515 lines
16 KiB
PHP
515 lines
16 KiB
PHP
<?php /** @noinspection PhpIncludeInspection */
|
|
|
|
session_start();
|
|
////////////////// Index file //////////////
|
|
/// Creates base routes and runs ///
|
|
/// respective functions ///
|
|
////////////////////////////////////////////
|
|
//require “routes.php”;
|
|
require "../vendor/autoload.php";
|
|
include "middleware.php";
|
|
include "timelineData.php";
|
|
include "projectData.php";
|
|
include "user.php";
|
|
|
|
use api\middleware;
|
|
use api\projectData;
|
|
use api\timelineData;
|
|
use api\user;
|
|
use Psr\Http\Message\ResponseInterface as Response;
|
|
use Psr\Http\Message\ServerRequestInterface as Request;
|
|
use Selective\SameSiteCookie\SameSiteCookieConfiguration;
|
|
use Selective\SameSiteCookie\SameSiteCookieMiddleware;
|
|
use Slim\Factory\AppFactory;
|
|
use Tuupola\Middleware\JwtAuthentication;
|
|
|
|
// Start slim
|
|
$app = AppFactory::create();
|
|
|
|
// set base path for all routes
|
|
$app->setBasePath("/api");
|
|
|
|
// Add middleware
|
|
new middleware($app);
|
|
|
|
$timelineData = new timelineData();
|
|
$projectData = new projectData();
|
|
$user = new user();
|
|
|
|
$app->get("/timelineData/{timeline}", function (Request $request, Response $response, array $args)
|
|
{
|
|
global $timelineData;
|
|
|
|
//check if route is available if it is get the data
|
|
//otherwise return an error
|
|
if($args["timeline"] == "edu")
|
|
{
|
|
$response->getBody()->write(json_encode($timelineData->getEduData()));
|
|
return $response;
|
|
}
|
|
|
|
if($args["timeline"] == "work")
|
|
{
|
|
$response->getBody()->write(json_encode($timelineData->getWorkData()));
|
|
return $response;
|
|
}
|
|
|
|
// something went wrong
|
|
$response->getBody()->write(json_encode(array("errorMessage" => "Error, timeline data not found")));
|
|
return $response->withStatus(404);
|
|
});
|
|
|
|
$app->patch("/timelineData/{timeline}/{id}", function (Request $request, Response $response, array $args)
|
|
{
|
|
global $timelineData;
|
|
$data = $request->getParsedBody();
|
|
if ($args["timeline"] == "edu" && $args["id"] != "undefined")
|
|
{
|
|
if (empty($data["dateFrom"]) || empty($data["dateTo"]) || empty($data["grade"]) || empty($data["course"]))
|
|
{
|
|
// uh oh sent some empty data
|
|
$response->getBody()->write(json_encode(array("error" => "Only some of the data was sent")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
|
|
if (!$timelineData->updateEduData($data["dateFrom"], $data["dateTo"], $data["grade"], $data["course"], $args["id"]))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
if ($args["timeline"] == "work" && $args["id"] != null)
|
|
{
|
|
if (empty($data["dateFrom"]) || empty($data["dateTo"]) || empty($data["companyName"]) || empty($data["area"]) || empty($data["title"]))
|
|
{
|
|
// uh oh sent some empty data
|
|
$response->getBody()->write(json_encode(array("error" => "Only some of the data was sent")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if (!$timelineData->updateWorkData($data["dateFrom"], $data["dateTo"], $data["companyName"], $data["area"], $data["title"], $args["id"]))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("error" => "The correct data was not sent")));
|
|
return $response->withStatus(400);
|
|
});
|
|
|
|
$app->delete("/timelineData/{timeline}/{id}", function (Request $request, Response $response, array $args)
|
|
{
|
|
global $timelineData;
|
|
if ($args["timeline"] == "edu" && $args["id"] != null)
|
|
{
|
|
