index.php 37 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322
  1. <?php
  2. $generationTime = -microtime(true);
  3. //include functions
  4. require_once 'functions.php';
  5. //Set result array
  6. $result = array();
  7. //Get request method
  8. $method = $_SERVER['REQUEST_METHOD'];
  9. $pretty = isset($_GET['pretty']) ? true : false;
  10. reset($_GET);
  11. $function = (key($_GET) ? str_replace("/", "_", key($_GET)) : false);
  12. //Exit if $function is blank
  13. if ($function === false) {
  14. $result['status'] = "error";
  15. $result['statusText'] = "No API Path Supplied";
  16. exit(json_encode($result));
  17. }
  18. if (isApprovedRequest($method, $_POST) === false && $function !== 'v1_auth' && $function !== 'v1_wizard_config') {
  19. $result['status'] = "error";
  20. $result['statusText'] = "Not Authorized";
  21. writeLog('success', 'Killed Attack From [' . (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : 'No Referer') . ']', $GLOBALS['organizrUser']['username']);
  22. exit(json_encode($result));
  23. }
  24. $result['request'] = key($_GET);
  25. $result['params'] = $_POST;
  26. switch ($function) {
  27. case 'v1_settings_page':
  28. switch ($method) {
  29. case 'GET':
  30. if (qualifyRequest(1)) {
  31. $result['status'] = 'success';
  32. $result['statusText'] = 'success';
  33. $result['data'] = $pageSettings;
  34. writeLog('success', 'Admin Function - Accessed Settings Page', $GLOBALS['organizrUser']['username']);
  35. } else {
  36. $result['status'] = 'error';
  37. $result['statusText'] = 'API/Token invalid or not set';
  38. $result['data'] = null;
  39. writeLog('error', 'Admin Function - Tried to access Settings Page', $GLOBALS['organizrUser']['username']);
  40. }
  41. break;
  42. default:
  43. $result['status'] = 'error';
  44. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  45. break;
  46. }
  47. break;
  48. case 'v1_homepage_page':
  49. switch ($method) {
  50. case 'GET':
  51. $result['status'] = 'success';
  52. $result['statusText'] = 'success';
  53. $result['data'] = $pageHomepage;
  54. break;
  55. default:
  56. $result['status'] = 'error';
  57. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  58. break;
  59. }
  60. break;
  61. case 'v1_settings_plugins':
  62. switch ($method) {
  63. case 'GET':
  64. if (qualifyRequest(1)) {
  65. $result['status'] = 'success';
  66. $result['statusText'] = 'success';
  67. $result['data'] = $pageSettingsPlugins;
  68. } else {
  69. $result['status'] = 'error';
  70. $result['statusText'] = 'API/Token invalid or not set';
  71. $result['data'] = null;
  72. }
  73. break;
  74. default:
  75. $result['status'] = 'error';
  76. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  77. break;
  78. }
  79. break;
  80. case 'v1_settings_tab_editor_homepage':
  81. switch ($method) {
  82. case 'GET':
  83. if (qualifyRequest(1)) {
  84. $result['status'] = 'success';
  85. $result['statusText'] = 'success';
  86. $result['data'] = $pageSettingsTabEditorHomepage;
  87. } else {
  88. $result['status'] = 'error';
  89. $result['statusText'] = 'API/Token invalid or not set';
  90. $result['data'] = null;
  91. }
  92. break;
  93. default:
  94. $result['status'] = 'error';
  95. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  96. break;
  97. }
  98. break;
  99. case 'v1_settings_tab_editor_homepage_order':
  100. switch ($method) {
  101. case 'GET':
  102. if (qualifyRequest(1)) {
  103. $result['status'] = 'success';
  104. $result['statusText'] = 'success';
  105. $result['data'] = $pageSettingsTabEditorHomepageOrder;
  106. } else {
  107. $result['status'] = 'error';
  108. $result['statusText'] = 'API/Token invalid or not set';
  109. $result['data'] = null;
  110. }
  111. break;
  112. default:
  113. $result['status'] = 'error';
  114. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  115. break;
  116. }
  117. break;
  118. case 'v1_settings_homepage_list':
  119. switch ($method) {
  120. case 'GET':
  121. if (qualifyRequest(1)) {
  122. $result['status'] = 'success';
  123. $result['statusText'] = 'success';
  124. $result['data'] = getHomepageList();
  125. } else {
  126. $result['status'] = 'error';
  127. $result['statusText'] = 'API/Token invalid or not set';
  128. $result['data'] = null;
  129. }
  130. break;
  131. case 'POST':
  132. if (qualifyRequest(1)) {
  133. $result['status'] = 'success';
  134. $result['statusText'] = 'success';
  135. $result['data'] = editPlugins($_POST);
  136. } else {
  137. $result['status'] = 'error';
  138. $result['statusText'] = 'API/Token invalid or not set';
  139. $result['data'] = null;
  140. }
  141. break;
  142. default:
  143. $result['status'] = 'error';
  144. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  145. break;
  146. }
  147. break;
  148. case 'v1_settings_plugins_list':
  149. switch ($method) {
  150. case 'GET':
  151. if (qualifyRequest(1)) {
  152. $result['status'] = 'success';
