index.php 29 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021
  1. <?php
  2. $generationTime = -microtime(true);
  3. //include functions
  4. require_once 'functions.php';
  5. //Set result array
  6. $result = array();
  7. //Get request method
  8. $method = $_SERVER['REQUEST_METHOD'];
  9. reset($_GET);
  10. $function = (key($_GET) ? str_replace("/", "_", key($_GET)) : false);
  11. //Exit if $function is blank
  12. if ($function === false) {
  13. $result['status'] = "error";
  14. $result['statusText'] = "No API Path Supplied";
  15. exit(json_encode($result));
  16. }
  17. $result['request'] = key($_GET);
  18. switch ($function) {
  19. case 'v1_settings_page':
  20. switch ($method) {
  21. case 'GET':
  22. if (qualifyRequest(1)) {
  23. $result['status'] = 'success';
  24. $result['statusText'] = 'success';
  25. $result['data'] = $pageSettings;
  26. writeLog('success', 'Admin Function - Accessed Settings Page', $GLOBALS['organizrUser']['username']);
  27. } else {
  28. $result['status'] = 'error';
  29. $result['statusText'] = 'API/Token invalid or not set';
  30. $result['data'] = null;
  31. writeLog('error', 'Admin Function - Tried to access Settings Page', $GLOBALS['organizrUser']['username']);
  32. }
  33. break;
  34. default:
  35. $result['status'] = 'error';
  36. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  37. break;
  38. }
  39. break;
  40. case 'v1_homepage_page':
  41. switch ($method) {
  42. case 'GET':
  43. $result['status'] = 'success';
  44. $result['statusText'] = 'success';
  45. $result['data'] = $pageHomepage;
  46. break;
  47. default:
  48. $result['status'] = 'error';
  49. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  50. break;
  51. }
  52. break;
  53. case 'v1_settings_plugins':
  54. switch ($method) {
  55. case 'GET':
  56. if (qualifyRequest(1)) {
  57. $result['status'] = 'success';
  58. $result['statusText'] = 'success';
  59. $result['data'] = $pageSettingsPlugins;
  60. } else {
  61. $result['status'] = 'error';
  62. $result['statusText'] = 'API/Token invalid or not set';
  63. $result['data'] = null;
  64. }
  65. break;
  66. default:
  67. $result['status'] = 'error';
  68. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  69. break;
  70. }
  71. break;
  72. case 'v1_settings_tab_editor_homepage':
  73. switch ($method) {
  74. case 'GET':
  75. if (qualifyRequest(1)) {
  76. $result['status'] = 'success';
  77. $result['statusText'] = 'success';
  78. $result['data'] = $pageSettingsTabEditorHomepage;
  79. } else {
  80. $result['status'] = 'error';
  81. $result['statusText'] = 'API/Token invalid or not set';
  82. $result['data'] = null;
  83. }
  84. break;
  85. default:
  86. $result['status'] = 'error';
  87. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  88. break;
  89. }
  90. break;
  91. case 'v1_settings_tab_editor_homepage_order':
  92. switch ($method) {
  93. case 'GET':
  94. if (qualifyRequest(1)) {
  95. $result['status'] = 'success';
  96. $result['statusText'] = 'success';
  97. $result['data'] = $pageSettingsTabEditorHomepageOrder;
  98. } else {
  99. $result['status'] = 'error';
  100. $result['statusText'] = 'API/Token invalid or not set';
  101. $result['data'] = null;
  102. }
  103. break;
  104. default:
  105. $result['status'] = 'error';
  106. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  107. break;
  108. }
  109. break;
  110. case 'v1_settings_homepage_list':
  111. switch ($method) {
  112. case 'GET':
  113. if (qualifyRequest(1)) {
  114. $result['status'] = 'success';
  115. $result['statusText'] = 'success';
  116. $result['data'] = getHomepageList();
  117. } else {
  118. $result['status'] = 'error';
  119. $result['statusText'] = 'API/Token invalid or not set';
  120. $result['data'] = null;
  121. }
  122. break;
  123. case 'POST':
