lychee/php/index.php

90 lines
2.2 KiB
PHP
Raw Normal View History

<?php
2014-04-12 12:10:08 +00:00
###
2014-04-27 13:24:51 +00:00
# @name API
# @author Tobias Reich
2015-02-01 21:08:37 +00:00
# @copyright 2015 by Tobias Reich
2014-04-12 12:10:08 +00:00
###
namespace Lychee;
use Lychee\Modules\Config;
use Lychee\Modules\Settings;
use Lychee\Modules\Validator;
use Lychee\Access\Installation;
use Lychee\Access\Admin;
use Lychee\Access\Guest;
require(__DIR__ . '/define.php');
require(__DIR__ . '/autoload.php');
require(__DIR__ . '/helpers/fastImageCopyResampled.php');
require(__DIR__ . '/helpers/getExtension.php');
require(__DIR__ . '/helpers/getGraphHeader.php');
require(__DIR__ . '/helpers/getHashedString.php');
require(__DIR__ . '/helpers/hasPermissions.php');
require(__DIR__ . '/helpers/search.php');
2016-01-19 15:09:06 +00:00
# Define the called function
if (isset($_POST['function'])) $fn = $_POST['function'];
else if (isset($_GET['function'])) $fn = $_GET['function'];
else $fn = null;
2016-01-19 15:09:06 +00:00
# Check if a function has been specified
if (!empty($fn)) {
# Start the session and set the default timezone
session_start();
2014-02-09 18:21:55 +00:00
date_default_timezone_set('UTC');
2016-01-19 15:09:06 +00:00
# Validate parameters
if (isset($_POST['albumIDs'])&&Validator::isAlbumIDs($_POST['albumIDs'])===false) exit('Error: Wrong parameter type for albumIDs!');
if (isset($_POST['photoIDs'])&&Validator::isPhotoIDs($_POST['photoIDs'])===false) exit('Error: Wrong parameter type for photoIDs!');
if (isset($_POST['albumID'])&&Validator::isAlbumID($_POST['albumID'])==false) exit('Error: Wrong parameter type for albumID!');
if (isset($_POST['photoID'])&&Validator::isPhotoID($_POST['photoID'])==false) exit('Error: Wrong parameter type for photoID!');
2016-01-19 15:09:06 +00:00
# Check if a configuration exists
if (Config::exists()===false) {
2014-04-27 13:24:51 +00:00
###
# Installation Access
# Limited access to configure Lychee. Only available when the config.php file is missing.
###
Installation::init($fn);
exit();
}
2016-01-19 15:09:06 +00:00
# Check if user is logged
if ((isset($_SESSION['login'])&&$_SESSION['login']===true)&&
(isset($_SESSION['identifier'])&&$_SESSION['identifier']===Settings::get()['identifier'])) {
2014-04-27 13:24:51 +00:00
###
# Admin Access
# Full access to Lychee. Only with correct password/session.
###
2014-02-17 16:01:46 +00:00
Admin::init($fn);
2016-01-24 21:30:57 +00:00
exit();
} else {
###
# Guest Access
# Access to view all public folders and photos in Lychee.
###
Guest::init($fn);
exit();
}
} else {
2016-01-19 15:09:06 +00:00
exit('Error: No API function specified!');
}
2016-01-19 15:09:06 +00:00
?>