  153. $result['statusText'] = 'success';
  154. $result['data'] = getPlugins();
  155. } else {
  156. $result['status'] = 'error';
  157. $result['statusText'] = 'API/Token invalid or not set';
  158. $result['data'] = null;
  159. }
  160. break;
  161. case 'POST':
  162. if (qualifyRequest(1)) {
  163. $result['status'] = 'success';
  164. $result['statusText'] = 'success';
  165. $result['data'] = editPlugins($_POST);
  166. } else {
  167. $result['status'] = 'error';
  168. $result['statusText'] = 'API/Token invalid or not set';
  169. $result['data'] = null;
  170. }
  171. break;
  172. default:
  173. $result['status'] = 'error';
  174. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  175. break;
  176. }
  177. break;
  178. case 'v1_settings_settings_logs':
  179. switch ($method) {
  180. case 'GET':
  181. if (qualifyRequest(1)) {
  182. $result['status'] = 'success';
  183. $result['statusText'] = 'success';
  184. $result['data'] = $pageSettingsSettingsLogs;
  185. } else {
  186. $result['status'] = 'error';
  187. $result['statusText'] = 'API/Token invalid or not set';
  188. $result['data'] = null;
  189. }
  190. break;
  191. default:
  192. $result['status'] = 'error';
  193. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  194. break;
  195. }
  196. break;
  197. case 'v1_settings_settings_sso':
  198. switch ($method) {
  199. case 'GET':
  200. if (qualifyRequest(1)) {
  201. $result['status'] = 'success';
  202. $result['statusText'] = 'success';
  203. $result['data'] = $pageSettingsSettingsSSO;
  204. } else {
  205. $result['status'] = 'error';
  206. $result['statusText'] = 'API/Token invalid or not set';
  207. $result['data'] = null;
  208. }
  209. break;
  210. default:
  211. $result['status'] = 'error';
  212. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  213. break;
  214. }
  215. break;
  216. case 'v1_settings_settings_main':
  217. switch ($method) {
  218. case 'GET':
  219. if (qualifyRequest(1)) {
  220. $result['status'] = 'success';
  221. $result['statusText'] = 'success';
  222. $result['data'] = $pageSettingsSettingsMain;
  223. } else {
  224. $result['status'] = 'error';
  225. $result['statusText'] = 'API/Token invalid or not set';
  226. $result['data'] = null;
  227. }
  228. break;
  229. default:
  230. $result['status'] = 'error';
  231. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  232. break;
  233. }
  234. break;
  235. case 'v1_settings_customize_appearance':
  236. switch ($method) {
  237. case 'GET':
  238. if (qualifyRequest(1)) {
  239. $result['status'] = 'success';
  240. $result['statusText'] = 'success';
  241. $result['data'] = $pageSettingsCustomizeAppearance;
  242. } else {
  243. $result['status'] = 'error';
  244. $result['statusText'] = 'API/Token invalid or not set';
  245. $result['data'] = null;
  246. }
  247. break;
  248. case 'POST':
  249. if (qualifyRequest(1)) {
  250. $result['status'] = 'success';
  251. $result['statusText'] = 'success';
  252. $result['data'] = editAppearance($_POST);
  253. } else {
  254. $result['status'] = 'error';
  255. $result['statusText'] = 'API/Token invalid or not set';
  256. $result['data'] = null;
  257. }
  258. break;
  259. default:
  260. $result['status'] = 'error';
  261. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  262. break;
  263. }
  264. break;
  265. case 'v1_remove_file':
  266. switch ($method) {
  267. case 'POST':
  268. if (qualifyRequest(1)) {
  269. $result['status'] = 'success';
  270. $result['statusText'] = 'success';
  271. $result['data'] = removeFile($_POST);
  272. } else {
  273. $result['status'] = 'error';
  274. $result['statusText'] = 'API/Token invalid or not set';
  275. $result['data'] = null;
  276. }
  277. break;
  278. default:
  279. $result['status'] = 'error';
  280. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  281. break;
  282. }
  283. break;
  284. case 'v1_update_config':
  285. switch ($method) {
  286. case 'POST':
  287. if (qualifyRequest(1)) {
  288. $result['status'] = 'success';
  289. $result['statusText'] = 'success';
  290. $result['data'] = updateConfigItem($_POST);
  291. } else {
  292. $result['status'] = 'error';
  293. $result['statusText'] = 'API/Token invalid or not set';
  294. $result['data'] = null;
  295. }
  296. break;
  297. default:
  298. $result['status'] = 'error';
  299. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  300. break;
  301. }
  302. break;
  303. case 'v1_update_config_multiple':
  304. switch ($method) {
  305. case 'POST':
  306. if (qualifyRequest(1)) {
  307. $result['status'] = 'success';
  308. $result['statusText'] = 'success';
  309. $result['data'] = updateConfigMultiple($_POST);
  310. } else {
  311. $result['status'] = 'error';
  312. $result['statusText'] = 'API/Token invalid or not set';
  313. $result['data'] = null;
  314. }
  315. break;
  316. default:
  317. $result['status'] = 'error';
  318. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  319. break;
