index.php

<?php

	session_start();
	require 'libs/bombay/glue/glue.lib.php';
	require 'libs/security.lib.php';


	if (is_equal('http', URI_SCHEME)) exit_with_302_plain(secure_absolute_uri('/'));


	handle_get('/', function ($req, $pipeline)
	{
		if (isset($_SESSION['global_salt']) and isset($_SESSION['rid']) and isset($_COOKIE['data']))
		{
			$_SESSION['authenticated'] = true;
		}
		else $_SESSION['authenticated'] = false;

		return next_func($req, $pipeline);

	}, afunc_returning(array('template'=>'home')));




	function auth_filter($req, $pipeline)
	{
		if (isset($_SESSION['authenticated']) and is_equal($_SESSION['authenticated'], true))
		{
			return next_func($req, $pipeline);
		}
		else return array('template'=>'error', 'error_msg'=>"You don't seem to be logged in. Go back, login and try again.");

	}


	handle_post(array('/login', 'action'=>'login'), 'oboxapps_login');

	function oboxapps_login($req)
	{
		$rid = $req['form']['rid'];
		$password = $req['form']['password'];
		$auth_params = "auth-userid=$rid&auth-password=$password";
		$request = "https://test.httpapi.com/api/resellers/generate-token.json?$auth_params&ip=1.1.1.1";
		$result = @file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Login Failed. Go back and try again.');
		}

		$global_salt = str_random_alphanum(128);
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);

		$encrypted_data = symmetric_encrypt($password, $key);
		$_SESSION['authenticated'] = true;
		$_SESSION['global_salt'] = $global_salt;
		$_SESSION['rid'] = $rid;

		setcookie('data', $encrypted_data, time()+60*60, '/', '', true, true);
		return _302_plain(absolute_uri('/'));
	}


	handle_get('/logout', 'oboxapps_logout');

	function oboxapps_logout($req)
	{
		setcookie('data', '', time() - 3600, '/', '', true, true);
		$_SESSION['authenticated'] = false;
		unset($_SESSION['global_salt']);
		unset($_SESSION['rid']);
		return _302_plain(absolute_uri('/'));
	}




	handle_get('/apps/account_balance', 'auth_filter', 'account_balance');

	function account_balance($req)
	{
		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		$auth_params = "auth-userid=$rid&auth-password=$password";
		$request = "https://test.httpapi.com/api/billing/reseller-balance.json?$auth_params&reseller-id=$rid";
		$result = file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch account balance. Go back and try again.');
		}

		return array('result'=>json_decode($result, true));
	}


	handle_get('/apps/expiring_domains', 'auth_filter', 'expiring_domains');

	function expiring_domains($req)
	{
		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		$auth_params = "auth-userid=$rid&auth-password=$password";
		$request = "https://test.httpapi.com/api/domains/search.json?$auth_params&no-of-records=10&page-no=1&status=Active&order-by=endtime%20asc";
		$result = file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch expiring domains. Go back and try again.');
		}

		return array('result'=>json_decode($result, true));
	}



	handle_get('/apps/new_domains', 'auth_filter', 'new_domains');

	function new_domains($req)
	{
		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		$auth_params = "auth-userid=$rid&auth-password=$password";
		$request = "https://test.httpapi.com/api/domains/search.json?$auth_params&no-of-records=10&page-no=1&status=Active&order-by=creationtime%20desc";
		$result = file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch new domains. Go back and try again.');
		}

		return array('result'=>json_decode($result, true));
	}


	handle_get('/apps/domain_details', 'auth_filter', 'domain_details');

	function domain_details($req)
	{
		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		if (!isset($req['query']['orderid']))
		{
			return array('template'=>'error', 'error_msg'=>'No orderid found!');
		}

		$orderid = $req['query']['orderid'];
		$auth_params = "auth-userid=$rid&auth-password=$password";
		$request = "https://test.httpapi.com/api/domains/details.json?$auth_params&order-id=$orderid&options=All";
		$result = file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch domain details. Go back and try again.');
		}

		$result = json_decode($result, true);

		$customerid = $result['customerid'];
		$request = "https://test.httpapi.com/api/customers/details-by-id.json?$auth_params&customer-id=$customerid";
		$customer_details = file_get_contents($request);

		if (is_equal(false, $customer_details))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch customer details. Go back and try again.');
		}

		$customer_details = json_decode($customer_details, true);
		$result['customer_details'] = $customer_details;

		return array('result'=>$result);
	}


	handle_get('/apps/renew_domain', 'auth_filter', afunc_returning(array('template'=>'renew_domain_form')));
	handle_post(array('/apps/renew_domain', 'action'=>'renew_domain'), 'renew_domain');

	function renew_domain($req)
	{
		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		$auth_params = "auth-userid=$rid&auth-password=$password";

		$domain = $req['form']['domain'];
		$get_orderid_url = "https://test.httpapi.com/api/domains/orderid.json?$auth_params&domain-name=$domain";
		$result = file_get_contents($get_orderid_url);
		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch Order ID. Go back and try again.');
		}
		$orderid = $result;