  124. if (qualifyRequest(1)) {
  125. $result['status'] = 'success';
  126. $result['statusText'] = 'success';
  127. $result['data'] = editPlugins($_POST);
  128. } else {
  129. $result['status'] = 'error';
  130. $result['statusText'] = 'API/Token invalid or not set';
  131. $result['data'] = null;
  132. }
  133. break;
  134. default:
  135. $result['status'] = 'error';
  136. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  137. break;
  138. }
  139. break;
  140. case 'v1_settings_plugins_list':
  141. switch ($method) {
  142. case 'GET':
  143. if (qualifyRequest(1)) {
  144. $result['status'] = 'success';
  145. $result['statusText'] = 'success';
  146. $result['data'] = getPlugins();
  147. } else {
  148. $result['status'] = 'error';
  149. $result['statusText'] = 'API/Token invalid or not set';
  150. $result['data'] = null;
  151. }
  152. break;
  153. case 'POST':
  154. if (qualifyRequest(1)) {
  155. $result['status'] = 'success';
  156. $result['statusText'] = 'success';
  157. $result['data'] = editPlugins($_POST);
  158. } else {
  159. $result['status'] = 'error';
  160. $result['statusText'] = 'API/Token invalid or not set';
  161. $result['data'] = null;
  162. }
  163. break;
  164. default:
  165. $result['status'] = 'error';
  166. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  167. break;
  168. }
  169. break;
  170. case 'v1_settings_settings_logs':
  171. switch ($method) {
  172. case 'GET':
  173. if (qualifyRequest(1)) {
  174. $result['status'] = 'success';
  175. $result['statusText'] = 'success';
  176. $result['data'] = $pageSettingsSettingsLogs;
  177. } else {
  178. $result['status'] = 'error';
  179. $result['statusText'] = 'API/Token invalid or not set';
  180. $result['data'] = null;
  181. }
  182. break;
  183. default:
  184. $result['status'] = 'error';
  185. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  186. break;
  187. }
  188. break;
  189. case 'v1_settings_settings_sso':
  190. switch ($method) {
  191. case 'GET':
  192. if (qualifyRequest(1)) {
  193. $result['status'] = 'success';
  194. $result['statusText'] = 'success';
  195. $result['data'] = $pageSettingsSettingsSSO;
  196. } else {
  197. $result['status'] = 'error';
  198. $result['statusText'] = 'API/Token invalid or not set';
  199. $result['data'] = null;
  200. }
  201. break;
  202. default:
  203. $result['status'] = 'error';
  204. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  205. break;
  206. }
  207. break;
  208. case 'v1_settings_settings_main':
  209. switch ($method) {
  210. case 'GET':
  211. if (qualifyRequest(1)) {
  212. $result['status'] = 'success';
  213. $result['statusText'] = 'success';
  214. $result['data'] = $pageSettingsSettingsMain;
  215. } else {
  216. $result['status'] = 'error';
  217. $result['statusText'] = 'API/Token invalid or not set';
  218. $result['data'] = null;
  219. }
  220. break;
  221. default:
  222. $result['status'] = 'error';
  223. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  224. break;
  225. }
  226. break;
  227. case 'v1_settings_customize_appearance':
  228. switch ($method) {
  229. case 'GET':
  230. if (qualifyRequest(1)) {
  231. $result['status'] = 'success';
  232. $result['statusText'] = 'success';
  233. $result['data'] = $pageSettingsCustomizeAppearance;
  234. } else {
  235. $result['status'] = 'error';
  236. $result['statusText'] = 'API/Token invalid or not set';
  237. $result['data'] = null;
  238. }
  239. break;
  240. case 'POST':
  241. if (qualifyRequest(1)) {
  242. $result['status'] = 'success';
  243. $result['statusText'] = 'success';
  244. $result['data'] = editAppearance($_POST);
  245. } else {
  246. $result['status'] = 'error';
  247. $result['statusText'] = 'API/Token invalid or not set';
  248. $result['data'] = null;
  249. }
  250. break;