if (!$timelineData->deleteEduData($args["id"]))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
if ($args["timeline"] == "work" && $args["id"] != null)
|
|
{
|
|
if (!$timelineData->deleteWorkData($args["id"]))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("error" => "The correct data was not sent")));
|
|
return $response->withStatus(400);
|
|
});
|
|
|
|
$app->post("/timelineData/{timeline}", function (Request $request, Response $response, array $args)
|
|
{
|
|
global $timelineData;
|
|
$data = $request->getParsedBody();
|
|
if ($args["timeline"] == "edu")
|
|
{
|
|
if (empty($data["dateFrom"]) || empty($data["dateTo"]) || empty($data["grade"]) || empty($data["course"]))
|
|
{
|
|
// uh oh sent some empty data
|
|
$response->getBody()->write(json_encode(array("error" => "Only some of the data was sent")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
$insertedID = $timelineData->addEduData($data["dateFrom"], $data["dateTo"], $data["grade"], $data["course"]);
|
|
if (!is_int($insertedID))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("ID" => $insertedID)));
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
if ($args["timeline"] == "work")
|
|
{
|
|
if (empty($data["dateFrom"]) || empty($data["companyName"]) || empty($data["area"]) || empty($data["title"]))
|
|
{
|
|
// uh oh sent some empty data
|
|
$response->getBody()->write(json_encode(array("error" => "Only some of the data was sent")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if (empty($data["dateTo"]))
|
|
{
|
|
$data["dateTo"] = "";
|
|
}
|
|
|
|
$insertedID = $timelineData->addWorkData($data["dateFrom"], $data["dateTo"], $data["companyName"], $data["area"], $data["title"]);
|
|
if (!is_int($insertedID))
|
|
{
|
|
// uh oh something went wrong
|
|
$response->getBody()->write(json_encode(array("error" => "Something went wrong")));
|
|
return $response->withStatus(500);
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("ID" => $insertedID)));
|
|
return $response->withStatus(200);
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("error" => "The correct data was not sent")));
|
|
return $response->withStatus(400);
|
|
});
|
|
|
|
$app->get("/projectData", function (Request $request, Response $response)
|
|
{
|
|
global $projectData;
|
|
|
|
$result = $projectData->getProjectData();
|
|
|
|
$json = json_encode($result);
|
|
|
|
$response->getBody()->write($json);
|
|
|
|
if(array_key_exists("errorMessage", $result))
|
|
{
|
|
$response = $response->withStatus(404);
|
|
}
|
|
|
|
//use content type json to indicate json data on frontend.
|
|
return $response;
|
|
});
|
|
|
|
$app->post("/contact", function (Request $request, Response $response)
|
|
{
|
|
$data = $request->getParsedBody();
|
|
if(empty($data["fName"]) || empty($data["lName"]) || empty($data["email"]) || empty($data["subject"]) || empty($data["message"]))
|
|
{
|
|
$response->getBody()->write(json_encode(array("errorMessage" => "Please fill out all the fields")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if (!filter_var($data["email"], FILTER_VALIDATE_EMAIL))
|
|
{
|
|
$response->getBody()->write(json_encode(array("errorMessage" => "Email is not the correct format")));
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
// email form filler/conatcter
|
|
$headers1 = "From: noreply@rohitpai.co.uk\r\n";
|
|
$headers1 .= "Reply-To: rohit@rohitpai.co.uk\r\n";
|
|
$headers1 .= "MIME-Version: 1.0\r\n";
|
|
$headers1 .= "Content-Type: text/html; charset=UTF-8\r\n";
|
|
|
|
