings Page', $GLOBALS['organizrUser']['username']);
  27. } else {
  28. $result['status'] = 'error';
  29. $result['statusText'] = 'API/Token invalid or not set';
  30. $result['data'] = null;
  31. writeLog('error', 'Admin Function - Tried to access Settings Page', $GLOBALS['organizrUser']['username']);
  32. }
  33. break;
  34. default:
  35. $result['status'] = 'error';
  36. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  37. break;
  38. }
  39. break;
  40. case 'v1_homepage_page':
  41. switch ($method) {
  42. case 'GET':
  43. $result['status'] = 'success';
  44. $result['statusText'] = 'success';
  45. $result['data'] = $pageHomepage;
  46. break;
  47. default:
  48. $result['status'] = 'error';
  49. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  50. break;
  51. }
  52. break;
  53. case 'v1_settings_plugins':
  54. switch ($method) {
  55. case 'GET':
  56. if (qualifyRequest(1)) {
  57. $result['status'] = 'success';
  58. $result['statusText'] = 'success';
  59. $result['data'] = $pageSettingsPlugins;
  60. } else {
  61. $result['status'] = 'error';
  62. $result['statusText'] = 'API/Token invalid or not set';
  63. $result['data'] = null;
  64. }
  65. break;
  66. default:
  67. $result['status'] = 'error';
  68. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  69. break;
  70. }
  71. break;
  72. case 'v1_settings_tab_editor_homepage':
  73. switch ($method) {
  74. case 'GET':
  75. if (qualifyRequest(1)) {
  76. $result['status'] = 'success';
  77. $result['statusText'] = 'success';
  78. $result['data'] = $pageSettingsTabEditorHomepage;
  79. } else {
  80. $result['status'] = 'error';
  81. $result['statusText'] = 'API/Token invalid or not set';
  82. $result['data'] = null;
  83. }
  84. break;
  85. default:
  86. $result['status'] = 'error';
  87. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  88. break;
  89. }
  90. break;
  91. case 'v1_settings_tab_editor_homepage_order':
  92. switch ($method) {
  93. case 'GET':
  94. if (qualifyRequest(1)) {
  95. $result['status'] = 'success';
  96. $result['statusText'] = 'success';
  97. $result['data'] = $pageSettingsTabEditorHomepageOrder;
  98. } else {
  99. $result['status'] = 'error';
  100. $result['statusText'] = 'API/Token invalid or not set';
  101. $result['data'] = null;
  102. }
  103. break;
  104. default:
  105. $result['status'] = 'error';
  106. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  107. break;
  108. }
  109. break;
  110. case 'v1_settings_homepage_list':
  111. switch ($method) {
  112. case 'GET':
  113. if (qualifyRequest(1)) {
  114. $result['status'] = 'success';
  115. $result['statusText'] = 'success';
  116. $result['data'] = getHomepageList();
  117. } else {
  118. $result['status'] = 'error';
  119. $result['statusText'] = 'API/Token invalid or not set';
  120. $result['data'] = null;
  121. }
  122. break;
  123. case 'POST':
  124. if (qualifyRequest(1)) {
  125. $result['status'] = 'success';
  126. $result['statusText'] = 'success';
  127. $result['data'] = editPlugins($_POST);
  128. } else {
  129. $result['status'] = 'error';
  130. $result['statusText'] = 'API/Token invalid or not set';
  131. $result['data'] = null;
  132. }
  133. break;
  134. default:
  135. $result['status'] = 'error';
  136. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  137. break;
  138. }
  139. break;
  140. case 'v1_settings_plugins_list':
  141. switch ($method) {
  142. case 'GET':
  143. if (qualifyRequest(1)) {
  144. $result['status'] = 'success';
  145. $result['statusText'] = 'success';
  146. $result['data'] = getPlugins();
  147. } else {
  148. $result['status'] = 'error';
  149. $result['statusText'] = 'API/Token invalid or not set';
  150. $result['data'] = null;
  151. }
  152. break;
  153. case 'POST':
  154. if (qualifyRequest(1)) {
  155. $result['status'] = 'success';