  251. default:
  252. $result['status'] = 'error';
  253. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  254. break;
  255. }
  256. break;
  257. case 'v1_remove_file':
  258. switch ($method) {
  259. case 'POST':
  260. if (qualifyRequest(1)) {
  261. $result['status'] = 'success';
  262. $result['statusText'] = 'success';
  263. $result['data'] = removeFile($_POST);
  264. } else {
  265. $result['status'] = 'error';
  266. $result['statusText'] = 'API/Token invalid or not set';
  267. $result['data'] = null;
  268. }
  269. break;
  270. default:
  271. $result['status'] = 'error';
  272. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  273. break;
  274. }
  275. break;
  276. case 'v1_update_config':
  277. switch ($method) {
  278. case 'POST':
  279. if (qualifyRequest(1)) {
  280. $result['status'] = 'success';
  281. $result['statusText'] = 'success';
  282. $result['data'] = updateConfigItem($_POST);
  283. } else {
  284. $result['status'] = 'error';
  285. $result['statusText'] = 'API/Token invalid or not set';
  286. $result['data'] = null;
  287. }
  288. break;
  289. default:
  290. $result['status'] = 'error';
  291. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  292. break;
  293. }
  294. break;
  295. case 'v1_update_config_multiple':
  296. switch ($method) {
  297. case 'POST':
  298. if (qualifyRequest(1)) {
  299. $result['status'] = 'success';
  300. $result['statusText'] = 'success';
  301. $result['data'] = updateConfigMultiple($_POST);
  302. } else {
  303. $result['status'] = 'error';
  304. $result['statusText'] = 'API/Token invalid or not set';
  305. $result['data'] = null;
  306. }
  307. break;
  308. default:
  309. $result['status'] = 'error';
  310. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  311. break;
  312. }
  313. break;
  314. case 'v1_update_config_multiple_form':
  315. switch ($method) {
  316. case 'POST':
  317. if (qualifyRequest(1)) {
  318. $result['status'] = 'success';
  319. $result['statusText'] = 'success';
  320. $result['data'] = updateConfigMultipleForm($_POST);
  321. } else {
  322. $result['status'] = 'error';
  323. $result['statusText'] = 'API/Token invalid or not set';
  324. $result['data'] = null;
  325. }
  326. break;
  327. default:
  328. $result['status'] = 'error';
  329. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  330. break;
  331. }
  332. break;
  333. case 'v1_homepage_connect':
  334. switch ($method) {
  335. case 'POST':
  336. $result['status'] = 'success';
  337. $result['statusText'] = 'success';
  338. $result['data'] = homepageConnect($_POST);
  339. break;
  340. default:
  341. $result['status'] = 'error';
  342. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  343. break;
  344. }
  345. break;
  346. case 'v1_test_api_connection':
  347. switch ($method) {
  348. case 'POST':
  349. if (qualifyRequest(1)) {
  350. $result['status'] = 'success';
  351. $result['statusText'] = 'success';
  352. $result['data'] = testAPIConnection($_POST);
  353. } else {
  354. $result['status'] = 'error';
  355. $result['statusText'] = 'API/Token invalid or not set';
  356. $result['data'] = null;
  357. }
  358. break;
  359. default:
  360. $result['status'] = 'error';
  361. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  362. break;
  363. }
  364. break;
  365. case 'v1_settings_tab_editor_tabs':
  366. switch ($method) {
  367. case 'GET':
  368. if (qualifyRequest(1)) {
  369. $result['status'] = 'success';
  370. $result['statusText'] = 'success';
  371. $result['data'] = $pageSettingsTabEditorTabs;
  372. } else {
  373. $result['status'] = 'error';
  374. $result['statusText'] = 'API/Token invalid or not set';
  375. $result['data'] = null;
  376. }
  377. break;
  378. case 'POST':
  379. if (qualifyRequest(1)) {
  380. $result['status'] = 'success';