  320. }
  321. break;
  322. case 'v1_update_config_multiple_form':
  323. switch ($method) {
  324. case 'POST':
  325. if (qualifyRequest(1)) {
  326. $result['status'] = 'success';
  327. $result['statusText'] = 'success';
  328. $result['data'] = updateConfigMultipleForm($_POST);
  329. } else {
  330. $result['status'] = 'error';
  331. $result['statusText'] = 'API/Token invalid or not set';
  332. $result['data'] = null;
  333. }
  334. break;
  335. default:
  336. $result['status'] = 'error';
  337. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  338. break;
  339. }
  340. break;
  341. case 'v1_homepage_connect':
  342. switch ($method) {
  343. case 'POST':
  344. $result['status'] = 'success';
  345. $result['statusText'] = 'success';
  346. $result['data'] = homepageConnect($_POST);
  347. break;
  348. default:
  349. $result['status'] = 'error';
  350. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  351. break;
  352. }
  353. break;
  354. case 'v1_ping_list':
  355. switch ($method) {
  356. case 'POST':
  357. $result['status'] = 'success';
  358. $result['statusText'] = 'success';
  359. $result['data'] = ping($_POST['data']['pingList']);
  360. break;
  361. default:
  362. $result['status'] = 'error';
  363. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  364. break;
  365. }
  366. break;
  367. case 'v1_test_api_connection':
  368. switch ($method) {
  369. case 'POST':
  370. if (qualifyRequest(1)) {
  371. $result['status'] = 'success';
  372. $result['statusText'] = 'success';
  373. $result['data'] = testAPIConnection($_POST);
  374. } else {
  375. $result['status'] = 'error';
  376. $result['statusText'] = 'API/Token invalid or not set';
  377. $result['data'] = null;
  378. }
  379. break;
  380. default:
  381. $result['status'] = 'error';
  382. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  383. break;
  384. }
  385. break;
  386. case 'v1_settings_tab_editor_tabs':
  387. switch ($method) {
  388. case 'GET':
  389. if (qualifyRequest(1)) {
  390. $result['status'] = 'success';
  391. $result['statusText'] = 'success';
  392. $result['data'] = $pageSettingsTabEditorTabs;
  393. } else {
  394. $result['status'] = 'error';
  395. $result['statusText'] = 'API/Token invalid or not set';
  396. $result['data'] = null;
  397. }
  398. break;
  399. case 'POST':
  400. if (qualifyRequest(1)) {
  401. $result['status'] = 'success';
  402. $result['statusText'] = 'success';
  403. $result['data'] = editTabs($_POST);
  404. } else {
  405. $result['status'] = 'error';
  406. $result['statusText'] = 'API/Token invalid or not set';
  407. $result['data'] = null;
  408. }
  409. break;
  410. default:
  411. $result['status'] = 'error';
  412. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  413. break;
  414. }
  415. break;
  416. case 'v1_settings_tab_editor_categories':
  417. switch ($method) {
  418. case 'GET':
  419. if (qualifyRequest(1)) {
  420. $result['status'] = 'success';
  421. $result['statusText'] = 'success';
  422. $result['data'] = $pageSettingsTabEditorCategories;
  423. } else {
  424. $result['status'] = 'error';
  425. $result['statusText'] = 'API/Token invalid or not set';
  426. $result['data'] = null;
  427. }
  428. break;
  429. case 'POST':
  430. if (qualifyRequest(1)) {
  431. $result['status'] = 'success';
  432. $result['statusText'] = 'success';
  433. $result['data'] = editCategories($_POST);
  434. } else {
  435. $result['status'] = 'error';
  436. $result['statusText'] = 'API/Token invalid or not set';
  437. $result['data'] = null;
  438. }
  439. break;
  440. default:
  441. $result['status'] = 'error';
  442. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  443. break;
  444. }
  445. break;
  446. case 'v1_settings_user_manage_users':
  447. switch ($method) {
  448. case 'GET':
  449. if (qualifyRequest(1)) {
  450. $result['status'] = 'success';
  451. $result['statusText'] = 'success';
  452. $result['data'] = $pageSettingsUserManageUsers;
  453. } else {
  454. $result['status'] = 'error';
  455. $result['statusText'] = 'API/Token invalid or not set';
  456. $result['data'] = null;
  457. }
  458. break;
  459. case 'POST':
  460. if (qualifyRequest(1)) {
  461. $result['status'] = 'success';
  462. $result['statusText'] = 'success';
  463. $result['data'] = adminEditUser($_POST);
  464. } elseif (qualifyRequest(998)) {
  465. $result['status'] = 'success';
  466. $result['statusText'] = 'success';
  467. $result['data'] = editUser($_POST);
  468. } else {
  469. $result['status'] = 'error';
  470. $result['statusText'] = 'API/Token invalid or not set';
  471. $result['data'] = null;
  472. }
  473. break;
  474. default:
  475. $result['status'] = 'error';
  476. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  477. break;
  478. }
  479. break;
  480. case 'v1_manage_user':
  481. switch ($method) {
  482. case 'POST':
  483. if (qualifyRequest(998)) {
  484. $result['status'] = 'success';