$message1 = "
|
|
<html lang=\"en\">
|
|
<head>
|
|
<title>{$data['subject']}</title>
|
|
<style>
|
|
@import url(\"https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&family=Share+Tech+Mono&family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap\");
|
|
body {
|
|
font-family: Noto Sans KR, sans-serif;
|
|
font-style: normal;
|
|
font-weight: 500;
|
|
font-size: var(--generalFS);
|
|
line-height: 1.625rem;
|
|
}
|
|
|
|
table {
|
|
border-collapse: collapse;
|
|
width: 100%;
|
|
}
|
|
|
|
table td, table th {
|
|
border: 1px solid #ddd;
|
|
padding: 8px;
|
|
}
|
|
|
|
table tr:nth-child(even) {
|
|
background-color: #f2f2f2;
|
|
}
|
|
|
|
table tr:hover {
|
|
background-color: #ddd;
|
|
}
|
|
|
|
table th {
|
|
padding-top: 12px;
|
|
padding-bottom: 12px;
|
|
text-align: left;
|
|
background-color: hsla(79, 62%, 59%, 1);
|
|
color: white;
|
|
}
|
|
|
|
hr {
|
|
border-color: hsla(0, 0%, 78%, 1);
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<p>Thank you for filling out the form on my website, I will try to respond to your query as soon as I can.</p>
|
|
<br>
|
|
<p>Below is what you filled in for your record</p>
|
|
<table>
|
|
<thead>
|
|
<th>Firstname</th>
|
|
<th>Lastname</th>
|
|
<th>Email</th>
|
|
<th>Subject</th>
|
|
<th>message</th>
|
|
</thead>
|
|
<tr>
|
|
<td>{$data['fName']}</td>
|
|
<td>{$data['lName']}</td>
|
|
<td><a href=\"mailto:{$data['email']}\">{$data['email']}</a></td>
|
|
<td>{$data['subject']}</td>
|
|
<td>{$data['message']}</td>
|
|
</tr>
|
|
</table>
|
|
<br>
|
|
<hr>
|
|
<p>Regards, <br> Rohit Pai <br> <a href=\"mailto:rohit@rohitpai.co.uk\">rohit@rohitpai.co.uk</a>
|
|
</body>
|
|
</html>
|
|
";
|
|
|
|
mail($data["email"], $data["subject"], $message1, $headers1);
|
|
|
|
// email to me
|
|
$headers2 = "From: noreply@rohitpai.co.uk\r\n";
|
|
$headers2 .= "Reply-To: {$data['email']}\r\n";
|
|
$headers2 .= "MIME-Version: 1.0\r\n";
|
|
$headers2 .= "Content-Type: text/html; charset=UTF-8\r\n";
|
|
|
|
$message2 = "
|
|
<html lang=\"en\">
|
|
<head>
|
|
<title>{$data['subject']}</title>
|
|
<style>
|
|
@import url(\"https://fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&family=Share+Tech+Mono&family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap\");
|
|
body {
|
|
font-family: Noto Sans KR, sans-serif;
|
|
font-style: normal;
|
|
font-weight: 500;
|
|
font-size: var(--generalFS);
|
|
line-height: 1.625rem;
|
|
}
|
|
|
|
table {
|
|
border-collapse: collapse;
|
|
width: 100%;
|
|
}
|
|
|
|
table td, table th {
|
|
border: 1px solid #ddd;
|
|
padding: 8px;
|
|
}
|
|
|
|
table tr:nth-child(even) {
|
|
background-color: #f2f2f2;
|
|
}
|
|
|
|
table tr:hover {
|
|
background-color: #ddd;
|
|
}
|
|
|
|
table th {
|
|
padding-top: 12px;
|
|
padding-bottom: 12px;
|
|
text-align: left;
|
|
background-color: hsla(79, 62%, 59%, 1);
|
|
color: white;
|
|
}
|
|
|
|
hr {
|
|
border-color: hsla(0, 0%, 78%, 1);
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<p>{$data['fName']} {$data['lName']} filled in the form on the website, here is what they sent.</p>
|
|
<table>
|
|
<thead>
|
|
<th>Firstname</th>
|
|
<th>Lastname</th>
|
|
<th>Email</th>
|
|
<th>Subject</th>
|
|
<th>message</th>
|
|
</thead>
|
|
<tr>
|
|
<td>{$data['fName']}</td>
|
|
<td>{$data['lName']}</td>
|
|
<td><a href=\"mailto:{$data['email']}\">{$data['email']}</a></td>
|
|
<td>{$data['subject']}</td>
|
|
<td>{$data['message']}</td>
|
|
</tr>
|
|
</table>
|
|
</body>
|
|
</html>
|
|
";
|
|
|
|
