api-functions.php 37 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174
  1. <?php /** @noinspection SqlResolve */
  2. /** @noinspection SqlResolve */
  3. /** @noinspection SqlResolve */
  4. /** @noinspection SqlResolve */
  5. /** @noinspection SyntaxError */
  6. function login($array)
  7. {
  8. // Grab username and Password from login form
  9. $username = $password = $oAuth = $oAuthType = '';
  10. foreach ($array['data'] as $items) {
  11. foreach ($items as $key => $value) {
  12. if ($key == 'name') {
  13. $newKey = $value;
  14. }
  15. if ($key == 'value') {
  16. $newValue = $value;
  17. }
  18. if (isset($newKey) && isset($newValue)) {
  19. $$newKey = $newValue;
  20. }
  21. }
  22. }
  23. $username = (strpos($GLOBALS['authBackend'], 'emby') !== false) ? $username : strtolower($username);
  24. $days = (isset($remember)) ? $GLOBALS['rememberMeDays'] : 1;
  25. $oAuth = (isset($oAuth)) ? $oAuth : false;
  26. try {
  27. $database = new Dibi\Connection([
  28. 'driver' => 'sqlite3',
  29. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  30. ]);
  31. $authSuccess = false;
  32. $function = 'plugin_auth_' . $GLOBALS['authBackend'];
  33. if (!$oAuth) {
  34. $result = $database->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $username, $username);
  35. switch ($GLOBALS['authType']) {
  36. case 'external':
  37. if (function_exists($function)) {
  38. $authSuccess = $function($username, $password);
  39. }
  40. break;
  41. /** @noinspection PhpMissingBreakStatementInspection */
  42. case 'both':
  43. if (function_exists($function)) {
  44. $authSuccess = $function($username, $password);
  45. }
  46. // no break
  47. default: // Internal
  48. if (!$authSuccess) {
  49. // perform the internal authentication step
  50. if (password_verify($password, $result['password'])) {
  51. $authSuccess = true;
  52. }
  53. }
  54. }
  55. } else {
  56. // Has oAuth Token!
  57. switch ($oAuthType) {
  58. case 'plex':
  59. if ($GLOBALS['plexoAuth']) {
  60. $tokenInfo = checkPlexToken($oAuth);
  61. if ($tokenInfo) {
  62. $authSuccess = array(
  63. 'username' => $tokenInfo['user']['username'],
  64. 'email' => $tokenInfo['user']['email'],
  65. 'image' => $tokenInfo['user']['thumb'],
  66. 'token' => $tokenInfo['user']['authToken']
  67. );
  68. coookie('set', 'oAuth', 'true', $GLOBALS['rememberMeDays']);
  69. $authSuccess = ((!empty($GLOBALS['plexAdmin']) && strtolower($GLOBALS['plexAdmin']) == strtolower($tokenInfo['user']['username'])) || (!empty($GLOBALS['plexAdmin']) && strtolower($GLOBALS['plexAdmin']) == strtolower($tokenInfo['user']['email'])) || checkPlexUser($tokenInfo['user']['username'])) ? $authSuccess : false;
  70. }
  71. }
  72. break;
  73. default:
  74. return 'error';
  75. break;
  76. }
  77. $result = ($authSuccess) ? $database->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $authSuccess['username'], $authSuccess['email']) : '';
  78. }
  79. if ($authSuccess) {
  80. // Make sure user exists in database
  81. $userExists = false;
  82. $passwordMatches = ($oAuth) ? true : false;
  83. $token = (is_array($authSuccess) && isset($authSuccess['token']) ? $authSuccess['token'] : '');
  84. if ($result['username']) {
  85. $userExists = true;
  86. $username = $result['username'];
  87. if ($passwordMatches == false) {
  88. $passwordMatches = (password_verify($password, $result['password'])) ? true : false;
  89. }
  90. }
  91. if ($userExists) {
  92. //does org password need to be updated
  93. if (!$passwordMatches) {
  94. $database->query('
  95. UPDATE users SET', [
  96. 'password' => password_hash($password, PASSWORD_BCRYPT)
  97. ], '
  98. WHERE id=?', $result['id']);
  99. writeLog('success', 'Login Function - User Password updated from backend', $username);
  100. }
  101. if ($token !== '') {
  102. if ($token !== $result['plex_token']) {
  103. $database->query('
  104. UPDATE users SET', [
  105. 'plex_token' => $token
  106. ], '
  107. WHERE id=?', $result['id']);
  108. writeLog('success', 'Login Function - User Plex Token updated from backend', $username);
  109. }
  110. }
  111. // 2FA might go here
  112. if ($result['auth_service'] !== 'internal' && strpos($result['auth_service'], '::') !== false) {
  113. $TFA = explode('::', $result['auth_service']);
  114. // Is code with login info?