  485. $result['statusText'] = 'success';
  486. $result['data'] = editUser($_POST);
  487. } else {
  488. $result['status'] = 'error';
  489. $result['statusText'] = 'API/Token invalid or not set';
  490. $result['data'] = null;
  491. }
  492. break;
  493. default:
  494. $result['status'] = 'error';
  495. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  496. break;
  497. }
  498. break;
  499. case 'v1_settings_user_manage_groups':
  500. switch ($method) {
  501. case 'GET':
  502. if (qualifyRequest(1)) {
  503. $result['status'] = 'success';
  504. $result['statusText'] = 'success';
  505. $result['data'] = $pageSettingsUserManageGroups;
  506. } else {
  507. $result['status'] = 'error';
  508. $result['statusText'] = 'API/Token invalid or not set';
  509. $result['data'] = null;
  510. }
  511. break;
  512. case 'POST':
  513. if (qualifyRequest(1)) {
  514. $result['status'] = 'success';
  515. $result['statusText'] = 'success';
  516. $result['data'] = adminEditGroup($_POST);
  517. } else {
  518. $result['status'] = 'error';
  519. $result['statusText'] = 'API/Token invalid or not set';
  520. $result['data'] = null;
  521. }
  522. break;
  523. default:
  524. $result['status'] = 'error';
  525. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  526. break;
  527. }
  528. break;
  529. case 'v1_settings_image_manager_view':
  530. switch ($method) {
  531. case 'GET':
  532. if (qualifyRequest(1)) {
  533. $result['status'] = 'success';
  534. $result['statusText'] = 'success';
  535. $result['data'] = $pageSettingsImageManager;
  536. } else {
  537. $result['status'] = 'error';
  538. $result['statusText'] = 'API/Token invalid or not set';
  539. $result['data'] = null;
  540. }
  541. break;
  542. case 'POST':
  543. if (qualifyRequest(1)) {
  544. $result['status'] = 'success';
  545. $result['statusText'] = 'success';
  546. $result['data'] = editImages();
  547. } else {
  548. $result['status'] = 'error';
  549. $result['statusText'] = 'API/Token invalid or not set';
  550. $result['data'] = null;
  551. }
  552. break;
  553. default:
  554. $result['status'] = 'error';
  555. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  556. break;
  557. }
  558. break;
  559. case 'v1_wizard_page':
  560. switch ($method) {
  561. case 'GET':
  562. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  563. $result['status'] = 'success';
  564. $result['statusText'] = 'success';
  565. $result['data'] = $pageWizard;
  566. } else {
  567. $result['status'] = 'error';
  568. $result['statusText'] = 'Wizard has already been run';
  569. $result['data'] = null;
  570. }
  571. break;
  572. default:
  573. $result['status'] = 'error';
  574. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  575. break;
  576. }
  577. break;
  578. case 'v1_dependencies_page':
  579. switch ($method) {
  580. case 'GET':
  581. $result['status'] = 'success';
  582. $result['statusText'] = 'success';
  583. $result['data'] = $pageDependencies;
  584. break;
  585. default:
  586. $result['status'] = 'error';
  587. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  588. break;
  589. }
  590. break;
  591. case 'v1_wizard_config':
  592. switch ($method) {
  593. case 'POST':
  594. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  595. $result['status'] = 'success';
  596. $result['statusText'] = 'success';
  597. $result['data'] = wizardConfig($_POST);
  598. } else {
  599. $result['status'] = 'error';
  600. $result['statusText'] = 'Wizard has already been run';
  601. $result['data'] = null;
  602. }
  603. break;
  604. default:
  605. $result['status'] = 'error';
  606. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  607. break;
  608. }
  609. break;
  610. case 'v1_wizard_path':
  611. switch ($method) {
  612. case 'POST':
  613. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  614. $result['status'] = 'success';
  615. $result['statusText'] = 'success';
  616. $result['data'] = wizardPath($_POST);
  617. } else {
  618. $result['status'] = 'error';
  619. $result['statusText'] = 'Wizard has already been run';
  620. $result['data'] = null;
  621. }
  622. break;
  623. default:
  624. $result['status'] = 'error';
  625. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  626. break;
  627. }
  628. break;
  629. case 'v1_login':
  630. switch ($method) {
  631. case 'POST':
  632. $result['status'] = 'success';
  633. $result['statusText'] = 'success';
  634. $result['data'] = login($_POST);
  635. break;
  636. default:
  637. $result['status'] = 'error';
  638. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  639. break;
  640. }
  641. break;
  642. case 'v1_register':
  643. switch ($method) {
  644. case 'POST':
  645. $result['status'] = 'success';
  646. $result['statusText'] = 'success';
  647. $result['data'] = register($_POST);
  648. break;
  649. default:
  650. $result['status'] = 'error';
  651. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  652. break;
  653. }