mail("rohit@rohitpai.co.uk", "{$data['fName']} {$data['lName']} filled in the form", $message2, $headers2);
|
|
return $response->withStatus(201);
|
|
});
|
|
|
|
$app->post("/user/login", function (Request $request, Response $response)
|
|
{
|
|
|
|
global $user;
|
|
|
|
// get request data
|
|
$data = $request->getParsedBody();
|
|
|
|
if (empty($data["username"]) || empty($data["password"]))
|
|
{
|
|
// uh oh user sent empty data
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if ($user->checkUser($data["username"], $data["password"]))
|
|
{
|
|
// yay, user is logged in
|
|
$_SESSION["token"] = $user->createToken($data["username"]);
|
|
$_SESSION["username"] = $data["username"];
|
|
$response->getBody()->write(json_encode(array("token" => $_SESSION["token"])));
|
|
return $response;
|
|
}
|
|
$response->getBody()->write(json_encode(array("error" => "Unauthorised")));
|
|
return $response->withStatus(401);
|
|
});
|
|
|
|
$app->get("/user/isLoggedIn", function (Request $request, Response $response)
|
|
{
|
|
global $user;
|
|
|
|
if (empty($_SESSION["token"]) && empty($_SESSION["username"]))
|
|
{
|
|
// uh oh user not logged in
|
|
return $response->withStatus(401);
|
|
}
|
|
|
|
if (empty($_SESSION["token"]))
|
|
{
|
|
// user is logged in but no token was created
|
|
$_SESSION["token"] = $user->createToken($_SESSION["username"]);
|
|
return $response;
|
|
}
|
|
|
|
$response->getBody()->write(json_encode(array("token" => $_SESSION["token"])));
|
|
return $response;
|
|
|
|
});
|
|
|
|
$app->get("/user/checkResetEmail/{email}", function (Request $request, Response $response, array $args)
|
|
{
|
|
global $user;
|
|
|
|
if (empty($args["email"]))
|
|
{
|
|
// uh oh sent empty data
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if ($user->checkEmail($args["email"]))
|
|
{
|
|
// yay email does exist
|
|
$_SESSION["resetToken"] = $user->sendResetEmail($args["email"]);
|
|
$_SESSION["resetEmail"] = $args["email"];
|
|
return $response;
|
|
}
|
|
return $response->withStatus(404);
|
|
});
|
|
|
|
$app->get("/user/resendEmail", function (Request $request, Response $response)
|
|
{
|
|
if (empty($_SESSION["resetToken"]))
|
|
{
|
|
// uh oh not authorized to resend email
|
|
return $response->withStatus(401);
|
|
}
|
|
global $user;
|
|
$_SESSION["resetToken"] = $user->sendResetEmail($_SESSION["resetEmail"]);
|
|
return $response;
|
|
});
|
|
|
|
$app->get("/user/checkResetCode/{code}", function (Request $request, Response $response, array $args)
|
|
{
|
|
if (empty($args["code"]))
|
|
{
|
|
// uh oh sent empty data
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if ($_SESSION["resetToken"] === $args["code"])
|
|
{
|
|
// yay, code code matches
|
|
return $response;
|
|
}
|
|
|
|
return $response->withStatus(401);
|
|
});
|
|
|
|
$app->post("/user/changePassword", function (Request $request, Response $response)
|
|
{
|
|
global $user;
|
|
if (empty($_SESSION["resetToken"]) && empty($_SESSION["resetEmail"]))
|
|
{
|
|
// uh oh not authorized to change password
|
|
return $response->withStatus(401);
|
|
}
|
|
|
|
$data = $request->getParsedBody();
|
|
if (empty($data["password"]))
|
|
{
|
|
// uh oh sent empty data
|
|
return $response->withStatus(400);
|
|
}
|
|
|
|
if ($user->changePassword($_SESSION["resetEmail"], $data["password"]))
|
|
{
|
|
// yay, password changed
|
|
unset($_SESSION["resetToken"]);
|
|
unset($_SESSION["resetEmail"]);
|
|
return $response;
|
|
}
|
|
|
|
return $response->withStatus(500);
|
|
});
|
|
|
|
|
|
|
|
|
|
|
|
$app->run();
|