  115. if ($tfaCode == '') {
  116. return '2FA';
  117. } else {
  118. if (!verify2FA($TFA[1], $tfaCode, $TFA[0])) {
  119. writeLoginLog($username, 'error');
  120. writeLog('error', 'Login Function - Wrong 2FA', $username);
  121. return '2FA-incorrect';
  122. }
  123. }
  124. }
  125. // End 2FA
  126. // authentication passed - 1) mark active and update token
  127. if (createToken($result['username'], $result['email'], $result['image'], $result['group'], $result['group_id'], $GLOBALS['organizrHash'], $days)) {
  128. writeLoginLog($username, 'success');
  129. writeLog('success', 'Login Function - A User has logged in', $username);
  130. $ssoUser = (empty($result['email'])) ? $result['username'] : $result['email'];
  131. ssoCheck($ssoUser, $password, $token); //need to work on this
  132. return true;
  133. } else {
  134. return 'Token Creation Error';
  135. }
  136. } else {
  137. // Create User
  138. //ssoCheck($username, $password, $token);
  139. return authRegister((is_array($authSuccess) && isset($authSuccess['username']) ? $authSuccess['username'] : $username), $password, defaultUserGroup(), (is_array($authSuccess) && isset($authSuccess['email']) ? $authSuccess['email'] : ''), $token);
  140. }
  141. } else {
  142. // authentication failed
  143. writeLoginLog($username, 'error');
  144. writeLog('error', 'Login Function - Wrong Password', $username);
  145. return 'mismatch';
  146. }
  147. } catch (Dibi\Exception $e) {
  148. return $e;
  149. }
  150. }
  151. function createDB($path, $filename)
  152. {
  153. try {
  154. if (!file_exists($path)) {
  155. mkdir($path, 0777, true);
  156. }
  157. $createDB = new Dibi\Connection([
  158. 'driver' => 'sqlite3',
  159. 'database' => $path . $filename,
  160. ]);
  161. // Create Users
  162. $createDB->query('CREATE TABLE `users` (
  163. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  164. `username` TEXT UNIQUE,
  165. `password` TEXT,
  166. `email` TEXT,
  167. `plex_token` TEXT,
  168. `group` TEXT,
  169. `group_id` INTEGER,
  170. `locked` INTEGER,
  171. `image` TEXT,
  172. `register_date` DATE,
  173. `auth_service` TEXT DEFAULT \'internal\'
  174. );');
  175. // Create Tokens
  176. $createDB->query('CREATE TABLE `chatroom` (
  177. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  178. `username` TEXT,
  179. `gravatar` TEXT,
  180. `uid` TEXT,
  181. `date` DATE,
  182. `ip` TEXT,
  183. `message` TEXT
  184. );');
  185. $createDB->query('CREATE TABLE `tokens` (
  186. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  187. `token` TEXT UNIQUE,
  188. `user_id` INTEGER,
  189. `browser` TEXT,
  190. `ip` TEXT,
  191. `created` DATE,
  192. `expires` DATE
  193. );');
  194. $createDB->query('CREATE TABLE `groups` (
  195. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  196. `group` TEXT UNIQUE,
  197. `group_id` INTEGER,
  198. `image` TEXT,
  199. `default` INTEGER
  200. );');
  201. $createDB->query('CREATE TABLE `categories` (
  202. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  203. `order` INTEGER,
  204. `category` TEXT UNIQUE,
  205. `category_id` INTEGER,
  206. `image` TEXT,
  207. `default` INTEGER
  208. );');
  209. // Create Tabs
  210. $createDB->query('CREATE TABLE `tabs` (
  211. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  212. `order` INTEGER,
  213. `category_id` INTEGER,
  214. `name` TEXT,
  215. `url` TEXT,
  216. `url_local` TEXT,
  217. `default` INTEGER,
  218. `enabled` INTEGER,
  219. `group_id` INTEGER,
  220. `image` TEXT,
  221. `type` INTEGER,
  222. `splash` INTEGER,
  223. `ping` INTEGER,
  224. `ping_url` TEXT,
  225. `timeout` INTEGER,
  226. `timeout_ms` INTEGER,
  227. `preload` INTEGER
  228. );');
  229. // Create Options
  230. $createDB->query('CREATE TABLE `options` (
  231. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  232. `name` TEXT UNIQUE,
  233. `value` TEXT
  234. );');
  235. // Create Invites
  236. $createDB->query('CREATE TABLE `invites` (
  237. `id` INTEGER PRIMARY KEY AUTOINCREMENT UNIQUE,
  238. `code` TEXT UNIQUE,
  239. `date` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
  240. `email` TEXT,
  241. `username` TEXT,
  242. `dateused` TIMESTAMP,
  243. `usedby` TEXT,
  244. `ip` TEXT,
  245. `valid` TEXT,
  246. `type` TEXT
  247. );');
  248. return true;
  249. } catch (Dibi\Exception $e) {
  250. return false;
  251. }
  252. }
  253. // Upgrade Database
  254. function updateDB($oldVerNum = false)
  255. {
  256. $tempLock = $GLOBALS['dbLocation'] . 'DBLOCK.txt';
  257. if (!file_exists($tempLock)) {
  258. touch($tempLock);
  259. // Create Temp DB First
  260. $migrationDB = 'tempMigration.db';
  261. $pathDigest = pathinfo($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  262. if (file_exists($GLOBALS['dbLocation'] . $migrationDB)) {
  263. unlink($GLOBALS['dbLocation'] . $migrationDB);
  264. }
  265. $backupDB = $pathDigest['dirname'] . '/' . $pathDigest['filename'] . '[' . date('Y-m-d_H-i-s') . ']' . ($oldVerNum ? '[' . $oldVerNum . ']' : '') . '.bak.db';
  266. copy($GLOBALS['dbLocation'] . $GLOBALS['dbName'], $backupDB);
  267. $success = createDB($GLOBALS['dbLocation'], $migrationDB);
  268. if ($success) {
  269. try {