  156. $result['statusText'] = 'success';
  157. $result['data'] = editPlugins($_POST);
  158. } else {
  159. $result['status'] = 'error';
  160. $result['statusText'] = 'API/Token invalid or not set';
  161. $result['data'] = null;
  162. }
  163. break;
  164. default:
  165. $result['status'] = 'error';
  166. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  167. break;
  168. }
  169. break;
  170. case 'v1_settings_settings_logs':
  171. switch ($method) {
  172. case 'GET':
  173. if (qualifyRequest(1)) {
  174. $result['status'] = 'success';
  175. $result['statusText'] = 'success';
  176. $result['data'] = $pageSettingsSettingsLogs;
  177. } else {
  178. $result['status'] = 'error';
  179. $result['statusText'] = 'API/Token invalid or not set';
  180. $result['data'] = null;
  181. }
  182. break;
  183. default:
  184. $result['status'] = 'error';
  185. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  186. break;
  187. }
  188. break;
  189. case 'v1_settings_settings_sso':
  190. switch ($method) {
  191. case 'GET':
  192. if (qualifyRequest(1)) {
  193. $result['status'] = 'success';
  194. $result['statusText'] = 'success';
  195. $result['data'] = $pageSettingsSettingsSSO;
  196. } else {
  197. $result['status'] = 'error';
  198. $result['statusText'] = 'API/Token invalid or not set';
  199. $result['data'] = null;
  200. }
  201. break;
  202. default:
  203. $result['status'] = 'error';
  204. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  205. break;
  206. }
  207. break;
  208. case 'v1_settings_settings_main':
  209. switch ($method) {
  210. case 'GET':
  211. if (qualifyRequest(1)) {
  212. $result['status'] = 'success';
  213. $result['statusText'] = 'success';
  214. $result['data'] = $pageSettingsSettingsMain;
  215. } else {
  216. $result['status'] = 'error';
  217. $result['statusText'] = 'API/Token invalid or not set';
  218. $result['data'] = null;
  219. }
  220. break;
  221. default:
  222. $result['status'] = 'error';
  223. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  224. break;
  225. }
  226. break;
  227. case 'v1_settings_customize_appearance':
  228. switch ($method) {
  229. case 'GET':
  230. if (qualifyRequest(1)) {
  231. $result['status'] = 'success';
  232. $result['statusText'] = 'success';
  233. $result['data'] = $pageSettingsCustomizeAppearance;
  234. } else {
  235. $result['status'] = 'error';
  236. $result['statusText'] = 'API/Token invalid or not set';
  237. $result['data'] = null;
  238. }
  239. break;
  240. case 'POST':
  241. if (qualifyRequest(1)) {
  242. $result['status'] = 'success';
  243. $result['statusText'] = 'success';
  244. $result['data'] = editAppearance($_POST);
  245. } else {
  246. $result['status'] = 'error';
  247. $result['statusText'] = 'API/Token invalid or not set';
  248. $result['data'] = null;
  249. }
  250. break;
  251. default:
  252. $result['status'] = 'error';
  253. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  254. break;
  255. }
  256. break;
  257. case 'v1_remove_file':
  258. switch ($method) {
  259. case 'POST':
  260. if (qualifyRequest(1)) {
  261. $result['status'] = 'success';
  262. $result['statusText'] = 'success';
  263. $result['data'] = removeFile($_POST);
  264. } else {
  265. $result['status'] = 'error';
  266. $result['statusText'] = 'API/Token invalid or not set';
  267. $result['data'] = null;
  268. }
  269. break;
  270. default:
  271. $result['status'] = 'error';
  272. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  273. break;
  274. }
  275. break;
  276. case 'v1_update_config':
  277. switch ($method) {
  278. case 'POST':
  279. if (qualifyRequest(1)) {
  280. $result['status'] = 'success';
  281. $result['statusText'] = 'success';
  282. $result['data'] = updateConfigItem($_POST);
  283. } else {
