beenull/m1k1oblog
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Ajax moved to class

Browse source
This commit is contained in:
sedivy.miro 2016-12-28 08:02:55 -05:00
parent a8541ebadc
commit 1c286f243b
2 changed files with 66 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

59
ajax.php
View file

@ -1,41 +1,32 @@
<?php
include 'common.php';
function error($msg){
Log::put("ajax_errors", $msg);
header('Content-Type: application/json');
echo json_encode(["error" => true, "msg" => $msg]);
exit;
}
$ajax = new Ajax();
// Check if exists token
if(empty($_SESSION['token'])){
error("Direct access violation.");
}
// Validate token
$headers = apache_request_headers();
if(isset($headers['Csrf-Token']) && !empty($_SESSION['token'])){
if($headers['Csrf-Token'] !== $_SESSION['token']) {
error("Wrong CSRF token.");
try {
$ajax->token();
// Prepare inputs
$request = array_merge(@$_POST, @$_GET);
if(empty($request["action"])){
throw new Exception("No action specified.");
}
} else {
error("No CSRF token.");
$method = ['Post', $request["action"]];
// If method exists
if(!is_callable($method)){
throw new Exception("Method was not found.");
}
// CAll method
$response = call_user_func($method, $request);
$ajax->set_response($response);
// Log
Log::put("ajax_access", $request["action"]);
} catch (Exception $e) {
$ajax->set_error($e->getMessage());
}
// Prepare inputs
$r = array_merge(@$_POST, @$_GET);
$f = ['Post', @$r["action"]];
// If method exists
if(is_callable($f)){
$c = call_user_func($f, $r);
Log::put("ajax_access", @$r["action"]);
} else {
error("Method was not found.");
}
// Flush
header('Content-Type: application/json');
echo json_encode($c);
exit;
$ajax->json_response();

41
lib/ajax.class.php Normal file
View file

@ -0,0 +1,41 @@
<?php
class Ajax
{
private $_response = null;
public function set_error($msg = null){
$this->_response = [
"error" => true,
"msg" => $msg
];
// Log
Log::put("ajax_errors", $msg);
}
public function token(){
if(empty($_SESSION['token'])){
throw new Exception("Direct access violation.");
}
$headers = apache_request_headers();
if(!isset($headers['Csrf-Token']) || empty($_SESSION['token'])){
throw new Exception("No CSRF token.");
}
if($headers['Csrf-Token'] !== $_SESSION['token']){
throw new Exception("Wrong CSRF token.");
}
}
public function set_response($response = null){
$this->_response = $response;
}
public function json_response(){
ob_clean();
header('Content-Type: application/json');
echo json_encode($this->_response);
}
}