  270. $connectOldDB = new Dibi\Connection([
  271. 'driver' => 'sqlite3',
  272. 'database' => $backupDB,
  273. ]);
  274. $connectNewDB = new Dibi\Connection([
  275. 'driver' => 'sqlite3',
  276. 'database' => $GLOBALS['dbLocation'] . $migrationDB,
  277. ]);
  278. $tables = $connectOldDB->fetchAll('SELECT name FROM sqlite_master WHERE type="table"');
  279. foreach ($tables as $table) {
  280. $data = $connectOldDB->fetchAll('SELECT * FROM ' . $table['name']);
  281. writeLog('success', 'Update Function - Grabbed Table data for Table: ' . $table['name'], 'Database');
  282. foreach ($data as $row) {
  283. $connectNewDB->query('INSERT into ' . $table['name'], $row);
  284. }
  285. writeLog('success', 'Update Function - Wrote Table data for Table: ' . $table['name'], 'Database');
  286. }
  287. writeLog('success', 'Update Function - All Table data converted - Starting Movement', 'Database');
  288. $connectOldDB->disconnect();
  289. $connectNewDB->disconnect();
  290. // Remove Current Database
  291. if (file_exists($GLOBALS['dbLocation'] . $migrationDB)) {
  292. $oldFileSize = filesize($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  293. $newFileSize = filesize($GLOBALS['dbLocation'] . $migrationDB);
  294. if ($newFileSize > 0) {
  295. writeLog('success', 'Update Function - Table Size of new DB ok..', 'Database');
  296. @unlink($GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  297. copy($GLOBALS['dbLocation'] . $migrationDB, $GLOBALS['dbLocation'] . $GLOBALS['dbName']);
  298. @unlink($GLOBALS['dbLocation'] . $migrationDB);
  299. writeLog('success', 'Update Function - Migrated Old Info to new Database', 'Database');
  300. @unlink($tempLock);
  301. return true;
  302. }
  303. }
  304. @unlink($tempLock);
  305. return false;
  306. } catch (Dibi\Exception $e) {
  307. writeLog('error', 'Update Function - Error [' . $e . ']', 'Database');
  308. @unlink($tempLock);
  309. return false;
  310. }
  311. }
  312. @unlink($tempLock);
  313. return false;
  314. }
  315. return false;
  316. }
  317. function createFirstAdmin($path, $filename, $username, $password, $email)
  318. {
  319. try {
  320. $createDB = new Dibi\Connection([
  321. 'driver' => 'sqlite3',
  322. 'database' => $path . $filename,
  323. ]);
  324. $userInfo = [
  325. 'username' => $username,
  326. 'password' => password_hash($password, PASSWORD_BCRYPT),
  327. 'email' => $email,
  328. 'group' => 'Admin',
  329. 'group_id' => 0,
  330. 'image' => gravatar($email),
  331. 'register_date' => $GLOBALS['currentTime'],
  332. ];
  333. $groupInfo0 = [
  334. 'group' => 'Admin',
  335. 'group_id' => 0,
  336. 'default' => false,
  337. 'image' => 'plugins/images/groups/admin.png',
  338. ];
  339. $groupInfo1 = [
  340. 'group' => 'Co-Admin',
  341. 'group_id' => 1,
  342. 'default' => false,
  343. 'image' => 'plugins/images/groups/coadmin.png',
  344. ];
  345. $groupInfo2 = [
  346. 'group' => 'Super User',
  347. 'group_id' => 2,
  348. 'default' => false,
  349. 'image' => 'plugins/images/groups/superuser.png',
  350. ];
  351. $groupInfo3 = [
  352. 'group' => 'Power User',
  353. 'group_id' => 3,
  354. 'default' => false,
  355. 'image' => 'plugins/images/groups/poweruser.png',
  356. ];
  357. $groupInfo4 = [
  358. 'group' => 'User',
  359. 'group_id' => 4,
  360. 'default' => true,
  361. 'image' => 'plugins/images/groups/user.png',
  362. ];
  363. $groupInfoGuest = [
  364. 'group' => 'Guest',
  365. 'group_id' => 999,
  366. 'default' => false,
  367. 'image' => 'plugins/images/groups/guest.png',
  368. ];
  369. $settingsInfo = [
  370. 'order' => 1,
  371. 'category_id' => 0,
  372. 'name' => 'Settings',
  373. 'url' => 'api/?v1/settings/page',
  374. 'default' => false,
  375. 'enabled' => true,
  376. 'group_id' => 1,
  377. 'image' => 'fontawesome::cog',
  378. 'type' => 0
  379. ];
  380. $homepageInfo = [
  381. 'order' => 2,
  382. 'category_id' => 0,
  383. 'name' => 'Homepage',
  384. 'url' => 'api/?v1/homepage/page',
  385. 'default' => false,
  386. 'enabled' => false,
  387. 'group_id' => 4,
  388. 'image' => 'fontawesome::home',
  389. 'type' => 0
  390. ];
  391. $unsortedInfo = [
  392. 'order' => 1,
  393. 'category' => 'Unsorted',
  394. 'category_id' => 0,
  395. 'image' => 'plugins/images/categories/unsorted.png',
  396. 'default' => true
  397. ];
  398. $createDB->query('INSERT INTO [users]', $userInfo);
  399. $createDB->query('INSERT INTO [groups]', $groupInfo0);
  400. $createDB->query('INSERT INTO [groups]', $groupInfo1);
  401. $createDB->query('INSERT INTO [groups]', $groupInfo2);
  402. $createDB->query('INSERT INTO [groups]', $groupInfo3);
  403. $createDB->query('INSERT INTO [groups]', $groupInfo4);
  404. $createDB->query('INSERT INTO [groups]', $groupInfoGuest);
  405. $createDB->query('INSERT INTO [tabs]', $settingsInfo);
  406. $createDB->query('INSERT INTO [tabs]', $homepageInfo);
  407. $createDB->query('INSERT INTO [categories]', $unsortedInfo);
  408. return true;
  409. } catch (Dibi\Exception $e) {
  410. writeLog('error', 'Wizard Function - Error [' . $e . ']', 'Wizard');
  411. return false;
  412. }
  413. }
  414. function defaultUserGroup()
  415. {
  416. try {