  284. $result['status'] = 'error';
  285. $result['statusText'] = 'API/Token invalid or not set';
  286. $result['data'] = null;
  287. }
  288. break;
  289. default:
  290. $result['status'] = 'error';
  291. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  292. break;
  293. }
  294. break;
  295. case 'v1_update_config_multiple':
  296. switch ($method) {
  297. case 'POST':
  298. if (qualifyRequest(1)) {
  299. $result['status'] = 'success';
  300. $result['statusText'] = 'success';
  301. $result['data'] = updateConfigMultiple($_POST);
  302. } else {
  303. $result['status'] = 'error';
  304. $result['statusText'] = 'API/Token invalid or not set';
  305. $result['data'] = null;
  306. }
  307. break;
  308. default:
  309. $result['status'] = 'error';
  310. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  311. break;
  312. }
  313. break;
  314. case 'v1_update_config_multiple_form':
  315. switch ($method) {
  316. case 'POST':
  317. if (qualifyRequest(1)) {
  318. $result['status'] = 'success';
  319. $result['statusText'] = 'success';
  320. $result['data'] = updateConfigMultipleForm($_POST);
  321. } else {
  322. $result['status'] = 'error';
  323. $result['statusText'] = 'API/Token invalid or not set';
  324. $result['data'] = null;
  325. }
  326. break;
  327. default:
  328. $result['status'] = 'error';
  329. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  330. break;
  331. }
  332. break;
  333. case 'v1_homepage_connect':
  334. switch ($method) {
  335. case 'POST':
  336. $result['status'] = 'success';
  337. $result['statusText'] = 'success';
  338. $result['data'] = homepageConnect($_POST);
  339. break;
  340. default:
  341. $result['status'] = 'error';
  342. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  343. break;
  344. }
  345. break;
  346. case 'v1_ping':
  347. switch ($method) {
  348. case 'POST':
  349. $result['status'] = 'success';
  350. $result['statusText'] = 'success';
  351. $result['data'] = ping($_POST['data']['pingList']);
  352. break;
  353. default:
  354. $result['status'] = 'error';
  355. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  356. break;
  357. }
  358. break;
  359. case 'v1_test_api_connection':
  360. switch ($method) {
  361. case 'POST':
  362. if (qualifyRequest(1)) {
  363. $result['status'] = 'success';
  364. $result['statusText'] = 'success';
  365. $result['data'] = testAPIConnection($_POST);
  366. } else {
  367. $result['status'] = 'error';
  368. $result['statusText'] = 'API/Token invalid or not set';
  369. $result['data'] = null;
  370. }
  371. break;
  372. default:
  373. $result['status'] = 'error';
  374. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  375. break;
  376. }
  377. break;
  378. case 'v1_settings_tab_editor_tabs':
  379. switch ($method) {
  380. case 'GET':
  381. if (qualifyRequest(1)) {
  382. $result['status'] = 'success';
  383. $result['statusText'] = 'success';
  384. $result['data'] = $pageSettingsTabEditorTabs;
  385. } else {
  386. $result['status'] = 'error';
  387. $result['statusText'] = 'API/Token invalid or not set';
  388. $result['data'] = null;
  389. }
  390. break;
  391. case 'POST':
  392. if (qualifyRequest(1)) {
  393. $result['status'] = 'success';
  394. $result['statusText'] = 'success';
  395. $result['data'] = editTabs($_POST);
  396. } else {
  397. $result['status'] = 'error';
  398. $result['statusText'] = 'API/Token invalid or not set';
  399. $result['data'] = null;
  400. }
  401. break;
  402. default:
  403. $result['status'] = 'error';
  404. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  405. break;
  406. }
  407. break;
  408. case 'v1_settings_tab_editor_categories':
  409. switch ($method) {
  410. case 'GET':
  411. if (qualifyRequest(1)) {
  412. $result['status'] = 'success';
  413. $result['statusText'] = 'success';