  381. $result['statusText'] = 'success';
  382. $result['data'] = editTabs($_POST);
  383. } else {
  384. $result['status'] = 'error';
  385. $result['statusText'] = 'API/Token invalid or not set';
  386. $result['data'] = null;
  387. }
  388. break;
  389. default:
  390. $result['status'] = 'error';
  391. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  392. break;
  393. }
  394. break;
  395. case 'v1_settings_tab_editor_categories':
  396. switch ($method) {
  397. case 'GET':
  398. if (qualifyRequest(1)) {
  399. $result['status'] = 'success';
  400. $result['statusText'] = 'success';
  401. $result['data'] = $pageSettingsTabEditorCategories;
  402. } else {
  403. $result['status'] = 'error';
  404. $result['statusText'] = 'API/Token invalid or not set';
  405. $result['data'] = null;
  406. }
  407. break;
  408. case 'POST':
  409. if (qualifyRequest(1)) {
  410. $result['status'] = 'success';
  411. $result['statusText'] = 'success';
  412. $result['data'] = editCategories($_POST);
  413. } else {
  414. $result['status'] = 'error';
  415. $result['statusText'] = 'API/Token invalid or not set';
  416. $result['data'] = null;
  417. }
  418. break;
  419. default:
  420. $result['status'] = 'error';
  421. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  422. break;
  423. }
  424. break;
  425. case 'v1_settings_user_manage_users':
  426. switch ($method) {
  427. case 'GET':
  428. if (qualifyRequest(1)) {
  429. $result['status'] = 'success';
  430. $result['statusText'] = 'success';
  431. $result['data'] = $pageSettingsUserManageUsers;
  432. } else {
  433. $result['status'] = 'error';
  434. $result['statusText'] = 'API/Token invalid or not set';
  435. $result['data'] = null;
  436. }
  437. break;
  438. case 'POST':
  439. if (qualifyRequest(1)) {
  440. $result['status'] = 'success';
  441. $result['statusText'] = 'success';
  442. $result['data'] = adminEditUser($_POST);
  443. } elseif (qualifyRequest(998)) {
  444. $result['status'] = 'success';
  445. $result['statusText'] = 'success';
  446. $result['data'] = editUser($_POST);
  447. } else {
  448. $result['status'] = 'error';
  449. $result['statusText'] = 'API/Token invalid or not set';
  450. $result['data'] = null;
  451. }
  452. break;
  453. default:
  454. $result['status'] = 'error';
  455. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  456. break;
  457. }
  458. break;
  459. case 'v1_manage_user':
  460. switch ($method) {
  461. case 'POST':
  462. if (qualifyRequest(998)) {
  463. $result['status'] = 'success';
  464. $result['statusText'] = 'success';
  465. $result['data'] = editUser($_POST);
  466. } else {
  467. $result['status'] = 'error';
  468. $result['statusText'] = 'API/Token invalid or not set';
  469. $result['data'] = null;
  470. }
  471. break;
  472. default:
  473. $result['status'] = 'error';
  474. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  475. break;
  476. }
  477. break;
  478. case 'v1_settings_user_manage_groups':
  479. switch ($method) {
  480. case 'GET':
  481. if (qualifyRequest(1)) {
  482. $result['status'] = 'success';
  483. $result['statusText'] = 'success';
  484. $result['data'] = $pageSettingsUserManageGroups;
  485. } else {
  486. $result['status'] = 'error';
  487. $result['statusText'] = 'API/Token invalid or not set';
  488. $result['data'] = null;
  489. }
  490. break;
  491. case 'POST':
  492. if (qualifyRequest(1)) {
  493. $result['status'] = 'success';
  494. $result['statusText'] = 'success';
  495. $result['data'] = adminEditGroup($_POST);
  496. } else {
  497. $result['status'] = 'error';
  498. $result['statusText'] = 'API/Token invalid or not set';
  499. $result['data'] = null;
  500. }
  501. break;
  502. default:
  503. $result['status'] = 'error';
  504. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  505. break;
