AneCMS-OLD/xmlrpc.php at master · DevAlien/AneCMS-OLD · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<?php
/*-------------------------------------------------------+
| AneCMS
| Copyright (C) 2010
| http://anecms.com
+--------------------------------------------------------+
| Filename: xmlrpc.php
| Author: Gonçalo Margalho
+--------------------------------------------------------+
| Removal of this copyright header is strictly
| prohibited without written permission from
| Gonçalo Margalho.
+--------------------------------------------------------*/
define('ANECMS', true);
define('XMLRPC', true);
//TODO: create a preg_replace_callback
$a = explode('<methodName>',$HTTP_RAW_POST_DATA);
$b = explode('.', $a[1]);
$_GET['mode'] = strtolower(str_replace('AneCMS','',$b[0]));
//ENDTODO

include './system/pages/essential.php';
include './class/iXR_library.inc.php';
include './class/xmlrpctools.class.php';

if(isset($_GET['mode']) && $_GET['mode'] != '') {
    $module = str_replace("../", '', $_GET['mode']);
    if(file_exists('./modules/'.$module.'/xmlrpc.php'))
        include './modules/'.$module.'/xmlrpc.php';
    else {
        echo 'There is not an xmlrpc file in the '.$_GET['mode'].'';
        die();
    }
}
else {
	function check() {
		return true;
	}

	function login($args){
		global $db, $database;

		$username = $args[0];
		$password = $args[1];
		$login = $db->query('SELECT id FROM '.$database['tbl_prefix'].'dev_users where username = ? AND password = ?', DBDriver::AARRAY, array($username, $password));
		if(is_array($login) && is_numeric($login['id']))
			return XmlrpcTools::createSessionId($login['id']);
		else
			return -1;
	}

	function getSiteTitle(){
		global $db, $database;

		return $db->query('Select title from '.$database['tbl_prefix'].'dev_general LIMIT 1', DBDriver::AARRAY);
	}

	function getModulesWS($sessionId){
		global $db, $database;
		//TODO: just the ones with xmlrpc service
		if(XmlrpcTools::checkSessionId($sessionId))
			return $db->query('Select name from '.$database['tbl_prefix'].'dev_modules', DBDriver::ALIST);
		else
			return false;
	}

	$server = new IXR_Server(array(
			'AneCMS.check' => 'check',
			'AneCMS.login' => 'login',
			'AneCMS.getModulesWS' => 'getModulesWS',
			'AneCMS.getSiteTitle' => 'getSiteTitle'));
}
?>