  414. $result['data'] = $pageSettingsTabEditorCategories;
  415. } else {
  416. $result['status'] = 'error';
  417. $result['statusText'] = 'API/Token invalid or not set';
  418. $result['data'] = null;
  419. }
  420. break;
  421. case 'POST':
  422. if (qualifyRequest(1)) {
  423. $result['status'] = 'success';
  424. $result['statusText'] = 'success';
  425. $result['data'] = editCategories($_POST);
  426. } else {
  427. $result['status'] = 'error';
  428. $result['statusText'] = 'API/Token invalid or not set';
  429. $result['data'] = null;
  430. }
  431. break;
  432. default:
  433. $result['status'] = 'error';
  434. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  435. break;
  436. }
  437. break;
  438. case 'v1_settings_user_manage_users':
  439. switch ($method) {
  440. case 'GET':
  441. if (qualifyRequest(1)) {
  442. $result['status'] = 'success';
  443. $result['statusText'] = 'success';
  444. $result['data'] = $pageSettingsUserManageUsers;
  445. } else {
  446. $result['status'] = 'error';
  447. $result['statusText'] = 'API/Token invalid or not set';
  448. $result['data'] = null;
  449. }
  450. break;
  451. case 'POST':
  452. if (qualifyRequest(1)) {
  453. $result['status'] = 'success';
  454. $result['statusText'] = 'success';
  455. $result['data'] = adminEditUser($_POST);
  456. } elseif (qualifyRequest(998)) {
  457. $result['status'] = 'success';
  458. $result['statusText'] = 'success';
  459. $result['data'] = editUser($_POST);
  460. } else {
  461. $result['status'] = 'error';
  462. $result['statusText'] = 'API/Token invalid or not set';
  463. $result['data'] = null;
  464. }
  465. break;
  466. default:
  467. $result['status'] = 'error';
  468. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  469. break;
  470. }
  471. break;
  472. case 'v1_manage_user':
  473. switch ($method) {
  474. case 'POST':
  475. if (qualifyRequest(998)) {
  476. $result['status'] = 'success';
  477. $result['statusText'] = 'success';
  478. $result['data'] = editUser($_POST);
  479. } else {
  480. $result['status'] = 'error';
  481. $result['statusText'] = 'API/Token invalid or not set';
  482. $result['data'] = null;
  483. }
  484. break;
  485. default:
  486. $result['status'] = 'error';
  487. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  488. break;
  489. }
  490. break;
  491. case 'v1_settings_user_manage_groups':
  492. switch ($method) {
  493. case 'GET':
  494. if (qualifyRequest(1)) {
  495. $result['status'] = 'success';
  496. $result['statusText'] = 'success';
  497. $result['data'] = $pageSettingsUserManageGroups;
  498. } else {
  499. $result['status'] = 'error';
  500. $result['statusText'] = 'API/Token invalid or not set';
  501. $result['data'] = null;
  502. }
  503. break;
  504. case 'POST':
  505. if (qualifyRequest(1)) {
  506. $result['status'] = 'success';
  507. $result['statusText'] = 'success';
  508. $result['data'] = adminEditGroup($_POST);
  509. } else {
  510. $result['status'] = 'error';
  511. $result['statusText'] = 'API/Token invalid or not set';
  512. $result['data'] = null;
  513. }
  514. break;
  515. default:
  516. $result['status'] = 'error';
  517. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  518. break;
  519. }
  520. break;
  521. case 'v1_settings_image_manager_view':
  522. switch ($method) {
  523. case 'GET':
  524. if (qualifyRequest(1)) {
  525. $result['status'] = 'success';
  526. $result['statusText'] = 'success';
  527. $result['data'] = $pageSettingsImageManager;
  528. } else {
  529. $result['status'] = 'error';
  530. $result['statusText'] = 'API/Token invalid or not set';
  531. $result['data'] = null;
  532. }
  533. break;
  534. case 'POST':
  535. if (qualifyRequest(1)) {
  536. $result['status'] = 'success';
  537. $result['statusText'] = 'success';
  538. $result['data'] = editImages();
