Float/FloatAppGate
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Added Other AP

Browse Source
This commit is contained in:
dev-chiefworks
2022-04-26 11:30:34 -04:00
parent 5e006a6a21
commit 47f4fad75c
251 changed files with 29298 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
public/core1/SAVVY/user/functions.php
+470
View File
@@ -0,0 +1,470 @@
<?php
function checkRequestHeaders($action, $requestParams, $requestHeaders = [], $requestWhitelist = [])
{
global $pgconn;
$whitelist = false;
$device = [];
$session = [];
error_log('Checking user::' . $action . '...');
if (array_key_exists($action, $requestWhitelist)) {
error_log('whitelisted!');
$whitelist = true;
}
$sessionID = null;
$deviceToken = null;
$requestHeaders = count($requestHeaders) > 0 ? $requestHeaders : getallheaders();
if (array_key_exists("x-session-id", $requestHeaders)) {
$sessionID = $requestHeaders["x-session-id"];
}
if (array_key_exists("x-devicetoken", $requestHeaders)) {
$deviceToken = $requestHeaders["x-devicetoken"];
}
error_log('X-Session-ID: ' . $sessionID);
error_log('X-DeviceToken: ' . $deviceToken);
// Step 1a: Get member_id by X-DeviceToken
$header_member_id = 0;
$q = "SELECT * FROM members_devices WHERE access_token='" . pg_escape_string($deviceToken) . "'";
$r = pg_query($pgconn, $q);
if ($r && pg_num_rows($r) && $f = pg_fetch_assoc($r)) {
$header_member_id = $f['member_id'];
$device = $f;
}
if ($header_member_id < 1) {
//return [$whitelist || false, $device, $session]; //throw new RuntimeException('Invalid header member ID', 500);
}
// Step 1b: Get member_id by X-Session-ID
$session_member_id = 0;
$q = "SELECT * FROM members_session WHERE session='" . pg_escape_string($sessionID) . "'";
$r = pg_query($pgconn, $q);
if ($r && pg_num_rows($r) && $f = pg_fetch_assoc($r)) {
$session_member_id = $f['member_id'];
$session = $f;
}
if ($session_member_id < 1) {
//return [$whitelist || false, $device, $session]; //throw new RuntimeException('Invalid session member ID', 500);
}
// Step 2: Get member_id from $this->requestParams
$request_member_id = 0;
if (array_key_exists('member_id', $requestParams)) {
$request_member_id = (int) $requestParams['member_id'];
}
error_log('member_id[request] = ' . $request_member_id);
error_log('member_id[token] = ' . $header_member_id);
error_log('member_id[session] = ' . $session_member_id);
// Step 3a: Match Step 1 and 2 result
if ($request_member_id > 0) {
// Step 3b: Fallback to X-Session-ID?
