| Current Path : /home/users/unlimited/www/facebook.codeskitter.site/sources/ |
| Current File : /home/users/unlimited/www/facebook.codeskitter.site/sources/authorize.php |
<?php
if (empty($_GET['app_id'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 1,
'message' => 'Empty app ID'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['app_secret'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 2,
'message' => 'Empty app secret'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['code'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 3,
'message' => 'Empty code'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (Wo_VerifyAPIApii($_GET['app_id'], $_GET['app_secret']) === false) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 4,
'message' => 'App id not found or secret id is wrong'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (empty($_GET['code'])) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 5,
'message' => 'Empty code'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
$code = Wo_GetCode($_GET['code']);
if (empty($code)) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 6,
'message' => 'Code is invalid'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
if (Wo_AppHasPermission($code['user_id'], $code['app_id']) === false) {
$errors = array(
'status' => 400,
'errors' => array(
'error_code' => 7,
'message' => 'No permission givin'
)
);
header("Content-type: application/json");
echo json_encode($errors, JSON_PRETTY_PRINT);
exit();
}
$import = Wo_GenrateToken($code['user_id'], $code['app_id']);
$data = array("status" => 200, "access_token" => $import);
$code = Wo_Secure($code['code']);
$query = mysqli_query($sqlConnect, "DELETE FROM " . T_CODES . " WHERE `code` = '$code'");
header("Content-type: application/json");
echo json_encode($data, JSON_PRETTY_PRINT);
exit();
?>