  539. } else {
  540. $result['status'] = 'error';
  541. $result['statusText'] = 'API/Token invalid or not set';
  542. $result['data'] = null;
  543. }
  544. break;
  545. default:
  546. $result['status'] = 'error';
  547. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  548. break;
  549. }
  550. break;
  551. case 'v1_wizard_page':
  552. switch ($method) {
  553. case 'GET':
  554. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  555. $result['status'] = 'success';
  556. $result['statusText'] = 'success';
  557. $result['data'] = $pageWizard;
  558. } else {
  559. $result['status'] = 'error';
  560. $result['statusText'] = 'Wizard has already been run';
  561. $result['data'] = null;
  562. }
  563. break;
  564. default:
  565. $result['status'] = 'error';
  566. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  567. break;
  568. }
  569. break;
  570. case 'v1_dependencies_page':
  571. switch ($method) {
  572. case 'GET':
  573. $result['status'] = 'success';
  574. $result['statusText'] = 'success';
  575. $result['data'] = $pageDependencies;
  576. break;
  577. default:
  578. $result['status'] = 'error';
  579. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  580. break;
  581. }
  582. break;
  583. case 'v1_wizard_config':
  584. switch ($method) {
  585. case 'POST':
  586. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  587. $result['status'] = 'success';
  588. $result['statusText'] = 'success';
  589. $result['data'] = wizardConfig($_POST);
  590. } else {
  591. $result['status'] = 'error';
  592. $result['statusText'] = 'Wizard has already been run';
  593. $result['data'] = null;
  594. }
  595. break;
  596. default:
  597. $result['status'] = 'error';
  598. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  599. break;
  600. }
  601. break;
  602. case 'v1_wizard_path':
  603. switch ($method) {
  604. case 'POST':
  605. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  606. $result['status'] = 'success';
  607. $result['statusText'] = 'success';
  608. $result['data'] = wizardPath($_POST);
  609. } else {
  610. $result['status'] = 'error';
  611. $result['statusText'] = 'Wizard has already been run';
  612. $result['data'] = null;
  613. }
  614. break;
  615. default:
  616. $result['status'] = 'error';
  617. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  618. break;
  619. }
  620. break;
  621. case 'v1_login':
  622. switch ($method) {
  623. case 'POST':
  624. $result['status'] = 'success';
  625. $result['statusText'] = 'success';
  626. $result['data'] = login($_POST);
  627. break;
  628. default:
  629. $result['status'] = 'error';
  630. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  631. break;
  632. }
  633. break;
  634. case 'v1_register':
  635. switch ($method) {
  636. case 'POST':
  637. $result['status'] = 'success';
  638. $result['statusText'] = 'success';
  639. $result['data'] = register($_POST);
  640. break;
  641. default:
  642. $result['status'] = 'error';
  643. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  644. break;
  645. }
  646. break;
  647. case 'v1_recover':
  648. switch ($method) {
  649. case 'POST':
  650. $result['status'] = 'success';
  651. $result['statusText'] = 'success';
  652. $result['data'] = recover($_POST);
  653. break;
  654. default:
  655. $result['status'] = 'error';
  656. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  657. break;
  658. }
  659. break;
  660. case 'v1_unlock':
  661. switch ($method) {
  662. case 'POST':
  663. $result['status'] = 'success';
  664. $result['statusText'] = 'success';
  665. $result['data'] = unlock($_POST);
  666. break;
  667. default:
  668. $result['status'] = 'error';
  669. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  670. break;
  671. }
  672. break;
  673. case 'v1_lock':
  674. switch ($method) {