if ($request_member_id != $header_member_id || $request_member_id != $session_member_id) {
return [$whitelist || false, $device, $session]; //throw new RuntimeException('Invalid request member ID', 500);
}
}
return [true, $device, $session];
}
function Fextension_call($in, &$out)
{
global $savvyext, $endpoint;
foreach ($in as $key => $val) {
if ($val != "" && is_string($val)) {
$in[$key] = pg_escape_string($val);
}
}
if ($endpoint == 'userlogin') {
php_userlogin($in, $out);
}
if (isset($out['status']) && $out['status'] == PHP_LOGIN_OK) {
$out['retval'] = 100;
updateQuery("UPDATE members SET password2 = '" . md5($in["password"]) . "' WHERE id = " . $out["member_id"]);
} else {
$out = $savvyext->savvyext_api($in);
if ($endpoint == 'userlogin') {
php_userlogin($in, $out);
if (!empty($out['status']) && $out['status'] == 'OK') {
updateQuery("UPDATE members SET password2 = " . md5($in["password"]) . "' WHERE id = " . $out["member_id"]);
}
}
if ($endpoint == 'createuser' && $out['member_id'] > 0 && !empty($surveyData)) {
$surveyData = isset($in['signUpSurveyData']) ? $in['signUpSurveyData'] : [];
// save survey data
saveMembersSurvey($surveyData, $out);
}
}
}
function flatten($data, $parentkey = "")
{
$result = array();
foreach ($data as $key => $val) {
if (is_array($val)) {
$result = array_merge($result, flatten($val, $parentkey . $key . "_"));
} else {
$result[$parentkey . $key] = $val;
}
}
return $result;
}
function LogLocationArray($inD)
{
$act1 = "DD";
$in = $inD;
$fields_string = "";
foreach ($in as $key => $value) {
$fields_string .= $key . '=' . $value . '&';
}
LogString($act1, $fields_string);
}
function LogString($act1, $str1)
{
///opt/mobicontent/engine/logs
//date_default_timezone_set('Africa/Lagos');
/* $myFile = "log/GPS.log";
$fh = fopen($myFile, 'a') or die("can't open file");
$stringData = $act1 . " - " . json_encode($str1) . "\n";
fwrite($fh, $stringData);
fclose($fh); */
}
function ListLinkedEmail($in)
{
global $pgconn;
$out = array();
$out["internal_return"] = "0";
$sqU1 = "SELECT id, link_email FROM members_trackemail WHERE active = 1 AND member_id =" . $in["member_id"];
LogString("LOGIN->", $sqU1);
$res1 = pg_query($pgconn, $sqU1);
$total = pg_num_rows($res1);
$itmA = array();
if ($res1 and pg_num_rows($res1) > 0) {
while ($row = pg_fetch_assoc($res1)) {
$itmA[] = $row;
//array_push($itmA,$row);
}
}
$out = array(
"status" => 1,
"total_record" => ($total),
"internal_return" => 1,
"result_list" => $itmA,
); // "request_id" => 324,
//$out =$itmA;
return $out;
}
/*
*
savvy=> select * from members_trackemail;
id | member_id | link_email | link_password | link_provider | added | updated | active
----+-----------+--------------------------+---------------+---------------+----------------------------+----------------------------+--------
3 | 1 | savvvy@chiefsoft.com | may12002! | google | 2018-09-30 20:41:25.523628 | 2018-09-30 20:41:25.523628 | 1
4 | 1 | support_test2@paylid.com | may12002 | google | 2018-09-30 21:00:17.322802 | 2018-09-30 21:00:17.322802 | 1
1 | 1 | ameye@paylid.com | | google | 2018-09-30 20:39:03.489826 | 2018-09-30 20:39:03.489826 | 0
2 | 1 | ameye@paylid.com | may12002 | google | 2018-09-30 20:40:40.93566 | 2018-09-30 20:40:40.93566 | 0
(4 rows)
*/
function loginSavvyUser($in)
{
global $pgconn;
$out = array();
$out["internal_return"] = "0";
$sqU1 = "SELECT *, id AS member_id FROM members WHERE status = 1 AND username ='" . $in["username"] . "' AND password=md5('" . $in["password"] . "')";
LogString("LOGIN->", $sqU1);
$res1 = pg_query($pgconn, $sqU1);
if ($res1 and pg_num_rows($res1) > 0) {
$out = pg_fetch_assoc($res1);
$out["session"] = "FGFGFGFGFGFGFGFGGF";
$out["internal_return"] = "100";
}
return $out;
}
function upload_file_call()
{
global $target_url;
$data = $_POST;
$url = $target_url . "/../internal_upload.php";
$uploaddir = realpath('./') . '/files/';
$uploadfile = $uploaddir . basename($_FILES['file_contents']['name']);
if (!move_uploaded_file($_FILES['file_contents']['tmp_name'], $uploadfile)) {
$in["uploadfile"] = $uploadfile;
header('HTTP/1.1 400 Bad Request');
header('Status: 400 Bad Request');
echo "{\"status\":\"Failed to upload file\"}";
exit();
}
//-----------------------------------------------------------
$file_name_with_full_path = realpath($uploadfile);
/* curl will accept an array here too.