  417. $connect = new Dibi\Connection([
  418. 'driver' => 'sqlite3',
  419. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  420. ]);
  421. $all = $connect->fetch('SELECT * FROM groups WHERE `default` = 1');
  422. return $all;
  423. } catch (Dibi\Exception $e) {
  424. return false;
  425. }
  426. }
  427. function defaultTabCategory()
  428. {
  429. try {
  430. $connect = new Dibi\Connection([
  431. 'driver' => 'sqlite3',
  432. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  433. ]);
  434. $all = $connect->fetch('SELECT * FROM categories WHERE `default` = 1');
  435. return $all;
  436. } catch (Dibi\Exception $e) {
  437. return false;
  438. }
  439. }
  440. function getGuest()
  441. {
  442. if (isset($GLOBALS['dbLocation'])) {
  443. try {
  444. $connect = new Dibi\Connection([
  445. 'driver' => 'sqlite3',
  446. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  447. ]);
  448. $all = $connect->fetch('SELECT * FROM groups WHERE `group_id` = 999');
  449. return $all;
  450. } catch (Dibi\Exception $e) {
  451. return false;
  452. }
  453. } else {
  454. return array(
  455. 'group' => 'Guest',
  456. 'group_id' => 999,
  457. 'image' => 'plugins/images/groups/guest.png'
  458. );
  459. }
  460. }
  461. function adminEditGroup($array)
  462. {
  463. switch ($array['data']['action']) {
  464. case 'changeDefaultGroup':
  465. try {
  466. $connect = new Dibi\Connection([
  467. 'driver' => 'sqlite3',
  468. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  469. ]);
  470. $connect->query('UPDATE groups SET `default` = 0');
  471. $connect->query('
  472. UPDATE groups SET', [
  473. 'default' => 1
  474. ], '
  475. WHERE id=?', $array['data']['id']);
  476. writeLog('success', 'Group Management Function - Changed Default Group from [' . $array['data']['oldGroupName'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  477. return true;
  478. } catch (Dibi\Exception $e) {
  479. return false;
  480. }
  481. break;
  482. case 'deleteUserGroup':
  483. try {
  484. $connect = new Dibi\Connection([
  485. 'driver' => 'sqlite3',
  486. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  487. ]);
  488. $connect->query('DELETE FROM groups WHERE id = ?', $array['data']['id']);
  489. writeLog('success', 'Group Management Function - Deleted Group [' . $array['data']['groupName'] . ']', $GLOBALS['organizrUser']['username']);
  490. return true;
  491. } catch (Dibi\Exception $e) {
  492. return false;
  493. }
  494. break;
  495. case 'addUserGroup':
  496. try {
  497. $connect = new Dibi\Connection([
  498. 'driver' => 'sqlite3',
  499. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  500. ]);
  501. $newGroup = [
  502. 'group' => $array['data']['newGroupName'],
  503. 'group_id' => $array['data']['newGroupID'],
  504. 'default' => false,
  505. 'image' => $array['data']['newGroupImage'],
  506. ];
  507. $connect->query('INSERT INTO [groups]', $newGroup);
  508. writeLog('success', 'Group Management Function - Added Group [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  509. return true;
  510. } catch (Dibi\Exception $e) {
  511. return false;
  512. }
  513. break;
  514. case 'editUserGroup':
  515. try {
  516. $connect = new Dibi\Connection([
  517. 'driver' => 'sqlite3',
  518. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  519. ]);
  520. $connect->query('
  521. UPDATE groups SET', [
  522. 'group' => $array['data']['groupName'],
  523. 'image' => $array['data']['groupImage'],
  524. ], '
  525. WHERE id=?', $array['data']['id']);
  526. writeLog('success', 'Group Management Function - Edited Group Info for [' . $array['data']['oldGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  527. return true;
  528. } catch (Dibi\Exception $e) {
  529. return false;
  530. }
  531. break;
  532. default:
  533. return false;
  534. break;
  535. }
  536. }
  537. function adminEditUser($array)
  538. {
  539. switch ($array['data']['action']) {
  540. case 'changeGroup':
  541. try {
  542. $connect = new Dibi\Connection([
  543. 'driver' => 'sqlite3',
  544. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  545. ]);
  546. $connect->query('
  547. UPDATE users SET', [
  548. 'group' => $array['data']['newGroupName'],
  549. 'group_id' => $array['data']['newGroupID'],
  550. ], '
  551. WHERE id=?', $array['data']['id']);
  552. writeLog('success', 'User Management Function - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  553. return true;
  554. } catch (Dibi\Exception $e) {
  555. writeLog('error', 'User Management Function - Error - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  556. return false;
  557. }
  558. break;
  559. case 'editUser':
  560. try {
  561. $connect = new Dibi\Connection([
  562. 'driver' => 'sqlite3',
  563. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  564. ]);
  565. if (!usernameTakenExcept($array['data']['username'], $array['data']['email'], $array['data']['id'])) {
  566. $connect->query('
  567. UPDATE users SET', [
  568. 'username' => $array['data']['username'],
  569. 'email' => $array['data']['email'],
  570. 'image' => gravatar($array['data']['email']),
  571. ], '
  572. WHERE id=?', $array['data']['id']);
