]> git.wh0rd.org - tt-rss.git/blob - api/index.php
implement some tweaks to session handling; properly remove session cookie if invalid...
[tt-rss.git] / api / index.php
1 <?php
2 error_reporting(E_ERROR | E_PARSE);
3
4 require_once "../config.php";
5
6 set_include_path(dirname(__FILE__) . PATH_SEPARATOR .
7 dirname(dirname(__FILE__)) . PATH_SEPARATOR .
8 dirname(dirname(__FILE__)) . "/include" . PATH_SEPARATOR .
9 get_include_path());
10
11 chdir("..");
12
13 define('TTRSS_SESSION_NAME', 'ttrss_api_sid');
14 define('NO_SESSION_AUTOSTART', true);
15
16 require_once "db.php";
17 require_once "db-prefs.php";
18 require_once "functions.php";
19 require_once "sessions.php";
20
21 ini_set("session.gc_maxlifetime", 86400);
22
23 define('AUTH_DISABLE_OTP', true);
24
25 if (defined('ENABLE_GZIP_OUTPUT') && ENABLE_GZIP_OUTPUT &&
26 function_exists("ob_gzhandler")) {
27
28 ob_start("ob_gzhandler");
29 } else {
30 ob_start();
31 }
32
33 $link = db_connect(DB_HOST, DB_USER, DB_PASS, DB_NAME);
34
35 $input = file_get_contents("php://input");
36
37 if (defined('_API_DEBUG_HTTP_ENABLED') && _API_DEBUG_HTTP_ENABLED) {
38 // Override $_REQUEST with JSON-encoded data if available
39 // fallback on HTTP parameters
40 if ($input) {
41 $input = json_decode($input, true);
42 if ($input) $_REQUEST = $input;
43 }
44 } else {
45 // Accept JSON only
46 $input = json_decode($input, true);
47 $_REQUEST = $input;
48 }
49
50 if ($_REQUEST["sid"]) {
51 session_id($_REQUEST["sid"]);
52 @session_start();
53 } else if (defined('_API_DEBUG_HTTP_ENABLED')) {
54 @session_start();
55 }
56
57 if (!init_connection($link)) return;
58
59 $method = strtolower($_REQUEST["op"]);
60
61 $handler = new API($link, $_REQUEST);
62
63 if ($handler->before($method)) {
64 if ($method && method_exists($handler, $method)) {
65 $handler->$method();
66 } else if (method_exists($handler, 'index')) {
67 $handler->index($method);
68 }
69 $handler->after();
70 }
71
72 db_close($link);
73
74 header("Api-Content-Length: " . ob_get_length());
75
76 ob_end_flush();
77 ?>