  675. case 'POST':
  676. $result['status'] = 'success';
  677. $result['statusText'] = 'success';
  678. $result['data'] = lock($_POST);
  679. break;
  680. default:
  681. $result['status'] = 'error';
  682. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  683. break;
  684. }
  685. break;
  686. case 'v1_test_iframe':
  687. switch ($method) {
  688. case 'POST':
  689. $result['status'] = 'success';
  690. $result['statusText'] = 'success';
  691. $result['data'] = frameTest($_POST['data']['url']);
  692. break;
  693. default:
  694. $result['status'] = 'error';
  695. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  696. break;
  697. }
  698. break;
  699. case 'v1_upgrade':
  700. case 'v1_update':
  701. case 'v1_force':
  702. switch ($method) {
  703. case 'POST':
  704. if (qualifyRequest(1)) {
  705. $result['status'] = 'success';
  706. $result['statusText'] = 'success';
  707. $result['data'] = upgradeInstall($_POST['data']['branch'], $_POST['data']['stage']);
  708. } else {
  709. $result['status'] = 'error';
  710. $result['statusText'] = 'API/Token invalid or not set';
  711. $result['data'] = null;
  712. }
  713. break;
  714. default:
  715. $result['status'] = 'error';
  716. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  717. break;
  718. }
  719. break;
  720. case 'v1_login_page':
  721. switch ($method) {
  722. case 'GET':
  723. $result['status'] = 'success';
  724. $result['statusText'] = 'success';
  725. $result['data'] = $pageLogin;
  726. break;
  727. default:
  728. $result['status'] = 'error';
  729. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  730. break;
  731. }
  732. break;
  733. case 'v1_lockscreen':
  734. switch ($method) {
  735. case 'GET':
  736. $result['status'] = 'success';
  737. $result['statusText'] = 'success';
  738. $result['data'] = $pageLockScreen;
  739. break;
  740. default:
  741. $result['status'] = 'error';
  742. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  743. break;
  744. }
  745. break;
  746. case 'v1_login_log':
  747. switch ($method) {
  748. case 'GET':
  749. if (qualifyRequest(1)) {
  750. $result['status'] = 'success';
  751. $result['statusText'] = 'success';
  752. $result['data'] = getLog('loginLog');
  753. } else {
  754. $result['status'] = 'error';
  755. $result['statusText'] = 'API/Token invalid or not set';
  756. $result['data'] = null;
  757. }
  758. break;
  759. default:
  760. $result['status'] = 'error';
  761. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  762. break;
  763. }
  764. break;
  765. case 'v1_organizr_log':
  766. switch ($method) {
  767. case 'GET':
  768. if (qualifyRequest(1)) {
  769. $result['status'] = 'success';
  770. $result['statusText'] = 'success';
  771. $result['data'] = getLog('org');
  772. } else {
  773. $result['status'] = 'error';
  774. $result['statusText'] = 'API/Token invalid or not set';
  775. $result['data'] = null;
  776. }
  777. break;
  778. default:
  779. $result['status'] = 'error';
  780. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  781. break;
  782. }
  783. break;
  784. case 'v1_user_list':
  785. switch ($method) {
  786. case 'GET':
  787. if (qualifyRequest(1)) {
  788. $result['status'] = 'success';
  789. $result['statusText'] = 'success';
  790. $result['data'] = allUsers();
  791. } else {
  792. $result['status'] = 'error';
  793. $result['statusText'] = 'API/Token invalid or not set';
  794. $result['data'] = null;
  795. }
  796. break;
  797. default:
  798. $result['status'] = 'error';
  799. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  800. break;
  801. }
  802. break;
  803. case 'v1_tab_list':
  804. switch ($method) {
  805. case 'GET':
  806. if (qualifyRequest(1)) {
  807. $result['status'] = 'success';
  808. $result['statusText'] = 'success';
  809. $result['data'] = allTabs();