  654. break;
  655. case 'v1_recover':
  656. switch ($method) {
  657. case 'POST':
  658. $result['status'] = 'success';
  659. $result['statusText'] = 'success';
  660. $result['data'] = recover($_POST);
  661. break;
  662. default:
  663. $result['status'] = 'error';
  664. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  665. break;
  666. }
  667. break;
  668. case 'v1_unlock':
  669. switch ($method) {
  670. case 'POST':
  671. $result['status'] = 'success';
  672. $result['statusText'] = 'success';
  673. $result['data'] = unlock($_POST);
  674. break;
  675. default:
  676. $result['status'] = 'error';
  677. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  678. break;
  679. }
  680. break;
  681. case 'v1_lock':
  682. switch ($method) {
  683. case 'POST':
  684. $result['status'] = 'success';
  685. $result['statusText'] = 'success';
  686. $result['data'] = lock();
  687. break;
  688. default:
  689. $result['status'] = 'error';
  690. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  691. break;
  692. }
  693. break;
  694. case 'v1_test_iframe':
  695. switch ($method) {
  696. case 'POST':
  697. $result['status'] = 'success';
  698. $result['statusText'] = 'success';
  699. $result['data'] = frameTest($_POST['data']['url']);
  700. break;
  701. default:
  702. $result['status'] = 'error';
  703. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  704. break;
  705. }
  706. break;
  707. case 'v1_upgrade':
  708. case 'v1_update':
  709. case 'v1_force':
  710. switch ($method) {
  711. case 'POST':
  712. if (qualifyRequest(1)) {
  713. $result['status'] = 'success';
  714. $result['statusText'] = 'success';
  715. $result['data'] = upgradeInstall($_POST['data']['branch'], $_POST['data']['stage']);
  716. } else {
  717. $result['status'] = 'error';
  718. $result['statusText'] = 'API/Token invalid or not set';
  719. $result['data'] = null;
  720. }
  721. break;
  722. default:
  723. $result['status'] = 'error';
  724. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  725. break;
  726. }
  727. break;
  728. case 'v1_login_page':
  729. switch ($method) {
  730. case 'GET':
  731. $result['status'] = 'success';
  732. $result['statusText'] = 'success';
  733. $result['data'] = $pageLogin;
  734. break;
  735. default:
  736. $result['status'] = 'error';
  737. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  738. break;
  739. }
  740. break;
  741. case 'v1_lockscreen':
  742. switch ($method) {
  743. case 'GET':
  744. $result['status'] = 'success';
  745. $result['statusText'] = 'success';
  746. $result['data'] = $pageLockScreen;
  747. break;
  748. default:
  749. $result['status'] = 'error';
  750. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  751. break;
  752. }
  753. break;
  754. case 'v1_login_log':
  755. switch ($method) {
  756. case 'GET':
  757. if (qualifyRequest(1)) {
  758. $result['status'] = 'success';
  759. $result['statusText'] = 'success';
  760. $result['data'] = getLog('loginLog');
  761. } else {
  762. $result['status'] = 'error';
  763. $result['statusText'] = 'API/Token invalid or not set';
  764. $result['data'] = null;
  765. }
  766. break;
  767. default:
  768. $result['status'] = 'error';
  769. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  770. break;
  771. }
  772. break;
  773. case 'v1_organizr_log':
  774. switch ($method) {
  775. case 'GET':
  776. if (qualifyRequest(1)) {
  777. $result['status'] = 'success';
  778. $result['statusText'] = 'success';
  779. $result['data'] = getLog('org');
  780. } else {
  781. $result['status'] = 'error';
  782. $result['statusText'] = 'API/Token invalid or not set';
  783. $result['data'] = null;
  784. }
  785. break;
  786. default:
  787. $result['status'] = 'error';
  788. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  789. break;
  790. }
  791. break;
  792. case 'v1_user_list':
  793. switch ($method) {
  794. case 'GET':
  795. if (qualifyRequest(1)) {
  796. $result['status'] = 'success';
  797. $result['statusText'] = 'success';
  798. $result['data'] = allUsers();
  799. } else {
  800. $result['status'] = 'error';
  801. $result['statusText'] = 'API/Token invalid or not set';
  802. $result['data'] = null;
  803. }
  804. break;
  805. default:
  806. $result['status'] = 'error';
  807. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  808. break;
  809. }
  810. break;
  811. case 'v1_tab_list':
  812. switch ($method) {
  813. case 'GET':
  814. if (qualifyRequest(1)) {
  815. $result['status'] = 'success';
  816. $result['statusText'] = 'success';
  817. $result['data'] = allTabs();
  818. } else {
  819. $result['status'] = 'error';
  820. $result['statusText'] = 'API/Token invalid or not set';
  821. $result['data'] = null;
  822. }
  823. break;
  824. default:
  825. $result['status'] = 'error';
  826. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  827. break;
  828. }
  829. break;
  830. case 'v1_image_list':
  831. switch ($method) {