  573. if (!empty($array['data']['password'])) {
  574. $connect->query('
  575. UPDATE users SET', [
  576. 'password' => password_hash($array['data']['password'], PASSWORD_BCRYPT)
  577. ], '
  578. WHERE id=?', $array['data']['id']);
  579. }
  580. writeLog('success', 'User Management Function - User: ' . $array['data']['username'] . '\'s info was changed', $GLOBALS['organizrUser']['username']);
  581. return true;
  582. } else {
  583. return false;
  584. }
  585. } catch (Dibi\Exception $e) {
  586. writeLog('error', 'User Management Function - Error - User: ' . $array['data']['username'] . '\'s group was changed from [' . $array['data']['oldGroup'] . '] to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  587. return false;
  588. }
  589. break;
  590. case 'addNewUser':
  591. $defaults = defaultUserGroup();
  592. if (createUser($array['data']['username'], $array['data']['password'], $defaults, $array['data']['email'])) {
  593. writeLog('success', 'Create User Function - Account created for [' . $array['data']['username'] . ']', $GLOBALS['organizrUser']['username']);
  594. return true;
  595. } else {
  596. writeLog('error', 'Registration Function - An error occurred', $GLOBALS['organizrUser']['username']);
  597. return 'username taken';
  598. }
  599. break;
  600. case 'deleteUser':
  601. try {
  602. $connect = new Dibi\Connection([
  603. 'driver' => 'sqlite3',
  604. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  605. ]);
  606. $connect->query('DELETE FROM users WHERE id = ?', $array['data']['id']);
  607. writeLog('success', 'User Management Function - Deleted User [' . $array['data']['username'] . ']', $GLOBALS['organizrUser']['username']);
  608. return true;
  609. } catch (Dibi\Exception $e) {
  610. return false;
  611. }
  612. break;
  613. default:
  614. return false;
  615. break;
  616. }
  617. }
  618. function editTabs($array)
  619. {
  620. switch ($array['data']['action']) {
  621. case 'changeGroup':
  622. try {
  623. $connect = new Dibi\Connection([
  624. 'driver' => 'sqlite3',
  625. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  626. ]);
  627. $connect->query('
  628. UPDATE tabs SET', [
  629. 'group_id' => $array['data']['newGroupID'],
  630. ], '
  631. WHERE id=?', $array['data']['id']);
  632. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s group was changed to [' . $array['data']['newGroupName'] . ']', $GLOBALS['organizrUser']['username']);
  633. return true;
  634. } catch (Dibi\Exception $e) {
  635. return false;
  636. }
  637. break;
  638. case 'changeCategory':
  639. try {
  640. $connect = new Dibi\Connection([
  641. 'driver' => 'sqlite3',
  642. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  643. ]);
  644. $connect->query('
  645. UPDATE tabs SET', [
  646. 'category_id' => $array['data']['newCategoryID'],
  647. ], '
  648. WHERE id=?', $array['data']['id']);
  649. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s category was changed to [' . $array['data']['newCategoryName'] . ']', $GLOBALS['organizrUser']['username']);
  650. return true;
  651. } catch (Dibi\Exception $e) {
  652. return false;
  653. }
  654. break;
  655. case 'changeType':
  656. try {
  657. $connect = new Dibi\Connection([
  658. 'driver' => 'sqlite3',
  659. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  660. ]);
  661. $connect->query('
  662. UPDATE tabs SET', [
  663. 'type' => $array['data']['newTypeID'],
  664. ], '
  665. WHERE id=?', $array['data']['id']);
  666. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s type was changed to [' . $array['data']['newTypeName'] . ']', $GLOBALS['organizrUser']['username']);
  667. return true;
  668. } catch (Dibi\Exception $e) {
  669. return false;
  670. }
  671. break;
  672. case 'changeEnabled':
  673. try {
  674. $connect = new Dibi\Connection([
  675. 'driver' => 'sqlite3',
  676. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  677. ]);
  678. $connect->query('
  679. UPDATE tabs SET', [
  680. 'enabled' => $array['data']['tabEnabled'],
  681. ], '
  682. WHERE id=?', $array['data']['id']);
  683. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s enable status was changed to [' . $array['data']['tabEnabledWord'] . ']', $GLOBALS['organizrUser']['username']);
  684. return true;
  685. } catch (Dibi\Exception $e) {
  686. return false;
  687. }
  688. break;
  689. case 'changeSplash':
  690. try {
  691. $connect = new Dibi\Connection([
  692. 'driver' => 'sqlite3',
  693. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  694. ]);
  695. $connect->query('
  696. UPDATE tabs SET', [
  697. 'splash' => $array['data']['tabSplash'],
  698. ], '
  699. WHERE id=?', $array['data']['id']);
  700. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s splash status was changed to [' . $array['data']['tabSplashWord'] . ']', $GLOBALS['organizrUser']['username']);
  701. return true;
  702. } catch (Dibi\Exception $e) {
  703. return false;
  704. }
  705. break;
  706. case 'changePing':
  707. try {
  708. $connect = new Dibi\Connection([
  709. 'driver' => 'sqlite3',
  710. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  711. ]);
  712. $connect->query('
  713. UPDATE tabs SET', [
