www-irc/api.php

<?php

function pingServer($hostname, $port) {
    $sock = socket_create(AF_INET, SOCK_STREAM, getprotobyname("tcp"));
    if (!$sock)
        return false;
    if (!@socket_connect($sock, $hostname, $port)) {
        error_log("Failed to connect to ${hostname}:${port}");
        return false;
    }
    socket_close($sock);
    return true;
}

if (isset($_GET["command"])) {
    switch ($_GET["command"]) {
    case "version":
        $fic = substr(file_get_contents("./.git/HEAD"), 5);
        if ($fic === FALSE) {
            header("HTTP/1.1 500 Server error");
            break;
        }
        $fic = file_get_contents("./.git/".trim($fic));
        if ($fic === FALSE) {
            header("HTTP/1.1 500 Server error");
            break;
        }
        echo json_encode(trim($fic));
        break;

    case "servers":
        require_once("./inc/servers.php");
        echo json_encode(getServers());
        break;

    case "channels":
        require_once("./inc/channels.php");
        echo json_encode(getChannels());
        break;

    case "ping":
        require_once("./.htconfig.php");
        require_once("inc/servers.php");

        if (!isset($_GET["key"]) || $_GET["key"] !== API_KEY) {
            $state = getServersState();
            if (!$state) {
                header("HTTP/1.0 500 Internal Server Error");
                die;
            }
            echo json_encode($state);
            die;
        }
        // Clean uploaded files
        $dirname = getcwd() ."/uploads/";
        $dir = opendir($dirname);
        $now = time();
        if ($dir !== FALSE) {
            while ($entry = readdir($dir)) {
                if (is_dir($dirname.$entry))
                    continue;
                $stats = stat($dirname.$entry);
                if ($stats === FALSE) {
                    error_log("Cannot stat uploaded file " .$dirname.$entry);
                    continue;
                }
                if (($now -$stats["mtime"]) / 60 > 5)
                    unlink($dirname.$entry);
            }
            closedir($dir);
        } else {
            error_log("Cannot open upload dir for cleaning");
        }

        // Ping servers
        $result = [];
        foreach (getServers() as $i => $attrs) {
            $success = false;
            foreach ($attrs["ports"] as $port => $unused) {
                if (pingServer($i, $port)) {
                    $success = true;
                    break;
                }
            }
            $result[$i] = $success;
        }
        $result = array(
            "result" => $result,
            "date" => time()
        );
        writeServersState($result);
        break;

    case "gravatar":
        require_once(".htconfig.php");

        if (!isset($_GET["nick"])) {
            header("HTTP/1.0 400 Bad Request");
            die("Bad Request");
        }
        $dblink = getlink();
        $userRow = $dblink->prepare("SELECT `core`.`email` FROM `anope_NickCore` `core` INNER JOIN `anope_NickAlias` `alias` on `alias`.`nc`=`core`.`display` WHERE `alias`.`nick`=:nick AND `core`.`USE_GRAVATAR`=true LIMIT 1");
        $userRow->execute([
            "nick" => $_GET["nick"]
        ]);
        $res = $userRow->fetch(PDO::FETCH_ASSOC);
        header('Location: https://www.gravatar.com/avatar/' .md5($res === false ? $_GET["nick"] : $res["email"]) .'.png?d=retro');
        die();
        break;
    case "file":
        require_once(".htconfig.php");

        if (!isset($_GET["from"]) || strlen($_GET["from"]) == 0 || !isset($_FILES["file"])) {
            header("HTTP/1.0 400 Bad Request");
            die("Bad Request");
        }
        $extensionLocal = strrpos($_FILES["file"]["name"], '.');
        $extension = strtolower(substr($_FILES["file"]["name"], $extensionLocal === FALSE ? 0 : $extensionLocal));
        if (strpos($_FILES["file"]["type"], "image/") !== 0 || !in_array($extension, array(
                ".png", ".jpg", ".jpeg", ".ico"))) {
            header("HTTP/1.0 400 Bad Request");
            die("Unrecognized file type");
        }
        if ($_FILES["file"]["size"] > MAX_ALLOWED_UPLOAD_SIZE) {
            header("HTTP/1.0 400 Bad Request");
            die("File is too large (max " .MAX_ALLOWED_UPLOAD_SIZE ."o, got " .$_FILES["file"]["size"] .')');
        }
        $filename = md5($_GET["from"].time()) .$extension;
        if (move_uploaded_file($_FILES["file"]["tmp_name"], getcwd()."/uploads/".$filename) === FALSE) {
            header("HTTP/1.0 500 Internal Server Error");
            die("Internal Server Error");
        }
        // Log info
        error_log($_GET["from"] ." uploaded file " .$filename ." " .print_r($_FILES["file"], true) ." from " .$_SERVER["REMOTE_ADDR"]);
        echo "/uploads/" .$filename;
        break;
    }
}

?>