| Dir : /home/trave494/outtheboxministry.org/sources/ |
| Server: Linux ngx353.inmotionhosting.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64 IP: 209.182.202.254 |
| Dir : /home/trave494/outtheboxministry.org/sources/authorize.php |
<?php
if (empty($_GET['app_id'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 1,
'message' => 'Empty app ID'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['app_secret'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 2,
'message' => 'Empty app secret'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['code'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 3,
'message' => 'Empty code'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (Wo_VerifyAPIApii($_GET['app_id'], $_GET['app_secret']) === false) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 4,
'message' => 'App id not found or secret id is wrong'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['code'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 5,
'message' => 'Empty code'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
$code = Wo_GetCode($_GET['code']);
if (empty($code)) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 6,
'message' => 'Code is invalid'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (Wo_AppHasPermission($code['user_id'], $code['app_id']) === false) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 7,
'message' => 'No permission givin'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
$import = Wo_GenrateToken($code['user_id'], $code['app_id']);
$data = array("status" => 200, "access_token" => $import);
$code = Wo_Secure($code['code']);
$query = mysqli_query($sqlConnect, "DELETE FROM " . T_CODES . " WHERE `code` = '$code'");
header("Content-type: application/json");
echo json_encode($data, JSON_PRETTY_PRINT);
exit();
?>