  506. }
  507. break;
  508. case 'v1_settings_image_manager_view':
  509. switch ($method) {
  510. case 'GET':
  511. if (qualifyRequest(1)) {
  512. $result['status'] = 'success';
  513. $result['statusText'] = 'success';
  514. $result['data'] = $pageSettingsImageManager;
  515. } else {
  516. $result['status'] = 'error';
  517. $result['statusText'] = 'API/Token invalid or not set';
  518. $result['data'] = null;
  519. }
  520. break;
  521. case 'POST':
  522. if (qualifyRequest(1)) {
  523. $result['status'] = 'success';
  524. $result['statusText'] = 'success';
  525. $result['data'] = editImages();
  526. } else {
  527. $result['status'] = 'error';
  528. $result['statusText'] = 'API/Token invalid or not set';
  529. $result['data'] = null;
  530. }
  531. break;
  532. default:
  533. $result['status'] = 'error';
  534. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  535. break;
  536. }
  537. break;
  538. case 'v1_wizard_page':
  539. switch ($method) {
  540. case 'GET':
  541. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  542. $result['status'] = 'success';
  543. $result['statusText'] = 'success';
  544. $result['data'] = $pageWizard;
  545. } else {
  546. $result['status'] = 'error';
  547. $result['statusText'] = 'Wizard has already been run';
  548. $result['data'] = null;
  549. }
  550. break;
  551. default:
  552. $result['status'] = 'error';
  553. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  554. break;
  555. }
  556. break;
  557. case 'v1_dependencies_page':
  558. switch ($method) {
  559. case 'GET':
  560. $result['status'] = 'success';
  561. $result['statusText'] = 'success';
  562. $result['data'] = $pageDependencies;
  563. break;
  564. default:
  565. $result['status'] = 'error';
  566. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  567. break;
  568. }
  569. break;
  570. case 'v1_wizard_config':
  571. switch ($method) {
  572. case 'POST':
  573. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  574. $result['status'] = 'success';
  575. $result['statusText'] = 'success';
  576. $result['data'] = wizardConfig($_POST);
  577. } else {
  578. $result['status'] = 'error';
  579. $result['statusText'] = 'Wizard has already been run';
  580. $result['data'] = null;
  581. }
  582. break;
  583. default:
  584. $result['status'] = 'error';
  585. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  586. break;
  587. }
  588. break;
  589. case 'v1_wizard_path':
  590. switch ($method) {
  591. case 'POST':
  592. if (!file_exists('config' . DIRECTORY_SEPARATOR . 'config.php')) {
  593. $result['status'] = 'success';
  594. $result['statusText'] = 'success';
  595. $result['data'] = wizardPath($_POST);
  596. } else {
  597. $result['status'] = 'error';
  598. $result['statusText'] = 'Wizard has already been run';
  599. $result['data'] = null;
  600. }
  601. break;
  602. default:
  603. $result['status'] = 'error';
  604. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  605. break;
  606. }
  607. break;
  608. case 'v1_login':
  609. switch ($method) {
  610. case 'POST':
  611. $result['status'] = 'success';
  612. $result['statusText'] = 'success';
  613. $result['data'] = login($_POST);
  614. break;
  615. default:
  616. $result['status'] = 'error';
  617. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  618. break;
  619. }
  620. break;
  621. case 'v1_register':
  622. switch ($method) {
  623. case 'POST':
  624. $result['status'] = 'success';
  625. $result['statusText'] = 'success';
  626. $result['data'] = register($_POST);
  627. break;
  628. default:
  629. $result['status'] = 'error';
  630. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  631. break;
  632. }
  633. break;
  634. case 'v1_recover':
  635. switch ($method) {
  636. case 'POST':
  637. $result['status'] = 'success';