  714. 'ping' => $array['data']['tabPing'],
  715. ], '
  716. WHERE id=?', $array['data']['id']);
  717. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s ping status was changed to [' . $array['data']['tabPingWord'] . ']', $GLOBALS['organizrUser']['username']);
  718. return true;
  719. } catch (Dibi\Exception $e) {
  720. return false;
  721. }
  722. break;
  723. case 'changePreload':
  724. try {
  725. $connect = new Dibi\Connection([
  726. 'driver' => 'sqlite3',
  727. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  728. ]);
  729. $connect->query('
  730. UPDATE tabs SET', [
  731. 'preload' => $array['data']['tabPreload'],
  732. ], '
  733. WHERE id=?', $array['data']['id']);
  734. writeLog('success', 'Tab Editor Function - Tab: ' . $array['data']['tab'] . '\'s preload status was changed to [' . $array['data']['tabPreloadWord'] . ']', $GLOBALS['organizrUser']['username']);
  735. return true;
  736. } catch (Dibi\Exception $e) {
  737. return false;
  738. }
  739. break;
  740. case 'changeDefault':
  741. try {
  742. $connect = new Dibi\Connection([
  743. 'driver' => 'sqlite3',
  744. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  745. ]);
  746. $connect->query('UPDATE tabs SET `default` = 0');
  747. $connect->query('
  748. UPDATE tabs SET', [
  749. 'default' => 1
  750. ], '
  751. WHERE id=?', $array['data']['id']);
  752. writeLog('success', 'Tab Editor Function - Changed Default Tab to [' . $array['data']['tab'] . ']', $GLOBALS['organizrUser']['username']);
  753. return true;
  754. } catch (Dibi\Exception $e) {
  755. return false;
  756. }
  757. break;
  758. case 'deleteTab':
  759. try {
  760. $connect = new Dibi\Connection([
  761. 'driver' => 'sqlite3',
  762. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  763. ]);
  764. $connect->query('DELETE FROM tabs WHERE id = ?', $array['data']['id']);
  765. writeLog('success', 'Tab Editor Function - Deleted Tab [' . $array['data']['tab'] . ']', $GLOBALS['organizrUser']['username']);
  766. return true;
  767. } catch (Dibi\Exception $e) {
  768. return false;
  769. }
  770. break;
  771. case 'editTab':
  772. try {
  773. $connect = new Dibi\Connection([
  774. 'driver' => 'sqlite3',
  775. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  776. ]);
  777. $connect->query('
  778. UPDATE tabs SET', [
  779. 'name' => $array['data']['tabName'],
  780. 'url' => $array['data']['tabURL'],
  781. 'url_local' => $array['data']['tabLocalURL'],
  782. 'ping_url' => $array['data']['pingURL'],
  783. 'image' => $array['data']['tabImage'],
  784. ], '
  785. WHERE id=?', $array['data']['id']);
  786. writeLog('success', 'Tab Editor Function - Edited Tab Info for [' . $array['data']['tabName'] . ']', $GLOBALS['organizrUser']['username']);
  787. return true;
  788. } catch (Dibi\Exception $e) {
  789. return false;
  790. }
  791. case 'changeOrder':
  792. try {
  793. $connect = new Dibi\Connection([
  794. 'driver' => 'sqlite3',
  795. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  796. ]);
  797. foreach ($array['data']['tabs']['tab'] as $key => $value) {
  798. if ($value['order'] != $value['originalOrder']) {
  799. $connect->query('
  800. UPDATE tabs SET', [
  801. 'order' => $value['order'],
  802. ], '
  803. WHERE id=?', $value['id']);
  804. writeLog('success', 'Tab Editor Function - ' . $value['name'] . ' Order Changed From ' . $value['order'] . ' to ' . $value['originalOrder'], $GLOBALS['organizrUser']['username']);
  805. }
  806. }
  807. writeLog('success', 'Tab Editor Function - Tab Order Changed', $GLOBALS['organizrUser']['username']);
  808. return true;
  809. } catch (Dibi\Exception $e) {
  810. return false;
  811. }
  812. break;
  813. case 'addNewTab':
  814. try {
  815. $default = defaultTabCategory()['category_id'];
  816. $connect = new Dibi\Connection([
  817. 'driver' => 'sqlite3',
  818. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  819. ]);
  820. $newTab = [
  821. 'order' => $array['data']['tabOrder'],
  822. 'category_id' => $default,
  823. 'name' => $array['data']['tabName'],
  824. 'url' => $array['data']['tabURL'],
  825. 'url_local' => $array['data']['tabLocalURL'],
  826. 'ping_url' => $array['data']['pingURL'],
  827. 'default' => $array['data']['tabDefault'],
  828. 'enabled' => 1,
  829. 'group_id' => $array['data']['tabGroupID'],
  830. 'image' => $array['data']['tabImage'],
  831. 'type' => $array['data']['tabType']
  832. ];
  833. $connect->query('INSERT INTO [tabs]', $newTab);
  834. writeLog('success', 'Tab Editor Function - Created Tab for: ' . $array['data']['tabName'], $GLOBALS['organizrUser']['username']);
  835. return true;
  836. } catch (Dibi\Exception $e) {
  837. return false;
  838. }
  839. break;
  840. default:
  841. return false;
  842. break;
  843. }
  844. }
  845. function editCategories($array)
  846. {
  847. switch ($array['data']['action']) {
  848. case 'changeDefault':
  849. try {
  850. $connect = new Dibi\Connection([
  851. 'driver' => 'sqlite3',
  852. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  853. ]);
  854. $connect->query('UPDATE categories SET `default` = 0');
  855. $connect->query('
  856. UPDATE categories SET', [
  857. 'default' => 1