  832. case 'GET':
  833. if (qualifyRequest(1)) {
  834. $result['status'] = 'success';
  835. $result['statusText'] = 'success';
  836. $result['data'] = getImages();
  837. } else {
  838. $result['status'] = 'error';
  839. $result['statusText'] = 'API/Token invalid or not set';
  840. $result['data'] = null;
  841. }
  842. break;
  843. default:
  844. $result['status'] = 'error';
  845. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  846. break;
  847. }
  848. break;
  849. case 'v1_customize_appearance':
  850. switch ($method) {
  851. case 'GET':
  852. if (qualifyRequest(1)) {
  853. $result['status'] = 'success';
  854. $result['statusText'] = 'success';
  855. $result['data'] = getCustomizeAppearance();
  856. } else {
  857. $result['status'] = 'error';
  858. $result['statusText'] = 'API/Token invalid or not set';
  859. $result['data'] = null;
  860. }
  861. break;
  862. default:
  863. $result['status'] = 'error';
  864. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  865. break;
  866. }
  867. break;
  868. case 'v1_sso':
  869. switch ($method) {
  870. case 'GET':
  871. if (qualifyRequest(1)) {
  872. $result['status'] = 'success';
  873. $result['statusText'] = 'success';
  874. $result['data'] = getSSO();
  875. } else {
  876. $result['status'] = 'error';
  877. $result['statusText'] = 'API/Token invalid or not set';
  878. $result['data'] = null;
  879. }
  880. break;
  881. default:
  882. $result['status'] = 'error';
  883. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  884. break;
  885. }
  886. break;
  887. case 'v1_settings_main':
  888. switch ($method) {
  889. case 'GET':
  890. if (qualifyRequest(1)) {
  891. $result['status'] = 'success';
  892. $result['statusText'] = 'success';
  893. $result['data'] = getSettingsMain();
  894. } else {
  895. $result['status'] = 'error';
  896. $result['statusText'] = 'API/Token invalid or not set';
  897. $result['data'] = null;
  898. }
  899. break;
  900. default:
  901. $result['status'] = 'error';
  902. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  903. break;
  904. }
  905. break;
  906. case 'v1_plugin_install':
  907. switch ($method) {
  908. case 'POST':
  909. if (qualifyRequest(1)) {
  910. $result['status'] = 'success';
  911. $result['statusText'] = 'success';
  912. $result['data'] = installPlugin($_POST);
  913. } else {
  914. $result['status'] = 'error';
  915. $result['statusText'] = 'API/Token invalid or not set';
  916. $result['data'] = null;
  917. }
  918. break;
  919. default:
  920. $result['status'] = 'error';
  921. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  922. break;
  923. }
  924. break;
  925. case 'v1_plugin_remove':
  926. switch ($method) {
  927. case 'POST':
  928. if (qualifyRequest(1)) {
  929. $result['status'] = 'success';
  930. $result['statusText'] = 'success';
  931. $result['data'] = removePlugin($_POST);
  932. } else {
  933. $result['status'] = 'error';
  934. $result['statusText'] = 'API/Token invalid or not set';
  935. $result['data'] = null;
  936. }
  937. break;
  938. default:
  939. $result['status'] = 'error';
  940. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  941. break;
  942. }
  943. break;
  944. case 'v1_theme_install':
  945. switch ($method) {
  946. case 'POST':
  947. if (qualifyRequest(1)) {
  948. $result['status'] = 'success';
  949. $result['statusText'] = 'success';
  950. $result['data'] = installTheme($_POST);
  951. } else {
  952. $result['status'] = 'error';
  953. $result['statusText'] = 'API/Token invalid or not set';
  954. $result['data'] = null;
  955. }
  956. break;
  957. default:
  958. $result['status'] = 'error';
  959. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  960. break;
  961. }
  962. break;
  963. case 'v1_theme_remove':
  964. switch ($method) {
  965. case 'POST':
  966. if (qualifyRequest(1)) {
  967. $result['status'] = 'success';
  968. $result['statusText'] = 'success';
  969. $result['data'] = removeTheme($_POST);
  970. } else {
  971. $result['status'] = 'error';
  972. $result['statusText'] = 'API/Token invalid or not set';
  973. $result['data'] = null;
  974. }
  975. break;
  976. default:
  977. $result['status'] = 'error';
  978. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  979. break;
  980. }
  981. break;
  982. case 'v1_user_edit':
  983. switch ($method) {
  984. case 'POST':
  985. if (qualifyRequest(1)) {
  986. $result['status'] = 'success';
  987. $result['statusText'] = 'success';
  988. $result['data'] = adminEditUser($_POST);
  989. } elseif (qualifyRequest(998)) {
  990. $result['status'] = 'success';
  991. $result['statusText'] = 'success';
  992. $result['data'] = editUser($_POST);
  993. } else {
  994. $result['status'] = 'error';
  995. $result['statusText'] = 'API/Token invalid or not set';
  996. $result['data'] = null;
  997. }
  998. break;
  999. default:
  1000. $result['status'] = 'error';
  1001. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1002. break;