  810. } else {
  811. $result['status'] = 'error';
  812. $result['statusText'] = 'API/Token invalid or not set';
  813. $result['data'] = null;
  814. }
  815. break;
  816. default:
  817. $result['status'] = 'error';
  818. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  819. break;
  820. }
  821. break;
  822. case 'v1_image_list':
  823. switch ($method) {
  824. case 'GET':
  825. if (qualifyRequest(1)) {
  826. $result['status'] = 'success';
  827. $result['statusText'] = 'success';
  828. $result['data'] = getImages();
  829. } else {
  830. $result['status'] = 'error';
  831. $result['statusText'] = 'API/Token invalid or not set';
  832. $result['data'] = null;
  833. }
  834. break;
  835. default:
  836. $result['status'] = 'error';
  837. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  838. break;
  839. }
  840. break;
  841. case 'v1_customize_appearance':
  842. switch ($method) {
  843. case 'GET':
  844. if (qualifyRequest(1)) {
  845. $result['status'] = 'success';
  846. $result['statusText'] = 'success';
  847. $result['data'] = getCustomizeAppearance();
  848. } else {
  849. $result['status'] = 'error';
  850. $result['statusText'] = 'API/Token invalid or not set';
  851. $result['data'] = null;
  852. }
  853. break;
  854. default:
  855. $result['status'] = 'error';
  856. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  857. break;
  858. }
  859. break;
  860. case 'v1_sso':
  861. switch ($method) {
  862. case 'GET':
  863. if (qualifyRequest(1)) {
  864. $result['status'] = 'success';
  865. $result['statusText'] = 'success';
  866. $result['data'] = getSSO();
  867. } else {
  868. $result['status'] = 'error';
  869. $result['statusText'] = 'API/Token invalid or not set';
  870. $result['data'] = null;
  871. }
  872. break;
  873. default:
  874. $result['status'] = 'error';
  875. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  876. break;
  877. }
  878. break;
  879. case 'v1_settings_main':
  880. switch ($method) {
  881. case 'GET':
  882. if (qualifyRequest(1)) {
  883. $result['status'] = 'success';
  884. $result['statusText'] = 'success';
  885. $result['data'] = getSettingsMain();
  886. } else {
  887. $result['status'] = 'error';
  888. $result['statusText'] = 'API/Token invalid or not set';
  889. $result['data'] = null;
  890. }
  891. break;
  892. default:
  893. $result['status'] = 'error';
  894. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  895. break;
  896. }
  897. break;
  898. case 'v1_user_edit':
  899. switch ($method) {
  900. case 'POST':
  901. if (qualifyRequest(1)) {
  902. $result['status'] = 'success';
  903. $result['statusText'] = 'success';
  904. $result['data'] = adminEditUser($_POST);
  905. } elseif (qualifyRequest(998)) {
  906. $result['status'] = 'success';
  907. $result['statusText'] = 'success';
  908. $result['data'] = editUser($_POST);
  909. } else {
  910. $result['status'] = 'error';
  911. $result['statusText'] = 'API/Token invalid or not set';
  912. $result['data'] = null;
  913. }
  914. break;
  915. default:
  916. $result['status'] = 'error';
  917. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  918. break;
  919. }
  920. break;
  921. case 'v1_logout':
  922. switch ($method) {
  923. case 'GET':
  924. $result['status'] = 'success';
  925. $result['statusText'] = 'success';
  926. $result['data'] = logout();
  927. break;
  928. default:
  929. $result['status'] = 'error';
  930. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  931. break;
  932. }
  933. break;
  934. case 'v1_launch_organizr':
  935. switch ($method) {
  936. case 'GET':
  937. $pluginSearch = '-enabled';
  938. $pluginInclude = '-include';
  939. $status = array();
  940. $result['status'] = 'success';
  941. $result['statusText'] = 'success';
  942. $status['status'] = organizrStatus();