  858. ], '
  859. WHERE id=?', $array['data']['id']);
  860. writeLog('success', 'Category Editor Function - Changed Default Category from [' . $array['data']['oldCategoryName'] . '] to [' . $array['data']['newCategoryName'] . ']', $GLOBALS['organizrUser']['username']);
  861. return true;
  862. } catch (Dibi\Exception $e) {
  863. return false;
  864. }
  865. break;
  866. case 'deleteCategory':
  867. try {
  868. $connect = new Dibi\Connection([
  869. 'driver' => 'sqlite3',
  870. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  871. ]);
  872. $connect->query('DELETE FROM categories WHERE id = ?', $array['data']['id']);
  873. writeLog('success', 'Category Editor Function - Deleted Category [' . $array['data']['category'] . ']', $GLOBALS['organizrUser']['username']);
  874. return true;
  875. } catch (Dibi\Exception $e) {
  876. return false;
  877. }
  878. break;
  879. case 'addNewCategory':
  880. try {
  881. $connect = new Dibi\Connection([
  882. 'driver' => 'sqlite3',
  883. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  884. ]);
  885. $newCategory = [
  886. 'category' => $array['data']['categoryName'],
  887. 'order' => $array['data']['categoryOrder'],
  888. 'category_id' => $array['data']['categoryID'],
  889. 'default' => false,
  890. 'image' => $array['data']['categoryImage'],
  891. ];
  892. $connect->query('INSERT INTO [categories]', $newCategory);
  893. writeLog('success', 'Category Editor Function - Added Category [' . $array['data']['categoryName'] . ']', $GLOBALS['organizrUser']['username']);
  894. return true;
  895. } catch (Dibi\Exception $e) {
  896. return $e;
  897. }
  898. break;
  899. case 'editCategory':
  900. try {
  901. $connect = new Dibi\Connection([
  902. 'driver' => 'sqlite3',
  903. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  904. ]);
  905. $connect->query('
  906. UPDATE categories SET', [
  907. 'category' => $array['data']['name'],
  908. 'image' => $array['data']['image'],
  909. ], '
  910. WHERE id=?', $array['data']['id']);
  911. writeLog('success', 'Category Editor Function - Edited Category Info for [' . $array['data']['name'] . ']', $GLOBALS['organizrUser']['username']);
  912. return true;
  913. } catch (Dibi\Exception $e) {
  914. return false;
  915. }
  916. break;
  917. case 'changeOrder':
  918. try {
  919. $connect = new Dibi\Connection([
  920. 'driver' => 'sqlite3',
  921. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  922. ]);
  923. foreach ($array['data']['categories']['category'] as $key => $value) {
  924. if ($value['order'] != $value['originalOrder']) {
  925. $connect->query('
  926. UPDATE categories SET', [
  927. 'order' => $value['order'],
  928. ], '
  929. WHERE id=?', $value['id']);
  930. writeLog('success', 'Category Editor Function - ' . $value['name'] . ' Order Changed From ' . $value['order'] . ' to ' . $value['originalOrder'], $GLOBALS['organizrUser']['username']);
  931. }
  932. }
  933. writeLog('success', 'Category Editor Function - Category Order Changed', $GLOBALS['organizrUser']['username']);
  934. return true;
  935. } catch (Dibi\Exception $e) {
  936. return false;
  937. }
  938. break;
  939. default:
  940. return false;
  941. break;
  942. }
  943. }
  944. function allUsers()
  945. {
  946. try {
  947. $connect = new Dibi\Connection([
  948. 'driver' => 'sqlite3',
  949. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  950. ]);
  951. $users = $connect->fetchAll('SELECT * FROM users');
  952. $groups = $connect->fetchAll('SELECT * FROM groups ORDER BY group_id ASC');
  953. foreach ($users as $k => $v) {
  954. // clear password from array
  955. unset($users[$k]['password']);
  956. }
  957. $all['users'] = $users;
  958. $all['groups'] = $groups;
  959. return $all;
  960. } catch (Dibi\Exception $e) {
  961. return false;
  962. }
  963. }
  964. function usernameTaken($username, $email)
  965. {
  966. try {
  967. $connect = new Dibi\Connection([
  968. 'driver' => 'sqlite3',
  969. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  970. ]);
  971. $all = $connect->fetch('SELECT * FROM users WHERE username = ? COLLATE NOCASE OR email = ? COLLATE NOCASE', $username, $email);
  972. return ($all) ? true : false;
  973. } catch (Dibi\Exception $e) {
  974. return false;
  975. }
  976. }
  977. function usernameTakenExcept($username, $email, $id)
  978. {
  979. try {
  980. $connect = new Dibi\Connection([
  981. 'driver' => 'sqlite3',
  982. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  983. ]);
  984. $all = $connect->fetch('SELECT * FROM users WHERE id IS NOT ? AND username = ? COLLATE NOCASE OR id IS NOT ? AND email = ? COLLATE NOCASE', $id, $username, $id, $email);
  985. return ($all) ? true : false;
  986. } catch (Dibi\Exception $e) {
  987. return false;
  988. }
  989. }
  990. function createUser($username, $password, $defaults, $email = null)
  991. {
  992. $email = ($email) ? $email : random_ascii_string(10) . '@placeholder.eml';
  993. try {
  994. if (!usernameTaken($username, $email)) {
  995. $createDB = new Dibi\Connection([
  996. 'driver' => 'sqlite3',
  997. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  998. ]);
  999. $userInfo = [