* Many examples I found showed a url-encoded string instead.
* Take note that the 'key' in the array will be the key that shows up in the
* $_FILES array of the accept script. and the at sign '@' is required before the
* file name.
*/
$data['file_contents'] = '@' . $file_name_with_full_path;
$curl = curl_init();
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl, CURLOPT_POST, 1);
curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
$json_response = curl_exec($curl);
$status = curl_getinfo($curl, CURLINFO_HTTP_CODE);
if ($status != 200) {
header('HTTP/1.1 400 Bad Request');
header('Status: 400 Bad Request');
echo "{\"status\":\"Error: call to URL $url failed with status $status, curl_error " . curl_error($curl) . ", curl_errno " . curl_errno($curl) . "\"}";
}
curl_close($curl);
unlink($file_name_with_full_path);
//$response = json_decode($json_response, true);
header("HTTP/1.1 200 OK");
header("Status: 200 OK");
echo $json_response;
}
function saveLinkedMail($in, &$out)
{
global $pgconn;
$out = array();
$out["internal_return"] = "0";
if (trim($in["member_id"]) != '' && trim($in["link_email"]) != '' && trim($in["link_password"]) != '' && trim($in["link_provider"]) != '') {
$mysql = "INSERT INTO members_trackemail ( member_id,link_email,link_password,link_provider) VALUES (" . $in["member_id"] . ",'" . $in["link_email"] . "','" . $in["link_password"] . "', '" . $in["link_provider"] . "')";
$res1 = pg_query($pgconn, $mysql);
if ($res1 and pg_num_rows($res1) > 0) {
sync_extCall($in, $out);
}
} else {
}
}
function saveMembersSurvey($surveyData, $out)
{
global $pgconn;
if (empty($out["added"])) {
//only save first time
$member_id = $out['member_id'];
foreach ($surveyData as $group_key => $survey) {
$answers = isset($survey['answers']) ? $survey['answers'] : [];
foreach ($answers as $answer_key => $value) {
if ($value == true) {
$q = "INSERT INTO members_onboarding_survey ( member_id, answers_key, answers,status, added) VALUES (" . $member_id . ",'" . $answer_key . "','" . $value . "', 1, now())";
$res1 = pg_query($pgconn, $q);
if ($res1 and pg_num_rows($res1) > 0) {
//logger
}
}
}
}
}
}
function removeSavedTrip($in)
{
global $pgconn;
$ret = [
'code' => 0,
'message' => 'Failure',
];
if (!empty($in['member_id']) && !empty($in['member_trip_id'])) {
$member_id = intval($in['member_id']);
$member_trip_id = intval($in['member_trip_id']);
$q = "DELETE FROM members_trips WHERE id=" . $member_trip_id . " AND member_id=" . $member_id . "";
$r = pg_query($pgconn, $q);
if ($r && pg_affected_rows($r)) {
$ret['code'] = 1;
$ret['message'] = 'Success';
}
}
return $ret;
}
/*
savvy=> select * from members_trackemail;
id | member_id | link_email | link_password | link_provider | added | updated
----+-----------+------------+---------------+---------------+-------+---------
(0 rows)
*/
function sync_extCall($in, &$out)
{
global $pgconn;
external_mail_call($in, $out);
LogString("SQL", "PGASE 1");
if ($out["total_message"] > 0) {
$member_id = $in["member_id"];
for ($ic = 0; $ic < $out["total_message"]; $ic++) {
$subj = $out["subject_" . $ic]; // = $message->getSubject();
$msg = $out["message_" . $ic]; // = $message->getBodyHTML();