		$domain_details_url = "https://test.httpapi.com/api/domains/details.json?$auth_params&order-id=$orderid&options=OrderDetails";
		$result = file_get_contents($domain_details_url);
		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch domain details. Go back and try again.');
		}
		$result = json_decode($result, true);
		$exp_date = $result['endtime'];

		$invoice_option = $req['form']['invoice_option'];
		$years = $req['form']['years'];

		$request = "https://test.httpapi.com/api/domains/renew.json?$auth_params&order-id=$orderid&years=$years&exp-date=$exp_date&invoice-option=$invoice_option";

		$result = file_get_contents($request);

		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not perform action. Go back and try again.');
		}

		return array('result'=>'Action performed successfully.');
	}




	handle_get('/apps/gappsconf', 'auth_filter', afunc_returning(array('template'=>'gappsconf_form')));
	handle_post(array('/apps/gappsconf', 'action'=>'configure_dns'), 'gappsconf');

	function gappsconf($req)
	{
		/* The following DNS recrods are added:
			MX      10 ASPMX.L.GOOGLE.COM
			MX      20 ALT1.ASPMX.L.GOOGLE.COM
			MX      20 ALT2.ASPMX.L.GOOGLE.COM
			MX      30 ASPMX2.GOOGLEMAIL.COM
			MX      30 ASPMX3.GOOGLEMAIL.COM
			MX      30 ASPMX4.GOOGLEMAIL.COM
			MX      30 ASPMX5.GOOGLEMAIL.COM
			calendar        CNAME   ghs.google.com
			docs    CNAME   ghs.google.com
			mail    CNAME   ghs.google.com
			sites   CNAME   ghs.google.com
		*/

		$domain = $req['form']['domain'];

		$rid = $_SESSION['rid'];
		$global_salt = $_SESSION['global_salt'];
		$user_salt = sha1($rid);
		$key = generate_key($user_salt, $global_salt);
		$password = symmetric_decrypt($_COOKIE['data'], $key);

		$auth_params = "auth-userid=$rid&auth-password=$password";

		$get_orderid_url = "https://test.httpapi.com/api/domains/orderid.json?$auth_params&domain-name=$domain";
		$result = file_get_contents($get_orderid_url);
		if (is_equal(false, $result))
		{
			return array('template'=>'error', 'error_msg'=>'Could not fetch Order ID. Go back and try again.');
		}
		$orderid = $result;
		$activate_url = "https://test.httpapi.com/api/dns/activate.json?$auth_params";
		$add_cname_url = "https://test.httpapi.com/api/dns/manage/add-cname-record.json?$auth_params&domain-name=$domain";
		$add_mx_url = "https://test.httpapi.com/api/dns/manage/add-mx-record.json?$auth_params&domain-name=$domain";


		$requests[] = array("$activate_url&order-id=$orderid", 'Activating DNS');
		$requests[] =  array("$add_cname_url&value=ghs.google.com&host=mail", "Adding CNAME for mail.$domain");
		$requests[] = array("$add_cname_url&value=ghs.google.com&host=calendar", "Adding CNAME for calendar.$domain");
		$requests[] = array("$add_cname_url&value=ghs.google.com&host=docs", "Adding CNAME for docs.$domain");
		$requests[] = array("$add_cname_url&value=ghs.google.com&host=sites", "Adding CNAME for sites.$domain");
		$requests[] = array("$add_mx_url&value=ASPMX.L.GOOGLE.COM&priority=10", "Adding MX: ASPMX.L.GOOGLE.COM");
		$requests[] = array("$add_mx_url&value=ALT1.ASPMX.L.GOOGLE.COM&priority=20", "Adding MX: ALT1.ASPMX.L.GOOGLE.COM");
		$requests[] = array("$add_mx_url&value=ALT2.ASPMX.L.GOOGLE.COM&priority=20", "Adding MX: ALT2.ASPMX.L.GOOGLE.COM");
		$requests[] = array("$add_mx_url&value=ASPMX2.GOOGLEMAIL.COM&priority=30", "Adding MX: ASPMX2.GOOGLEMAIL.COM");
		$requests[] = array("$add_mx_url&value=ASPMX3.GOOGLEMAIL.COM&priority=30", "Adding MX: ASPMX3.GOOGLEMAIL.COM");
		$requests[] = array("$add_mx_url&value=ASPMX4.GOOGLEMAIL.COM&priority=30", "Adding MX: ASPMX4.GOOGLEMAIL.COM");
		$requests[] = array("$add_mx_url&value=ASPMX5.GOOGLEMAIL.COM&priority=30", "Adding MX: ASPMX5.GOOGLEMAIL.COM");

		$results = array();
		foreach ($requests as $request)
		{
			$result = file_get_contents($request[0]);

			if (is_equal(false, $result))
			{
				return array('template'=>'error', 'error_msg'=>"Error while adding {$request[1]}. Go back and try again.");
			}

			$results[] = array($request[1], json_decode($result, true));
		}

		return array('results'=>$results);
	}




	yield_to_glue();

?>