  1000. 'username' => $username,
  1001. 'password' => password_hash($password, PASSWORD_BCRYPT),
  1002. 'email' => $email,
  1003. 'group' => $defaults['group'],
  1004. 'group_id' => $defaults['group_id'],
  1005. 'image' => gravatar($email),
  1006. 'register_date' => $GLOBALS['currentTime'],
  1007. ];
  1008. $createDB->query('INSERT INTO [users]', $userInfo);
  1009. return true;
  1010. } else {
  1011. return false;
  1012. }
  1013. } catch (Dibi\Exception $e) {
  1014. return false;
  1015. }
  1016. }
  1017. function importUsers($array)
  1018. {
  1019. $imported = 0;
  1020. $defaults = defaultUserGroup();
  1021. foreach ($array as $user) {
  1022. $password = random_ascii_string(30);
  1023. if ($user['username'] !== '' && $user['email'] !== '' && $password !== '' && $defaults !== '') {
  1024. $newUser = createUser($user['username'], $password, $defaults, $user['email']);
  1025. if (!$newUser) {
  1026. writeLog('error', 'Import Function - Error', $user['username']);
  1027. } else {
  1028. $imported++;
  1029. }
  1030. }
  1031. }
  1032. return $imported;
  1033. }
  1034. function importUsersType($array)
  1035. {
  1036. $type = $array['data']['type'];
  1037. if ($type !== '') {
  1038. switch ($type) {
  1039. case 'plex':
  1040. return importUsers(allPlexUsers(true));
  1041. break;
  1042. default:
  1043. return false;
  1044. }
  1045. }
  1046. return false;
  1047. }
  1048. function allTabs()
  1049. {
  1050. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1051. try {
  1052. $connect = new Dibi\Connection([
  1053. 'driver' => 'sqlite3',
  1054. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1055. ]);
  1056. $all['tabs'] = $connect->fetchAll('SELECT * FROM tabs ORDER BY `order` ASC');
  1057. $all['categories'] = $connect->fetchAll('SELECT * FROM categories ORDER BY `order` ASC');
  1058. $all['groups'] = $connect->fetchAll('SELECT * FROM groups ORDER BY `group_id` ASC');
  1059. return $all;
  1060. } catch (Dibi\Exception $e) {
  1061. return false;
  1062. }
  1063. }
  1064. return false;
  1065. }
  1066. function allGroups()
  1067. {
  1068. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1069. try {
  1070. $connect = new Dibi\Connection([
  1071. 'driver' => 'sqlite3',
  1072. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1073. ]);
  1074. $all = $connect->fetchAll('SELECT * FROM groups ORDER BY `group_id` ASC');
  1075. return $all;
  1076. } catch (Dibi\Exception $e) {
  1077. return false;
  1078. }
  1079. }
  1080. return false;
  1081. }
  1082. function loadTabs()
  1083. {
  1084. if (file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  1085. try {
  1086. $connect = new Dibi\Connection([
  1087. 'driver' => 'sqlite3',
  1088. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1089. ]);
  1090. $sort = ($GLOBALS['unsortedTabs'] == 'top') ? 'DESC' : 'ASC';
  1091. $tabs = $connect->fetchAll('SELECT * FROM tabs WHERE `group_id` >= ? AND `enabled` = 1 ORDER BY `order` ' . $sort, $GLOBALS['organizrUser']['groupID']);
  1092. $categories = $connect->fetchAll('SELECT * FROM categories ORDER BY `order` ASC');
  1093. $all['tabs'] = $tabs;
  1094. foreach ($tabs as $k => $v) {
  1095. $v['access_url'] = (!empty($v['url_local']) && ($v['url_local'] !== null) && ($v['url_local'] !== 'null') && isLocal() && $v['type'] !== 0) ? $v['url_local'] : $v['url'];
  1096. }
  1097. $count = array_map(function ($element) {
  1098. return $element['category_id'];
  1099. }, $tabs);
  1100. $count = (array_count_values($count));
  1101. foreach ($categories as $k => $v) {
  1102. $v['count'] = isset($count[$v['category_id']]) ? $count[$v['category_id']] : 0;
  1103. }
  1104. $all['categories'] = $categories;
  1105. return $all;
  1106. } catch (Dibi\Exception $e) {
  1107. return false;
  1108. }
  1109. }
  1110. return false;
  1111. }
  1112. function getActiveTokens()
  1113. {
  1114. try {
  1115. $connect = new Dibi\Connection([
  1116. 'driver' => 'sqlite3',
  1117. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1118. ]);
  1119. $all = $connect->fetchAll('SELECT * FROM `tokens` WHERE `user_id` = ? AND `expires` > ?', $GLOBALS['organizrUser']['userID'], $GLOBALS['currentTime']);
  1120. return $all;
  1121. } catch (Dibi\Exception $e) {
  1122. return false;
  1123. }
  1124. }
  1125. function revokeToken($array)
  1126. {
  1127. if ($array['data']['token']) {
  1128. try {
  1129. $connect = new Dibi\Connection([
  1130. 'driver' => 'sqlite3',
  1131. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1132. ]);
  1133. $connect->query('DELETE FROM tokens WHERE user_id = ? AND token = ?', $GLOBALS['organizrUser']['userID'], $array['data']['token']);
  1134. return true;
  1135. } catch (Dibi\Exception $e) {
  1136. return false;
  1137. }
  1138. }
  1139. }
  1140. function getSchema()
  1141. {
  1142. try {
  1143. $connect = new Dibi\Connection([
  1144. 'driver' => 'sqlite3',
  1145. 'database' => $GLOBALS['dbLocation'] . $GLOBALS['dbName'],
  1146. ]);
  1147. $result = $connect->fetchAll(' SELECT name, sql FROM sqlite_master WHERE type=\'table\' ORDER BY name');
  1148. return $result;
  1149. } catch (Dibi\Exception $e) {
  1150. return false;
  1151. }
  1152. }