$sqlS = "INSERT INTO trackedemail_item(member_id,subject,message ) VALUES($member_id,'$subj','$msg')";
$res1 = pg_query($pgconn, $sqlS);
LogString("SQL", $sqlS);
}
}
return $out;
}
function external_mail_call($in, &$out)
{
$target_url = "https://savvyadmin.chiefsoft.net/imap/mail_api.php"; // = svrlayer/internal.php";
// https://adminsavvy.sworks.chiefsoft.net/imap/
$fields_string = "";
//url-ify the data for the POST
foreach ($in as $key => $value) {
$fields_string .= $key . '=' . $value . '&';
}
rtrim($fields_string, '&');
//open connection
$ch = curl_init();
//set the url, number of POST vars, POST data
curl_setopt($ch, CURLOPT_URL, $target_url);
curl_setopt($ch, CURLOPT_POST, count($in));
curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
//execute post
$result = curl_exec($ch);
//close connection
curl_close($ch);
// Parse result
foreach (explode("\n", $result) as $line) {
if ($line == "" || strpos($line, "=") === false) {
continue;
}
$key = trim(strtok($line, "="));
if ($key != "") {
$out[$key] = base64_decode(substr($line, 1 + strlen($key)));
}
}
}
function getRemoteIpAddress()
{
$ip = null;
if (!empty($_SERVER['HTTP_CLIENT_IP']) && filter_var($_SERVER['HTTP_CLIENT_IP'], FILTER_VALIDATE_IP)) {
$ip = trim($_SERVER['HTTP_CLIENT_IP']);
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']) && filter_var($_SERVER['HTTP_X_FORWARDED_FOR'], FILTER_VALIDATE_IP)) {
$ip = trim($_SERVER['HTTP_X_FORWARDED_FOR']);
} else {
// Will not make much sense since we are behind the WAF reverse proxy
$ip = trim($_SERVER['REMOTE_ADDR']);
}
putenv("REMOTE_ADDR=${ip}");
$_ENV["REMOTE_ADDR"] = $ip;
return $ip;
}
function d($v)
{
var_dump($v);exit;
}
function fetchDataGPS($query)
{
global $pgconn_gps;
$r = pg_query($pgconn_gps, $query);
if ($r && pg_num_rows($r) && $f = pg_fetch_assoc($r)) {
return $f;
}
return null;
}
function fetchRow($query)
{
global $pgconn;
$r = pg_query($pgconn, $query);
if ($r && pg_num_rows($r) && $f = pg_fetch_assoc($r)) {
return $f;
}
return null;
}
function selectData($query)
{
global $pgconn;
$r = pg_query($pgconn, $query);
if ($r && pg_num_rows($r)) {
return $r;
}
return null;
}
function insertQuery($query)
{
global $pgconn;
$res = pg_query($pgconn, $query);
if ($res && pg_num_rows($res) && $f = pg_fetch_assoc($res)) {
if ($f["id"] > 0) {
return $f["id"];
}
}
return null;
}
function updateQuery($query)
{
global $pgconn;
$r = pg_query($pgconn, $query);
if ($r && pg_affected_rows($r)) {
return 0;
}
return -1;
}
function loadMemberDescisionData($member_id, &$out)
{
$member = fetchRow("SELECT * FROM members WHERE id= " . $member_id . " LIMIT 1");
if ($member) {
$out = array_merge($out, $member);
}
$email = fetchRow("SELECT count(id) as email_pull_atempt FROM oauth2_pull_jobs WHERE member_id = " . $member_id . " ");
if ($email) {
$out['email_pull_atempt'] = $email['email_pull_atempt'];
}
$bank = fetchRow("SELECT count(*) AS members_bank_count FROM members_bank_accounts WHERE member_id = " . $member_id . "");
if ($bank) {
$out['members_bank_count'] = $bank['members_bank_count'];
}
}
function getMember($member_id)
{
global $pgconn;
$q = "SELECT * FROM members WHERE id=" . $member_id . "";
$r = pg_query($pgconn, $q);
if ($r && pg_num_rows($r) && $f = pg_fetch_assoc($r)) {
return $f;
}
return null;
}