  638. $result['statusText'] = 'success';
  639. $result['data'] = recover($_POST);
  640. break;
  641. default:
  642. $result['status'] = 'error';
  643. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  644. break;
  645. }
  646. break;
  647. case 'v1_test_iframe':
  648. switch ($method) {
  649. case 'POST':
  650. $result['status'] = 'success';
  651. $result['statusText'] = 'success';
  652. $result['data'] = frameTest($_POST['data']['url']);
  653. break;
  654. default:
  655. $result['status'] = 'error';
  656. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  657. break;
  658. }
  659. break;
  660. case 'v1_upgrade':
  661. case 'v1_update':
  662. case 'v1_force':
  663. switch ($method) {
  664. case 'POST':
  665. if (qualifyRequest(1)) {
  666. $result['status'] = 'success';
  667. $result['statusText'] = 'success';
  668. $result['data'] = upgradeInstall($_POST['data']['branch'], $_POST['data']['stage']);
  669. } else {
  670. $result['status'] = 'error';
  671. $result['statusText'] = 'API/Token invalid or not set';
  672. $result['data'] = null;
  673. }
  674. break;
  675. default:
  676. $result['status'] = 'error';
  677. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  678. break;
  679. }
  680. break;
  681. case 'v1_login_page':
  682. switch ($method) {
  683. case 'GET':
  684. $result['status'] = 'success';
  685. $result['statusText'] = 'success';
  686. $result['data'] = $pageLogin;
  687. break;
  688. default:
  689. $result['status'] = 'error';
  690. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  691. break;
  692. }
  693. break;
  694. case 'v1_lockscreen':
  695. switch ($method) {
  696. case 'GET':
  697. $result['status'] = 'success';
  698. $result['statusText'] = 'success';
  699. $result['data'] = $pageLockScreen;
  700. break;
  701. default:
  702. $result['status'] = 'error';
  703. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  704. break;
  705. }
  706. break;
  707. case 'v1_login_log':
  708. switch ($method) {
  709. case 'GET':
  710. if (qualifyRequest(1)) {
  711. $result['status'] = 'success';
  712. $result['statusText'] = 'success';
  713. $result['data'] = getLog('loginLog');
  714. } else {
  715. $result['status'] = 'error';
  716. $result['statusText'] = 'API/Token invalid or not set';
  717. $result['data'] = null;
  718. }
  719. break;
  720. default:
  721. $result['status'] = 'error';
  722. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  723. break;
  724. }
  725. break;
  726. case 'v1_organizr_log':
  727. switch ($method) {
  728. case 'GET':
  729. if (qualifyRequest(1)) {
  730. $result['status'] = 'success';
  731. $result['statusText'] = 'success';
  732. $result['data'] = getLog('org');
  733. } else {
  734. $result['status'] = 'error';
  735. $result['statusText'] = 'API/Token invalid or not set';
  736. $result['data'] = null;
  737. }
  738. break;
  739. default:
  740. $result['status'] = 'error';
  741. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  742. break;
  743. }
  744. break;
  745. case 'v1_user_list':
  746. switch ($method) {
  747. case 'GET':
  748. if (qualifyRequest(1)) {
  749. $result['status'] = 'success';
  750. $result['statusText'] = 'success';
  751. $result['data'] = allUsers();
  752. } else {
  753. $result['status'] = 'error';
  754. $result['statusText'] = 'API/Token invalid or not set';
  755. $result['data'] = null;
  756. }
  757. break;
  758. default:
  759. $result['status'] = 'error';
  760. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  761. break;
  762. }
  763. break;
  764. case 'v1_tab_list':
  765. switch ($method) {
  766. case 'GET':
  767. if (qualifyRequest(1)) {
  768. $result['status'] = 'success';
  769. $result['statusText'] = 'success';
  770. $result['data'] = allTabs();
  771. } else {