  1003. }
  1004. break;
  1005. case 'v1_2fa_create':
  1006. switch ($method) {
  1007. case 'POST':
  1008. if (qualifyRequest(998)) {
  1009. $result['status'] = 'success';
  1010. $result['statusText'] = 'success';
  1011. $result['data'] = create2FA($_POST['data']['type']);
  1012. } else {
  1013. $result['status'] = 'error';
  1014. $result['statusText'] = 'API/Token invalid or not set';
  1015. $result['data'] = null;
  1016. }
  1017. break;
  1018. default:
  1019. $result['status'] = 'error';
  1020. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1021. break;
  1022. }
  1023. break;
  1024. case 'v1_2fa_save':
  1025. switch ($method) {
  1026. case 'POST':
  1027. if (qualifyRequest(998)) {
  1028. $result['status'] = 'success';
  1029. $result['statusText'] = 'success';
  1030. $result['data'] = save2FA($_POST['data']['secret'], $_POST['data']['type']);
  1031. } else {
  1032. $result['status'] = 'error';
  1033. $result['statusText'] = 'API/Token invalid or not set';
  1034. $result['data'] = null;
  1035. }
  1036. break;
  1037. default:
  1038. $result['status'] = 'error';
  1039. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1040. break;
  1041. }
  1042. break;
  1043. case 'v1_2fa_verify':
  1044. switch ($method) {
  1045. case 'POST':
  1046. if (qualifyRequest(998)) {
  1047. $result['status'] = 'success';
  1048. $result['statusText'] = 'success';
  1049. $result['data'] = verify2FA($_POST['data']['secret'], $_POST['data']['code'], $_POST['data']['type']);
  1050. } else {
  1051. $result['status'] = 'error';
  1052. $result['statusText'] = 'API/Token invalid or not set';
  1053. $result['data'] = null;
  1054. }
  1055. break;
  1056. default:
  1057. $result['status'] = 'error';
  1058. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1059. break;
  1060. }
  1061. break;
  1062. case 'v1_2fa_remove':
  1063. switch ($method) {
  1064. case 'GET':
  1065. if (qualifyRequest(998)) {
  1066. $result['status'] = 'success';
  1067. $result['statusText'] = 'success';
  1068. $result['data'] = remove2FA();
  1069. } else {
  1070. $result['status'] = 'error';
  1071. $result['statusText'] = 'API/Token invalid or not set';
  1072. $result['data'] = null;
  1073. }
  1074. break;
  1075. default:
  1076. $result['status'] = 'error';
  1077. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1078. break;
  1079. }
  1080. break;
  1081. case 'v1_logout':
  1082. switch ($method) {
  1083. case 'GET':
  1084. $result['status'] = 'success';
  1085. $result['statusText'] = 'success';
  1086. $result['data'] = logout();
  1087. break;
  1088. default:
  1089. $result['status'] = 'error';
  1090. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1091. break;
  1092. }
  1093. break;
  1094. case 'v1_launch_organizr':
  1095. switch ($method) {
  1096. case 'GET':
  1097. $pluginSearch = '-enabled';
  1098. $pluginInclude = '-include';
  1099. $status = array();
  1100. $result['status'] = 'success';
  1101. $result['statusText'] = 'success';
  1102. $status['status'] = organizrStatus();
  1103. $result['appearance'] = loadAppearance();
  1104. $status['user'] = $GLOBALS['organizrUser'];
  1105. $status['categories'] = loadTabs()['categories'];
  1106. $status['tabs'] = loadTabs()['tabs'];
  1107. $status['plugins'] = array_filter($GLOBALS, function ($k) use ($pluginSearch) {
  1108. return stripos($k, $pluginSearch) !== false;
  1109. }, ARRAY_FILTER_USE_KEY);
  1110. $status['plugins']['includes'] = array_filter($GLOBALS, function ($k) use ($pluginInclude) {
  1111. return stripos($k, $pluginInclude) !== false;
  1112. }, ARRAY_FILTER_USE_KEY);
  1113. $result['data'] = $status;
  1114. $result['branch'] = $GLOBALS['branch'];
  1115. $result['theme'] = $GLOBALS['theme'];
  1116. $result['style'] = $GLOBALS['style'];
  1117. $result['version'] = $GLOBALS['installedVersion'];
  1118. $result['sso'] = array(
  1119. 'myPlexAccessToken' => isset($_COOKIE['mpt']) ? $_COOKIE['mpt'] : false,
  1120. 'id_token' => isset($_COOKIE['Auth']) ? $_COOKIE['Auth'] : false
  1121. );
  1122. $result['settings'] = organizrSpecialSettings();
  1123. break;
  1124. default:
  1125. $result['status'] = 'error';
  1126. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1127. break;
  1128. }
  1129. break;
  1130. case 'v1_auth':
  1131. switch ($method) {
  1132. case 'GET':
  1133. auth();
  1134. break;
  1135. default:
  1136. $result['status'] = 'error';
  1137. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1138. break;
  1139. }
  1140. break;
  1141. case 'v1_plugin':
  1142. switch ($method) {
  1143. case 'POST':
  1144. case 'GET':
  1145. // Include all plugin api Calls
  1146. foreach (glob(__DIR__ . DIRECTORY_SEPARATOR . 'plugins' . DIRECTORY_SEPARATOR . 'api' . DIRECTORY_SEPARATOR . "*.php") as $filename) {
  1147. require_once $filename;
  1148. }
  1149. break;
  1150. default:
  1151. $result['status'] = 'error';
  1152. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1153. break;
