Scribd
Upload
209 views

API

This document contains PHP code that defines functions and classes for an API. It sets up variables and parameters for API requests, loads the appropriate class to handle the request, and outputs the response.

Uploaded by

Alanna Smith
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
209 views

API

This document contains PHP code that defines functions and classes for an API. It sets up variables and parameters for API requests, loads the appropriate class to handle the request, and outputs the response.

Uploaded by

Alanna Smith
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 3

<?

php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin 4.2.0
|| # ---------------------------------------------------------------- # ||
|| # Copyright 2000-2012 vBulletin Solutions Inc. All Rights Reserved. ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||
|| #################################################################### ||
\*======================================================================*/
error_reporting(E_ALL & ~E_NOTICE);
define('VB_API', true);
define('VB_API_VERSION', 6);
define('VB_API_VERSION_MIN', 1);
define('CWD_API', (($getcwd = getcwd()) ? $getcwd : '.') . '/includes/api');
define('NOCOOKIES', true);
require_once(CWD_API . '/functions_api.php');
require_once(CWD_API . '/class_api.php');
$api_m = trim($_REQUEST['api_m']);
if (strpos($api_m, 'cms.') !== 0)
{
// Method name should be in the format "scriptname_action" or "scriptnam
e"
list($api_script, $action) = explode("_", $api_m);
$api_script = str_replace('.', '_', trim($api_script));
$_REQUEST['do'] = $_GET['do'] = $_POST['do'] = trim($action);
define('VB_API_CMS', false);
}
else
{
// CMS methods.
// cms.routename_pathsegment1_pathsegment2_...
$methodsegments = explode("_", $api_m);
$api_script = str_replace('cms.', '', array_shift($methodsegments));
$_REQUEST['r'] = implode('/', $methodsegments);
define('VB_API_CMS', true);
}
// API Version
$api_version = intval($_REQUEST['api_v']);
if (!$api_version)
{
$api_version = VB_API_VERSION;
}
if ($api_version < VB_API_VERSION_MIN)
{
print_apierror('api_version_too_low', 'This server accepts API version '
. VB_API_VERSION_MIN . ' at least. The requested API version is too low.');
}
elseif ($api_version > VB_API_VERSION)
{
print_apierror('api_version_too_high', 'This server accepts API version
' . VB_API_VERSION . ' at most. The requested API version is too high.');
}
// Client ID

$api_c = intval($_REQUEST['api_c']);
// Access token
$api_s = trim($_REQUEST['api_s']);
// Request Signature Verification Prepare (Verified in init.php)
$api_sig = trim($_REQUEST['api_sig']);
unset($_GET['']); // See VBM-835
$VB_API_PARAMS_TO_VERIFY = $_GET;
unset($VB_API_PARAMS_TO_VERIFY['api_c'], $VB_API_PARAMS_TO_VERIFY['api_v'], $VB_
API_PARAMS_TO_VERIFY['api_s'], $VB_API_PARAMS_TO_VERIFY['api_sig'],
$VB_API_PARAMS_TO_VERIFY['debug'], $VB_API_PARAMS_TO_VERIFY['showall'], $VB_API_
PARAMS_TO_VERIFY['do'], $VB_API_PARAMS_TO_VERIFY['r'], $VB_API_PARAMS_TO_VERIFY[
'vbseourl']);
ksort($VB_API_PARAMS_TO_VERIFY);
$VB_API_REQUESTS = array(
'api_m' => $api_m,
'api_version' => $api_version,
'api_c' => $api_c,
'api_s' => $api_s,
'api_sig' => $api_sig
);
if (!$api_script)
{
header($_SERVER['SERVER_PROTOCOL'] . ' 404 Not Found');
die();
}
// Check if the api method has been defined in versions
$api_script = loadAPI($api_script, $_REQUEST['do'], $api_version);
//find the latest version of the class defined. This could be written more
//cleanly but I'm trying not to touch the logic below that runs the class.
for($i = $api_version; $i > 0; $i--)
{
$api_classname = 'vB_APIMethod_' . $api_m . '_' . $i;
if (class_exists($api_classname))
{
break;
}
}
if (!class_exists($api_classname))
{
$api_classname = 'vB_APIMethod_' . $api_m;
}
if (class_exists($api_classname))
{
$apimethod = new $api_classname();
if ($apimethod instanceof vBI_APIMethod)
{
require_once('./global.php');
$output = json_encode($apimethod->processed_output());
$sign = md5($output . $vbulletin->apiclient['apiaccesstoken'] .
$vbulletin->apiclient['apiclientid'] . $vbulletin->apiclient['secret'] . $vbulle
tin->options['apikey']);

@header('Authorization: ' . $sign);


if (!$_REQUEST['debug'])
{
@header('Content-Type: application/json');
}
// Trigger shutdown event
$vbulletin->shutdown->shutdown();
if (defined('NOSHUTDOWNFUNC'))
{
exec_shut_down();
}
echo $output;
die();
}
else
{
header($_SERVER['SERVER_PROTOCOL'] . ' 404 Not Found');
die();
}
}
include($api_script . '.php');
/*======================================================================*\
|| ####################################################################
|| #
|| # CVS: $RCSfile$ - $Revision: 35584 $
|| ####################################################################
\*======================================================================*/

You might also like