bsfcbk => decoded

<?php
/*
* @ Pirate-Sky Crew :: PHP Decoder v2
* @ Author: pLa$71k
* @ Web: http://pirate-sky.com
* @ Pirate-Sky Crew © 2008 - 2013
*/

if (!function_exists('curl_init')) {
    throw new Exception('Facebook needs the CURL PHP extension.');
}
if (!function_exists('json_decode')) {
    throw new Exception('Facebook needs the JSON PHP extension.');
}
class FacebookApiException extends Exception
{
    protected $result;
    public function __construct($result)
    {
        $this->result = $result;
        $code         = isset($result['error_code']) ? $result['error_code'] : 0;
        if (isset($result['error_description'])) {
            $msg = $result['error_description'];
        } else if (isset($result['error']) && is_array($result['error'])) {
            $msg = $result['error']['message'];
        } else if (isset($result['error_msg'])) {
            $msg = $result['error_msg'];
        } else {
            $msg = 'Unknown Error. Check getResult()';
        }
        parent::__construct($msg, $code);
    }
    public function getResult()
    {
        return $this->result;
    }
    public function getType()
    {
        if (isset($this->result['error'])) {
            $error = $this->result['error'];
            if (is_string($error)) {
                return $error;
            } else if (is_array($error)) {
                if (isset($error['type'])) {
                    return $error['type'];
                }
            }
        }
        return 'Exception';
    }
    public function __toString()
    {
        $str = $this->getType() . ': ';
        if ($this->code != 0) {
            $str .= $this->code . ': ';
        }
        return $str . $this->message;
    }
}
abstract class BaseFacebook
{
    const VERSION = '3.1.1';
    public static $CURL_OPTS = array(CURLOPT_CONNECTTIMEOUT => 10, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 60, CURLOPT_USERAGENT => 'facebook-php-3.1');
    protected static $DROP_QUERY_PARAMS = array('code', 'state', 'signed_request');
    public static $DOMAIN_MAP = array('api' => 'https://api.facebook.com/', 'api_video' => 'https://api-video.facebook.com/', 'api_read' => 'https://api-read.facebook.com/', 'graph' => 'https://graph.facebook.com/', 'www' => 'https://www.facebook.com/');
    protected $appId;
    protected $apiSecret;
    protected $user;
    protected $signedRequest;
    protected $state;
    protected $accessToken = null;
    protected $fileUploadSupport = false;
    public function __construct($config)
    {
        $this->setAppId($config['appId']);
        $this->setApiSecret($config['secret']);
        if (isset($config['fileUpload'])) {
            $this->setFileUploadSupport($config['fileUpload']);
        }
        $state = $this->getPersistentData('state');
        if (!empty($state)) {
            $this->state = $this->getPersistentData('state');
        }
    }
    public function setAppId($appId)
    {
        $this->appId = $appId;
        return $this;
    }
    public function getAppId()
    {
        return $this->appId;
    }
    public function setApiSecret($apiSecret)
    {
        $this->apiSecret = $apiSecret;
        return $this;
    }
    public function getApiSecret()
    {
        return $this->apiSecret;
    }
    public function setFileUploadSupport($fileUploadSupport)
    {
        $this->fileUploadSupport = $fileUploadSupport;
        return $this;
    }
    public function useFileUploadSupport()
    {
        return $this->fileUploadSupport;
    }
    public function setAccessToken($access_token)
    {
        $this->accessToken = $access_token;
        return $this;
    }
    public function getAccessToken()
    {
        if ($this->accessToken !== null) {
            return $this->accessToken;
        }
        $this->setAccessToken($this->getApplicationAccessToken());
        $user_access_token = $this->getUserAccessToken();
        if ($user_access_token) {
            $this->setAccessToken($user_access_token);
        }
        return $this->accessToken;
    }
    protected function getUserAccessToken()
    {
        $signed_request = $this->getSignedRequest();
        if ($signed_request) {
            if (array_key_exists('oauth_token', $signed_request)) {
                $access_token = $signed_request['oauth_token'];
                $this->setPersistentData('access_token', $access_token);
                return $access_token;
            }
            if (array_key_exists('code', $signed_request)) {
                $code         = $signed_request['code'];
                $access_token = $this->getAccessTokenFromCode($code, '');
                if ($access_token) {
                    $this->setPersistentData('code', $code);
                    $this->setPersistentData('access_token', $access_token);
                    return $access_token;
                }
            }
            $this->clearAllPersistentData();
            return false;
        }
        $code = $this->getCode();
        if ($code && $code != $this->getPersistentData('code')) {
            $access_token = $this->getAccessTokenFromCode($code);
            if ($access_token) {
                $this->setPersistentData('code', $code);
                $this->setPersistentData('access_token', $access_token);
                return $access_token;
            }
            $this->clearAllPersistentData();
            return false;
        }
        return $this->getPersistentData('access_token');
    }
    public function getSignedRequest()
    {
        if (!$this->signedRequest) {
            if (isset($_REQUEST['signed_request'])) {
                $this->signedRequest = $this->parseSignedRequest($_REQUEST['signed_request']);
            } else if (isset($_COOKIE[$this->getSignedRequestCookieName()])) {
                $this->signedRequest = $this->parseSignedRequest($_COOKIE[$this->getSignedRequestCookieName()]);
            }
        }
        return $this->signedRequest;
    }
    public function getUser()
    {
        if ($this->user !== null) {
            return $this->user;
        }
        return $this->user = $this->getUserFromAvailableData();
    }
    protected function getUserFromAvailableData()
