bludit/bl-plugins/api/plugin.php

<?php

class pluginAPI extends Plugin {

	public function init()
	{
		// Generate the API Token
		$token = md5( uniqid().time().DOMAIN );

		$this->dbFields = array(
			'token'=>$token,	// API Token
			'amountOfItems'=>15	// Amount of items to return
		);
	}

	public function form()
	{
		$html  = '<div>';
		$html .= '<label>'.$Language->get('API Token').'</label>';
		$html .= '<input type="text" value="'.$this->getValue('token').'" disabled>';
		$html .= '<span class="tip">'.$Language->get('This token is for read only and is regenerated every time you install the plugin').'</span>';
		$html .= '</div>';

		$html .= '<div>';
		$html .= '<label>'.$Language->get('Amount of pages').'</label>';
		$html .= '<input id="jsamountOfItems" name="amountOfItems" type="text" value="'.$this->getValue('amountOfItems').'">';
		$html .= '<span class="tip">'.$Language->get('The amount of pages to return when you call to /api/pages').'</span>';
		$html .= '</div>';

		return $html;
	}


// API HOOKS
// ----------------------------------------------------------------------------

	public function beforeRulesLoad()
	{
		global $Url;
		global $dbPages;
		global $dbUsers;

		// CHECK URL
		// ------------------------------------------------------------
		// Check if the URI start with /api/
		$startString = HTML_PATH_ROOT.'api/';
		$URI = $Url->uri();
		$length = mb_strlen($startString, CHARSET);
		if( mb_substr($URI, 0, $length)!=$startString ) {
			return false;
		}

		// Remove the first part of the URI
		$URI = mb_substr($URI, $length);

		// INPUTS
		// ------------------------------------------------------------
		$inputs = $this->getInputs();

		// PARAMETERS
		// ------------------------------------------------------------
		$parameters = $this->getParameters($URI);

		// API TOKEN
		// ------------------------------------------------------------
		$tokenAPI = $this->getValue('token');

		// Check empty token
		if( empty($inputs['token']) ) {
			$this->response(array(
				'status'=>'1',
				'message'=>'Missing API token.'
			));
		}

		// Check the token is valid
		if( $inputs['token']!=$tokenAPI ) {
			$this->response(array(
				'status'=>'1',
				'message'=>'Invalid API token.'
			));
		}

		// AUTHENTICATION TOKEN
		// ------------------------------------------------------------
		$writePermissions = false;
		if( !empty($inputs['authentication']) ) {
			// Get the user with the authentication token
			$username = $dbUsers->getByAuthToken($inputs['authentication']);
			if( $username!==false ) {
				// Enable write permissions
				$writePermissions = true;
			}
		}

		// REQUESTS
		// ------------------------------------------------------------

		// (GET) /api/pages
		if( ($method==='GET') && ($parameters[0]==='pages') && empty($parameters[1]) ) {
			$data = $this->getPages();
		}
		// (GET) /api/pages/<key>
		elseif( ($method==='GET') && ($parameters[0]==='pages') && !empty($parameters[1]) ) {
			$data = $this->getPage($parameters[1]);
		}
		// (POST) /api/pages
		elseif( ($method==='POST') && ($parameters[0]==='pages') && empty($parameters[1]) && $writePermissions ) {
			$data = $this->newPage($inputs);
		}
		else {
			$data = array(
				'status'=>'1',
				'message'=>'Error: URI not found or Access denied.'
			);
		}

		$this->response($data);
	}

// PRIVATE METHODS
// ----------------------------------------------------------------------------

	private function getParameters($URI)
	{
		// PARAMETERS
		// ------------------------------------------------------------
		// /api/pages 		| GET  | returns all pages
		// /api/pages/{key}	| GET  | returns the page with the {key}
		// /api/cli/regenerate 	| POST | check for new posts and pages

		$parameters = explode('/', $URI);

		// Sanitize parameters
		foreach($parameters as $key=>$value) {
			$parameters[$key] = Sanitize::html($value);
		}

		return $parameters;
	}

	private function getInputs()
	{
		// METHODS
		// ------------------------------------------------------------
		// GET
		// POST
		// PUT
		// DELETE

		$method = $_SERVER['REQUEST_METHOD'];

		switch($method) {
			case "POST":
				$inputs = $_POST;
				break;
			case "GET":
			case "DELETE":
				$inputs = $_GET;
				break;
			case "PUT":
				$inputs = file_get_contents("php://input");
				break;
			default:
				$inputs = json_encode(array());
				break;
		}

		// Input data need to be JSON
		$inputs = json_decode(file_get_contents('php://input'),true);

		// Sanitize inputs
		foreach($inputs as $key=>$value) {
			$inputs[$key] = Sanitize::html($value);
		}

		return $inputs;
	}

	private function response($data=array())
	{
		$json = json_encode($data);
		header('Content-Type: application/json');
		exit($json);
	}

	private function getPage($key)
	{
		// Generate the object Page
		$Page = buildPage($key);

		if(!$Page) {
			return array(
				'status'=>'1',
				'message'=>'Page not found.'
			);
		}

		$data = array();
		$data['status'] = '0';
		$data['message'] = 'Page filtered by key: '.$key;
		$data['data'] = $Page->json( $returnsArray=true );

		return $data;
	}

	private function getPages()
	{
		global $dbPages;

		$onlyPublished = true;
		$amountOfItems = $this->getValue('amountOfItems');
		$pageNumber = 1;
		$list = $dbPages->getList($pageNumber, $amountOfItems, $onlyPublished);

		$tmp = array(
			'status'=>'0',
			'message'=>'List of pages, amount of items: '.$amountOfItems,
			'data'=>array()
		);

		// Get keys of pages
		$keys = array_keys($list);
		foreach($keys as $pageKey) {
			// Create the page object from the page key
			$page = buildPage($pageKey);
			array_push($tmp['data'], $Page->json( $returnsArray=true ));
		}

		return $tmp;
	}

	private function newPage($args)
	{
		// This function is defined on functions.php
		return createNewPage($args);
	}

}