  772. $result['status'] = 'error';
  773. $result['statusText'] = 'API/Token invalid or not set';
  774. $result['data'] = null;
  775. }
  776. break;
  777. default:
  778. $result['status'] = 'error';
  779. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  780. break;
  781. }
  782. break;
  783. case 'v1_image_list':
  784. switch ($method) {
  785. case 'GET':
  786. if (qualifyRequest(1)) {
  787. $result['status'] = 'success';
  788. $result['statusText'] = 'success';
  789. $result['data'] = getImages();
  790. } else {
  791. $result['status'] = 'error';
  792. $result['statusText'] = 'API/Token invalid or not set';
  793. $result['data'] = null;
  794. }
  795. break;
  796. default:
  797. $result['status'] = 'error';
  798. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  799. break;
  800. }
  801. break;
  802. case 'v1_customize_appearance':
  803. switch ($method) {
  804. case 'GET':
  805. if (qualifyRequest(1)) {
  806. $result['status'] = 'success';
  807. $result['statusText'] = 'success';
  808. $result['data'] = getCustomizeAppearance();
  809. } else {
  810. $result['status'] = 'error';
  811. $result['statusText'] = 'API/Token invalid or not set';
  812. $result['data'] = null;
  813. }
  814. break;
  815. default:
  816. $result['status'] = 'error';
  817. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  818. break;
  819. }
  820. break;
  821. case 'v1_sso':
  822. switch ($method) {
  823. case 'GET':
  824. if (qualifyRequest(1)) {
  825. $result['status'] = 'success';
  826. $result['statusText'] = 'success';
  827. $result['data'] = getSSO();
  828. } else {
  829. $result['status'] = 'error';
  830. $result['statusText'] = 'API/Token invalid or not set';
  831. $result['data'] = null;
  832. }
  833. break;
  834. default:
  835. $result['status'] = 'error';
  836. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  837. break;
  838. }
  839. break;
  840. case 'v1_settings_main':
  841. switch ($method) {
  842. case 'GET':
  843. if (qualifyRequest(1)) {
  844. $result['status'] = 'success';
  845. $result['statusText'] = 'success';
  846. $result['data'] = getSettingsMain();
  847. } else {
  848. $result['status'] = 'error';
  849. $result['statusText'] = 'API/Token invalid or not set';
  850. $result['data'] = null;
  851. }
  852. break;
  853. default:
  854. $result['status'] = 'error';
  855. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  856. break;
  857. }
  858. break;
  859. case 'v1_user_edit':
  860. switch ($method) {
  861. case 'POST':
  862. if (qualifyRequest(1)) {
  863. $result['status'] = 'success';
  864. $result['statusText'] = 'success';
  865. $result['data'] = adminEditUser($_POST);
  866. } elseif (qualifyRequest(998)) {
  867. $result['status'] = 'success';
  868. $result['statusText'] = 'success';
  869. $result['data'] = editUser($_POST);
  870. } else {
  871. $result['status'] = 'error';
  872. $result['statusText'] = 'API/Token invalid or not set';
  873. $result['data'] = null;
  874. }
  875. break;
  876. default:
  877. $result['status'] = 'error';
  878. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  879. break;
  880. }
  881. break;
  882. case 'v1_logout':
  883. switch ($method) {
  884. case 'GET':
  885. $result['status'] = 'success';
  886. $result['statusText'] = 'success';
  887. $result['data'] = logout();
  888. break;
  889. default:
  890. $result['status'] = 'error';
  891. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  892. break;
  893. }
  894. break;
  895. case 'v1_launch_organizr':
  896. switch ($method) {
  897. case 'GET':
  898. $pluginSearch = '-enabled';
  899. $pluginInclude = '-include';
  900. $status = array();
  901. $result['status'] = 'success';
  902. $result['statusText'] = 'success';
  903. $status['status'] = organizrStatus();