  943. $result['appearance'] = loadAppearance();
  944. $status['user'] = $GLOBALS['organizrUser'];
  945. $status['categories'] = loadTabs()['categories'];
  946. $status['tabs'] = loadTabs()['tabs'];
  947. $status['plugins'] = array_filter($GLOBALS, function ($k) use ($pluginSearch) {
  948. return stripos($k, $pluginSearch) !== false;
  949. }, ARRAY_FILTER_USE_KEY);
  950. $status['plugins']['includes'] = array_filter($GLOBALS, function ($k) use ($pluginInclude) {
  951. return stripos($k, $pluginInclude) !== false;
  952. }, ARRAY_FILTER_USE_KEY);
  953. $result['data'] = $status;
  954. $result['branch'] = $GLOBALS['branch'];
  955. $result['theme'] = $GLOBALS['theme'];
  956. $result['style'] = $GLOBALS['style'];
  957. $result['version'] = $GLOBALS['installedVersion'];
  958. $result['sso'] = array(
  959. 'myPlexAccessToken' => isset($_COOKIE['mpt']) ? $_COOKIE['mpt'] : false,
  960. 'id_token' => isset($_COOKIE['Auth']) ? $_COOKIE['Auth'] : false
  961. );
  962. $result['settings'] = organizrSpecialSettings();
  963. break;
  964. default:
  965. $result['status'] = 'error';
  966. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  967. break;
  968. }
  969. break;
  970. case 'v1_auth':
  971. switch ($method) {
  972. case 'GET':
  973. auth();
  974. break;
  975. default:
  976. $result['status'] = 'error';
  977. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  978. break;
  979. }
  980. break;
  981. case 'v1_plugin':
  982. switch ($method) {
  983. case 'POST':
  984. // Include all plugin api Calls
  985. foreach (glob(__DIR__ . DIRECTORY_SEPARATOR . 'plugins' . DIRECTORY_SEPARATOR . 'api' . DIRECTORY_SEPARATOR . "*.php") as $filename) {
  986. require_once $filename;
  987. }
  988. break;
  989. default:
  990. $result['status'] = 'error';
  991. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  992. break;
  993. }
  994. break;
  995. case 'v1_image':
  996. switch ($method) {
  997. case 'GET':
  998. getImage();
  999. break;
  1000. default:
  1001. $result['status'] = 'error';
  1002. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1003. break;
  1004. }
  1005. break;
  1006. case 'v1_downloader':
  1007. switch ($method) {
  1008. case 'POST':
  1009. $result['status'] = 'success';
  1010. $result['statusText'] = 'success';
  1011. $result['data'] = downloader($_POST);
  1012. break;
  1013. default:
  1014. $result['status'] = 'error';
  1015. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1016. break;
  1017. }
  1018. break;
  1019. case 'v1_ombi':
  1020. switch ($method) {
  1021. case 'POST':
  1022. $result['status'] = 'success';
  1023. $result['statusText'] = 'success';
  1024. $result['data'] = ombiAPI($_POST);
  1025. break;
  1026. default:
  1027. $result['status'] = 'error';
  1028. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1029. break;
  1030. }
  1031. break;
  1032. case 'v1_plex_join':
  1033. switch ($method) {
  1034. case 'POST':
  1035. $result['status'] = 'success';
  1036. $result['statusText'] = 'success';
  1037. $result['data'] = plexJoinAPI($_POST);
  1038. break;
  1039. default:
  1040. $result['status'] = 'error';
  1041. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1042. break;
  1043. }
  1044. break;
  1045. default:
  1046. //No Function Available
  1047. $result['status'] = 'error';
  1048. $result['statusText'] = 'function requested is not defined';
  1049. break;
  1050. }
  1051. //Set Default Result
  1052. if (!$result) {
  1053. $result['status'] = "error";
  1054. $result['error'] = "An error has occurred";
  1055. }
  1056. $result['generationDate'] = $GLOBALS['currentTime'];
  1057. $generationTime += microtime(true);
  1058. $result['generationTime'] = (sprintf('%f', $generationTime) * 1000) . 'ms';
  1059. //return JSON array
  1060. exit(json_encode($result, JSON_HEX_QUOT | JSON_HEX_TAG));