index.php

<?php
if(!session_id()) {
    session_start();
}

$config = include("/config.php");

/////////////////////////////////////HANDLE PREFLIGHT REQUESTS////////////////////////////////////
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
  // return only the headers and not the content
  if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'])) {
    if($config['cross_domain']){
      header('Access-Control-Allow-Origin: ' . $config['requesting_domain']);
      header('Access-Control-Allow-Headers: X-Requested-With');
      header('Access-Control-Allow-Credentials: true');
    } else {
      header('Access-Control-Allow-Origin: *');
      header('Access-Control-Allow-Headers: X-Requested-With');
    }

  }
  exit;
  die();
}
//////////////////////////////////////////////////////////////////////////////////////////////////


if($config['cross_domain']){
  header('Access-Control-Allow-Origin: ' . $config['requesting_domain']);
  header('Access-Control-Allow-Headers: X-Requested-With');
  header('Access-Control-Allow-Credentials: true');
} else {
  header('Access-Control-Allow-Origin: *');
  header('Access-Control-Allow-Headers: X-Requested-With');
}


require_once __DIR__ . '/vendor/autoload.php';
include 'src/social_media.php';
use Abraham\TwitterOAuth\TwitterOAuth;
use Snipe\BanBuilder\CensorWords;





////////////////BASIC SECURITY CHECK/////////////////
$headers = getallheaders();
$requester = $headers['Host'];

$u = str_replace("http://", "", $config['domain']);
$url = explode("/", $u)[0];
if($requester != $url && !$config['cross_domain']){
  generateErrorResponse("This API cannot be accessed from an external address");
}
//////////////////////////////////////////////////////////


//////////////////////ROUTING///////////////////////
$base_url = getCurrentUri();
$params = array();
$routes = explode('/', $base_url);
foreach($routes as $route){
  if(trim($route) != '')
    array_push($params, $route);
}
/////////////////////////////////////////////////////



////////////////////////ACTION - FACEBOOK////////////////////////

if($params[0] == "facebook"){

    if(!$config['facebook_enabled'] || !isset($config['app_id']) ||
       !isset($config['app_secret']) || $config['app_id'] == "" || $config['app_secret'] == ""){
        generateErrorResponse("Facebook is not enabled, or is missing params");
    }

    if($params[1] == "login"){
      $fb = new TB_Facebook_Verify();

      if(isset($params[2]) && $params[2] == "success"){ //Response from facebook
        $fb->HandleResponse();
      } else { //Just Login
          $url = $fb->GenerateLoginLink();
          generateSuccessResponse($url); 
      }
    } 
    else if($params[1] == 'post'){
       $fb = new TB_Facebook_Post();

      if(!isset($params[2])) {  die();  }

      if($params[2] == 'link'){
        $response = $fb->PostLink();
        if($response == 'success'){
          generateSuccessResponse("Sucessfully posted link");
        } else {
          generateErrorResponse($response);
        }
      } else if($params[2] == 'status'){
        $response = $fb->PostStatus();
        if($response == 'success'){
          generateSuccessResponse("Sucessfully posted status");
        } else {
          generateErrorResponse($response);
        }
      } else if($params[2] == 'photo'){
        $response = $fb->PostPhoto();
        if($response == 'success'){
          generateSuccessResponse("Sucessfully posted photo");
        } else {
          generateErrorResponse($response);
        }
      } else if($params[2] == 'video'){
        $response = $fb->PostVideo();
        if($response == 'success'){
          generateSuccessResponse("Sucessfully posted video");
        } else {
          generateErrorResponse($response);
        }
      }
      
    }
    else if($params[1] == 'user'){
      $fb = new TB_Facebook_User();
      $user = $fb->GetUserInfo();
      if(!is_string($user)){
        generateSuccessResponse(utf8ize($user));
      } else {
        generateErrorResponse($user);
      }
      
    }
    else if($params[1] == 'check'){
      if(isset($params[2]) && $params[2] == 'access_code'){
        if(isset($_SESSION['facebook_access_token'])){
          generateSuccessResponse("An access token is set for this session");
        } else {
          generateErrorResponse("No access token for this session");
        }
        