  904. $result['appearance'] = loadAppearance();
  905. $status['user'] = $GLOBALS['organizrUser'];
  906. $status['categories'] = loadTabs()['categories'];
  907. $status['tabs'] = loadTabs()['tabs'];
  908. $status['plugins'] = array_filter($GLOBALS, function ($k) use ($pluginSearch) {
  909. return stripos($k, $pluginSearch) !== false;
  910. }, ARRAY_FILTER_USE_KEY);
  911. $status['plugins']['includes'] = array_filter($GLOBALS, function ($k) use ($pluginInclude) {
  912. return stripos($k, $pluginInclude) !== false;
  913. }, ARRAY_FILTER_USE_KEY);
  914. $result['data'] = $status;
  915. $result['branch'] = $GLOBALS['branch'];
  916. $result['theme'] = $GLOBALS['theme'];
  917. $result['style'] = $GLOBALS['style'];
  918. $result['version'] = $GLOBALS['installedVersion'];
  919. $result['sso'] = array(
  920. 'myPlexAccessToken' => isset($_COOKIE['mpt']) ? $_COOKIE['mpt'] : false,
  921. 'id_token' => isset($_COOKIE['Auth']) ? $_COOKIE['Auth'] : false
  922. );
  923. $result['settings'] = organizrSpecialSettings();
  924. break;
  925. default:
  926. $result['status'] = 'error';
  927. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  928. break;
  929. }
  930. break;
  931. case 'v1_auth':
  932. switch ($method) {
  933. case 'GET':
  934. auth();
  935. break;
  936. default:
  937. $result['status'] = 'error';
  938. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  939. break;
  940. }
  941. break;
  942. case 'v1_plugin':
  943. switch ($method) {
  944. case 'POST':
  945. // Include all plugin api Calls
  946. foreach (glob(__DIR__ . DIRECTORY_SEPARATOR . 'plugins' . DIRECTORY_SEPARATOR . 'api' . DIRECTORY_SEPARATOR . "*.php") as $filename) {
  947. require_once $filename;
  948. }
  949. break;
  950. default:
  951. $result['status'] = 'error';
  952. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  953. break;
  954. }
  955. break;
  956. case 'v1_image':
  957. switch ($method) {
  958. case 'GET':
  959. getImage();
  960. break;
  961. default:
  962. $result['status'] = 'error';
  963. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  964. break;
  965. }
  966. break;
  967. case 'v1_downloader':
  968. switch ($method) {
  969. case 'POST':
  970. $result['status'] = 'success';
  971. $result['statusText'] = 'success';
  972. $result['data'] = downloader($_POST);
  973. break;
  974. default:
  975. $result['status'] = 'error';
  976. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  977. break;
  978. }
  979. break;
  980. case 'v1_ombi':
  981. switch ($method) {
  982. case 'POST':
  983. $result['status'] = 'success';
  984. $result['statusText'] = 'success';
  985. $result['data'] = ombiAPI($_POST);
  986. break;
  987. default:
  988. $result['status'] = 'error';
  989. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  990. break;
  991. }
  992. break;
  993. case 'v1_plex_join':
  994. switch ($method) {
  995. case 'POST':
  996. $result['status'] = 'success';
  997. $result['statusText'] = 'success';
  998. $result['data'] = plexJoinAPI($_POST);
  999. break;
  1000. default:
  1001. $result['status'] = 'error';
  1002. $result['statusText'] = 'The function requested is not defined for method: ' . $method;
  1003. break;
  1004. }
  1005. break;
  1006. default:
  1007. //No Function Available
  1008. $result['status'] = 'error';
  1009. $result['statusText'] = 'function requested is not defined';
  1010. break;
  1011. }
  1012. //Set Default Result
  1013. if (!$result) {
  1014. $result['status'] = "error";
  1015. $result['error'] = "An error has occurred";
  1016. }
  1017. $result['generationDate'] = $GLOBALS['currentTime'];
  1018. $generationTime += microtime(true);
  1019. $result['generationTime'] = (sprintf('%f', $generationTime) * 1000) . 'ms';
  1020. //return JSON array
  1021. exit(json_encode($result, JSON_HEX_QUOT | JSON_HEX_TAG));