apioauthaction.php 2.66 KB
Newer Older
Zach Copley's avatar
Zach Copley committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
<?php
/**
 * StatusNet, the distributed open-source microblogging tool
 *
 * Base action for OAuth API endpoints
 *
 * PHP version 5
 *
 * LICENCE: This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * @category  API
 * @package   StatusNet
 * @author    Zach Copley <zach@status.net>
 * @copyright 2010 StatusNet, Inc.
 * @license   http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
 * @link      http://status.net/
 */

if (!defined('STATUSNET')) {
    exit(1);
}
Zach Copley's avatar
Zach Copley committed
33
require_once INSTALLDIR . '/lib/apiaction.php';
Zach Copley's avatar
Zach Copley committed
34 35

/**
36 37
 * Base action for API OAuth enpoints. Clean up the
 * request. Some other common functions.
Zach Copley's avatar
Zach Copley committed
38 39 40 41 42 43 44
 *
 * @category API
 * @package  StatusNet
 * @author   Zach Copley <zach@status.net>
 * @license  http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0
 * @link     http://status.net/
 */
45
class ApiOAuthAction extends ApiAction
Zach Copley's avatar
Zach Copley committed
46 47 48 49 50 51 52 53 54 55 56
{
    /**
     * Is this a read-only action?
     *
     * @return boolean false
     */
    function isReadOnly($args)
    {
        return false;
    }

57
    protected function prepare(array $args=array())
Zach Copley's avatar
Zach Copley committed
58 59
    {
        self::cleanRequest();
60
        return parent::prepare($args);
Zach Copley's avatar
Zach Copley committed
61 62
    }

63 64 65 66 67
    /*
     * Clean up the request so the OAuth library doesn't find
     * any extra parameters or anything else it's not expecting.
     * I'm looking at you, p parameter.
     */
68

Zach Copley's avatar
Zach Copley committed
69 70 71 72 73 74 75 76 77 78 79
    static function cleanRequest()
    {
        // kill evil effects of magical slashing
        if (get_magic_quotes_gpc() == 1) {
            $_POST = array_map('stripslashes', $_POST);
            $_GET = array_map('stripslashes', $_GET);
        }

        // strip out the p param added in index.php
        unset($_GET['p']);
        unset($_POST['p']);
80 81 82
        unset($_REQUEST['p']);

        $queryArray = explode('&', $_SERVER['QUERY_STRING']);
Zach Copley's avatar
Zach Copley committed
83

84
        for ($i = 0; $i < sizeof($queryArray); $i++) {
Zach Copley's avatar
Zach Copley committed
85
            if (substr($queryArray[$i], 0, 2) == 'p=') {
86 87 88 89
                unset($queryArray[$i]);
            }
        }

Zach Copley's avatar
Zach Copley committed
90
        $_SERVER['QUERY_STRING'] = implode('&', $queryArray);
Zach Copley's avatar
Zach Copley committed
91 92 93
    }

}