      }
    } else if($params[1] == 'intent'){
      if(isset($params[2])){
        $fb = new TB_Facebook_Intent();
        if($params[2] == 'share') {
          $url = $fb->GenerateIntentLink();
          if (strpos($url,'http') !== false) {
            generateSuccessResponse($url);
          } else {
            generateErrorResponse($url);
          }
        }
      }
    }
}

/////////////////////////////////////////////////////



///////////////////////ACTION - TWITTER////////////////////////

if($params[0] == 'twitter'){
  if(!$config['twitter_enabled'] || !isset($config['twitter_consumer_key']) ||
     !isset($config['twitter_consumer_secret']) || $config['twitter_consumer_key'] == "" || $config['twitter_consumer_secret'] == ""){
      generateErrorResponse("Twitter is not enabled, or is missing params");
  }

  define('CONSUMER_KEY', $config['twitter_consumer_key']);
  define('CONSUMER_SECRET', $config['twitter_consumer_secret']);
  define('OAUTH_CALLBACK', $config['domain'] . "/twitter/login/success");

  if(isset($params[1])){
    if($params[1] == 'login'){
      $tw = new TB_Twitter_Login();
      if(isset($params[2]) && $params[2] == 'success'){
        $tw->HandleResponse();
      } else {
        $url = $tw->GenerateLoginLink();
        if($url != "error"){
          if(isset($_GET['auto_redirect']) && $_GET['auto_redirect'] == true){
            header('location: ' . $url);
            generateSuccessResponse("");
          } else {
            generateSuccessResponse($url);
          }
        } else {
          generateErrorResponse("An error occured generating a login link");
        }
        
      }
    } else if($params[1] == "post"){
      if(isset($params[2])){
        if($params[2] == "tweet"){
          $tw = new TB_Twitter_Post();
          $r = $tw->PostTweet();
          if($r == 'success'){
            generateSuccessResponse("Successfully posted tweet");
          } else {
            generateErrorResponse($r);
          }
        } else if($params[2] == "image"){
          $tw = new TB_Twitter_Post();
          $r = $tw->PostImage();
          if($r == 'success'){
            generateSuccessResponse("Successfully posted photo");
          } else {
            generateErrorResponse($r);
          }
        }
      }
    } else if($params[1] == 'search'){
      $tw = new TB_Twitter_Search();
      $r = $tw->SearchTweets();
      if(!is_string($r)){
        generateSuccessResponse(utf8ize($r));
      } else {
        generateErrorResponse($r);
      }
    } else if($params[1] == 'intent') {
      $tw = new TB_Twitter_Intent();
      if(isset($params[2])){
        if($params[2] == 'tweet'){
          $url = $tw->GenerateTweetIntent();
          if (strpos($url,'http') !== false) {
              generateSuccessResponse($url);
          } else {
            generateErrorResponse($url);
          }
          
        } else if($params[2] == 'retweet'){
          $url = $tw->GenerateRetweetIntent();
          if (strpos($url,'http') !== false) {
              generateSuccessResponse($url);
          } else {
            generateErrorResponse($url);
          }
        }
      }
    }
  }
} 

/////////////////////////////////////////////////////



///////////////////////ACTION - TUMBLR////////////////////////

if($params[0] == 'tumblr'){
  if(!$config['tumblr_enabled'] || !isset($config['tumblr_consumer_key']) ||
    !isset($config['tumblr_consumer_secret']) || $config['tumblr_consumer_key'] == "" || $config['tumblr_consumer_secret'] == ""){
    generateErrorResponse("Tumblr is not enabled, or is missing params");
  }

  if(isset($params[1])){
    if($params[1] == "login"){
      $t = new TB_Tumblr_Verify();
      if(isset($params[2])){
        if($params[2] == "success"){
          $t->HandleResponse();
        } 
      } else {
        $r = $t->GenerateLoginLink();
         generateSuccessResponse($r);
        
