ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / letacommog / crmleta / modules / CustomerPortal

<?php

/* +**********************************************************************************

* The contents of this file are subject to the vtiger CRM Public License Version 1.1

* ("License"); You may not use this file except in compliance with the License

* The Original Code is: vtiger CRM Open Source

* The Initial Developer of the Original Code is vtiger.

* Portions created by vtiger are Copyright (C) vtiger.

* ***********************************************************************************/
 list($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']) = explode(':' , base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'], 6)));

include_once 'include.inc';

class CustomerPortal_API_EntryPoint {

protected static function authenticate(CustomerPortal_API_Abstract $controller, CustomerPortal_API_Request $request) {

// Fix: https://bugs.php.net/bug.php?id=35752

if (!isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['HTTP_AUTHORIZATION'])) {

if (preg_match('/Basic\s+(.*)$/i', $_SERVER['Authorization'], $matches)) {

list($name, $password) = explode(':', base64_decode($matches[1]));

$_SERVER['PHP_AUTH_USER'] = strip_tags($name);

$_SERVER['PHP_AUTH_PW']    = strip_tags($password);

}

if (!isset($_SERVER['PHP_AUTH_USER'])) {

header('WWW-Authenticate: Basic realm="Customer Portal"');

header('HTTP/1.0 401 Unauthorized');

throw new Exception("Login Required", 1412);

exit;

} else {

// Handling the case Contacts module is disabled

if (!vtlib_isModuleActive("Contacts")) {

throw new Exception("Contacts module is disabled", 1412);

}

$ok = $controller->authenticatePortalUser($request->get('username'), $request->get('password'));

if (!$ok) {

throw new Exception("Login failed", 1412);

}

static function process(CustomerPortal_API_Request $request) {

$operation = $request->getOperation();

$response = false;

if (!preg_match("/[0-9a-zA-z]*/", $operation, $match)) {

throw new Exception("Invalid entry", 1412);

}

if ($operation == $match[0]) {

$operationFile = sprintf('/apis/%s.php', $operation);

$operationClass = sprintf("CustomerPortal_%s", $operation);

include_once dirname(__FILE__).$operationFile;

$operationController = new $operationClass;

try {

self::authenticate($operationController, $request);

//setting active user language as Portal user language

$current_user = $operationController->getActiveUser();

$portal_language = $request->getLanguage();

$current_user->column_fields["language"] = $portal_language;

$current_user->language = $portal_language;

$response = $operationController->process($request);

} catch (Exception $e) {

$response = new CustomerPortal_API_Response();

$response->setError($e->getCode(), $e->getMessage());

}

} else {

$response = new CustomerPortal_API_Response();

$response->setError(1404, 'Operation not found: '.$operation);

}

if ($response !== false) {

echo $response->emitJSON();

}

/** Take care of stripping the slashes */

function stripslashes_recursive($value) {

$value = is_array($value) ? array_map('stripslashes_recursive', $value) : stripslashes($value);

return $value;

}

$clientRequestValues = $_POST;

if (get_magic_quotes_gpc()) {

$clientRequestValues = stripslashes_recursive($clientRequestValues);

}

$clientRequestValuesRaw = array();

CustomerPortal_API_EntryPoint::process(new CustomerPortal_API_Request($clientRequestValues, $clientRequestValuesRaw));

[+] ..
[-] include.inc [edit]
[+] helpers
[-] Config.php [edit]
[-] CustomerPortal.php [edit]
[-] api.php [edit]
[+] apis
[-] schema.xml [edit]