  1154. }
  1155. break;
  1156. case 'v1_image':
  1157. switch ($method) {
  1158. case 'GET':
  1159. getImage();
  1160. break;
  1161. default:
  1162. $result['status'] = 'error';
  1163. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1164. break;
  1165. }
  1166. break;
  1167. case 'v1_downloader':
  1168. switch ($method) {
  1169. case 'POST':
  1170. $result['status'] = 'success';
  1171. $result['statusText'] = 'success';
  1172. $result['data'] = downloader($_POST);
  1173. break;
  1174. default:
  1175. $result['status'] = 'error';
  1176. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1177. break;
  1178. }
  1179. break;
  1180. case 'v1_import_users':
  1181. switch ($method) {
  1182. case 'POST':
  1183. if (qualifyRequest(1)) {
  1184. $result['status'] = 'success';
  1185. $result['statusText'] = 'success';
  1186. $result['data'] = importUsersType($_POST);
  1187. } else {
  1188. $result['status'] = 'error';
  1189. $result['statusText'] = 'API/Token invalid or not set';
  1190. $result['data'] = null;
  1191. }
  1192. break;
  1193. default:
  1194. $result['status'] = 'error';
  1195. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1196. break;
  1197. }
  1198. break;
  1199. case 'v1_ombi':
  1200. switch ($method) {
  1201. case 'POST':
  1202. $result['status'] = 'success';
  1203. $result['statusText'] = 'success';
  1204. $result['data'] = ombiAPI($_POST);
  1205. break;
  1206. default:
  1207. $result['status'] = 'error';
  1208. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1209. break;
  1210. }
  1211. break;
  1212. case 'v1_plex_join':
  1213. switch ($method) {
  1214. case 'POST':
  1215. $result['status'] = 'success';
  1216. $result['statusText'] = 'success';
  1217. $result['data'] = plexJoinAPI($_POST);
  1218. break;
  1219. default:
  1220. $result['status'] = 'error';
  1221. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1222. break;
  1223. }
  1224. break;
  1225. case 'v1_token_revoke':
  1226. switch ($method) {
  1227. case 'POST':
  1228. $result['status'] = 'success';
  1229. $result['statusText'] = 'success';
  1230. $result['data'] = revokeToken($_POST);
  1231. break;
  1232. default:
  1233. $result['status'] = 'error';
  1234. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1235. break;
  1236. }
  1237. break;
  1238. case 'v1_update_db_manual':
  1239. switch ($method) {
  1240. case 'GET':
  1241. if (qualifyRequest(1)) {
  1242. $result['status'] = 'success';
  1243. $result['statusText'] = 'success';
  1244. $result['data'] = updateDB($GLOBALS['installedVersion']);
  1245. } else {
  1246. $result['status'] = 'error';
  1247. $result['statusText'] = 'API/Token invalid or not set';
  1248. $result['data'] = null;
  1249. }
  1250. break;
  1251. default:
  1252. $result['status'] = 'error';
  1253. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1254. break;
  1255. }
  1256. break;
  1257. case 'v1_version':
  1258. switch ($method) {
  1259. case 'GET':
  1260. $result['status'] = 'success';
  1261. $result['statusText'] = 'success';
  1262. $result['data'] = $GLOBALS['installedVersion'];
  1263. break;
  1264. default:
  1265. $result['status'] = 'error';
  1266. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1267. break;
  1268. }
  1269. break;
  1270. case 'v1_ping':
  1271. switch ($method) {
  1272. case 'GET':
  1273. $result['status'] = 'success';
  1274. $result['statusText'] = 'success';
  1275. $result['data'] = 'pong';
  1276. break;
  1277. default:
  1278. $result['status'] = 'error';
  1279. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1280. break;
  1281. }
  1282. break;
  1283. case 'v1_docker_update':
  1284. switch ($method) {
  1285. case 'GET':
  1286. if (qualifyRequest(1)) {
  1287. $result['status'] = 'success';
  1288. $result['statusText'] = 'success';
  1289. $result['data'] = dockerUpdate();
  1290. } else {
  1291. $result['status'] = 'error';
  1292. $result['statusText'] = 'API/Token invalid or not set';
  1293. $result['data'] = null;
  1294. }
  1295. break;
  1296. default:
  1297. $result['status'] = 'error';
  1298. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1299. break;
  1300. }
  1301. break;
  1302. default:
  1303. //No Function Available
  1304. $result['status'] = 'error';
  1305. $result['statusText'] = 'function requested is not defined';
  1306. break;
  1307. }
  1308. //Set Default Result
  1309. if (!$result) {
  1310. $result['status'] = "error";
  1311. $result['error'] = "An error has occurred";
  1312. }
  1313. $result['generationDate'] = $GLOBALS['currentTime'];
  1314. $generationTime += microtime(true);
  1315. $result['generationTime'] = (sprintf('%f', $generationTime) * 1000) . 'ms';
  1316. //return JSON array
  1317. if ($pretty) {
  1318. echo '<pre>' . safe_json_encode($result, JSON_PRETTY_PRINT) . '</pre>';
  1319. } else {
  1320. exit(safe_json_encode($result, JSON_HEX_QUOT | JSON_HEX_TAG));
  1321. }