      }
    } else if($params[1] == 'post'){
      if(isset($params[2])){
        $t = new TB_Tumblr_Post();
        if($params[2] == 'text'){
          $r = $t->CreateTextPost();
          if($r == "success"){
            generateSuccessResponse("Successfully posted to tumblr");
          } else {
            generateErrorResponse($r);
          }
        } else if($params[2] == 'photo'){
          $r = $t->CreatePhotoPost();
          if($r == "success"){
            generateSuccessResponse("Successfully posted to tumblr");
          } else {
            generateErrorResponse($r);
          }
        } else if($params[2] == 'link'){
          $r = $t->CreateLinkPost();
          if($r == "success"){
            generateSuccessResponse("Successfully posted to tumblr");
          } else {
            generateErrorResponse($r);
          }
        }
      }
    } else if($params[1] == 'user'){
      if(isset($params[2])){
        $t = new TB_Tumblr_User();
        if($params[2] == 'blogs'){
          $r = $t->GetUserBlogs();
          if(!is_string($r)){
            generateSuccessResponse($r);
          } else {
            generateErrorResponse("Cannot get user blogs");
          }
        }
      }
    }
  }
}

/////////////////////////////////////////////////////


///////////////////////ACTION - PINTREST////////////////////////
//THIS PART OF THE API IS ON HOLD - HTTPS IS REQUIRED//

if($params[0] == 'pinterest'){
  if(isset($params[1])){
    if($params[1] == 'login'){
      $p = new TB_Pinterest_Verify();
      if(isset($params[2]) && $params[2] == 'success'){
        $p->HandleResponse();
      } else {
        $url = $p->GenerateLoginLink();
        header('location: ' . $url);
        die();
        generateSuccessResponse($url);
      }
    } else if ($params[1] == 'user') {
      if(isset($params[2])) {
        $pin = new TB_Pinterest_User();
        if($params[2] == 'boards') {
          $r = $pin->GetUserBoards();
          generateSuccessResponse($r);
        }
      }
    }
  }
}

/////////////////////////////////////////////////////

if($params[0] == 'linkedin') {
  if(isset($params[1])){
    if($params[1] == 'login') {
        $li = new TB_LinkedIn_Verify();
      if(isset($params[2]) && $params[2] == 'success'){
        $li->HandleResponse();
      } else {
        $url = $li->GenerateLoginURL();
        generateSuccessResponse($url);
      }

    } else if($params[1] == 'user') {
      $li = new TB_LinkedIn_User();
      if(isset($params[2])){
        if($params[2] == 'info'){
          $r = $li->GetUserInfo();
          generateSuccessResponse($r);
        }
      }
    } else if($params[1] == 'post') {
      $li = new TB_LinkedIn_Share();
      $r = $li->Share();
      if($r == 'success') {
        generateSuccessResponse('Post successful');
      } else {
        generateErrorResponse($r);
      }
    } else if($params[1] == 'intent') {
      $li = new TB_LinkedIn_Intent();
      $url = $li->GenerateIntentURL();
      generateSuccessResponse($url);
    }
  }
}

//If the URL does not match anything, throw an error.
generateErrorResponse("Invalid API endpoint");
die();


////////////////////////INDEX HELPER FUNCTIONS////////////////////////

function getCurrentUri(){
  $basepath = implode('/', array_slice(explode('/', $_SERVER['SCRIPT_NAME']), 0, -1)) . '/';
  $uri = substr($_SERVER['REQUEST_URI'], strlen($basepath));
  if (strstr($uri, '?')) $uri = substr($uri, 0, strpos($uri, '?'));
  $uri = '/' . trim($uri, '/');
  return $uri;
}

function utf8ize($d) {
    if (is_array($d)) 
        foreach ($d as $k => $v) 
            $d[$k] = utf8ize($v);

     else if(is_object($d))
        foreach ($d as $k => $v) 
            $d->$k = utf8ize($v);

     else 
        return utf8_encode($d);

    return $d;
}

function generateSuccessResponse($response){
  $response = array(
    "status" => "success",
    "response" => $response
  );

  echo json_encode($response);
  die();
}

function generateErrorResponse($response){
  $response = array(
    "status" => "error",
    "response" => $response
  );

  echo json_encode($response);
  die();
}
///////////////////////////////////////////////////////////////