    {
        $signed_request = $this->getSignedRequest();
        if ($signed_request) {
            if (array_key_exists('user_id', $signed_request)) {
                $user = $signed_request['user_id'];
                $this->setPersistentData('user_id', $signed_request['user_id']);
                return $user;
            }
            $this->clearAllPersistentData();
            return 0;
        }
        $user                   = $this->getPersistentData('user_id', $default = 0);
        $persisted_access_token = $this->getPersistentData('access_token');
        $access_token           = $this->getAccessToken();
        if ($access_token && $access_token != $this->getApplicationAccessToken() && !($user && $persisted_access_token == $access_token)) {
            $user = $this->getUserFromAccessToken();
            if ($user) {
                $this->setPersistentData('user_id', $user);
            } else {
                $this->clearAllPersistentData();
            }
        }
        return $user;
    }
    public function getLoginUrl($params = array())
    {
        $this->establishCSRFTokenState();
        $currentUrl  = $this->getCurrentUrl();
        $scopeParams = isset($params['scope']) ? $params['scope'] : null;
        if ($scopeParams && is_array($scopeParams)) {
            $params['scope'] = implode(',', $scopeParams);
        }
        return $this->getUrl('www', 'dialog/oauth', array_merge(array(
            'client_id' => $this->getAppId(),
            'redirect_uri' => $currentUrl,
            'state' => $this->state
        ), $params));
    }
    public function getLogoutUrl($params = array())
    {
        return $this->getUrl('www', 'logout.php', array_merge(array(
            'next' => $this->getCurrentUrl(),
            'access_token' => $this->getAccessToken()
        ), $params));
    }
    public function getLoginStatusUrl($params = array())
    {
        return $this->getUrl('www', 'extern/login_status.php', array_merge(array(
            'api_key' => $this->getAppId(),
            'no_session' => $this->getCurrentUrl(),
            'no_user' => $this->getCurrentUrl(),
            'ok_session' => $this->getCurrentUrl(),
            'session_version' => 3
        ), $params));
    }
    public function api()
    {
        $args = func_get_args();
        if (is_array($args[0])) {
            return $this->_restserver($args[0]);
        } else {
            return call_user_func_array(array(
                $this,
                '_graph'
            ), $args);
        }
    }
    protected function getSignedRequestCookieName()
    {
        return 'fbsr_' . $this->getAppId();
    }
    protected function getCode()
    {
        if (isset($_REQUEST['code'])) {
            if ($this->state !== null && isset($_REQUEST['state']) && $this->state === $_REQUEST['state']) {
                $this->state = null;
                $this->clearPersistentData('state');
                return $_REQUEST['code'];
            } else {
                self::errorLog('CSRF state token does not match one provided.');
                return false;
            }
        }
        return false;
    }
    protected function getUserFromAccessToken()
    {
        try {
            $user_info = $this->api('/me');
            return $user_info['id'];
        }
        catch (FacebookApiException $e) {
            return 0;
        }
    }
    protected function getApplicationAccessToken()
    {
        return $this->appId . '|' . $this->apiSecret;
    }
    protected function establishCSRFTokenState()
    {
        if ($this->state === null) {
            $this->state = md5(uniqid(mt_rand(), true));
            $this->setPersistentData('state', $this->state);
        }
    }
    protected function getAccessTokenFromCode($code, $redirect_uri = null)
    {
        if (empty($code)) {
            return false;
        }
        if ($redirect_uri === null) {
            $redirect_uri = $this->getCurrentUrl();
        }
        try {
            $access_token_response = $this->_oauthRequest($this->getUrl('graph', '/oauth/access_token'), $params = array(
                'client_id' => $this->getAppId(),
                'client_secret' => $this->getApiSecret(),
                'redirect_uri' => $redirect_uri,
                'code' => $code
            ));
        }
        catch (FacebookApiException $e) {
            return false;
        }
        if (empty($access_token_response)) {
            return false;
        }
        $response_params = array();
        parse_str($access_token_response, $response_params);
        if (!isset($response_params['access_token'])) {
            return false;
        }
        return $response_params['access_token'];
    }
    protected function _restserver($params)
    {
        $params['api_key'] = $this->getAppId();
        $params['format']  = 'json-strings';
        $result            = json_decode($this->_oauthRequest($this->getApiUrl($params['method']), $params), true);
        if (is_array($result) && isset($result['error_code'])) {
            $this->throwAPIException($result);
        }
        if ($params['method'] === 'auth.expireSession' || $params['method'] === 'auth.revokeAuthorization') {
            $this->destroySession();
        }
        return $result;
    }
    protected function _graph($path, $method = 'GET', $params = array())
    {
        if (is_array($method) && empty($params)) {
            $params = $method;
            $method = 'GET';
        }
        $params['method'] = $method;
        $result           = json_decode($this->_oauthRequest($this->getUrl('graph', $path), $params), true);
        if (is_array($result) && isset($result['error'])) {
            $this->throwAPIException($result);
        }
        return $result;
    }
    protected function _oauthRequest($url, $params)
    {
        if (!isset($params['access_token'])) {
            $params['access_token'] = $this->getAccessToken();
        }
        foreach ($params as $key => $value) {
            if (!is_string($value)) {
                $params[$key] = json_encode($value);
            }
        }
        return $this->makeRequest($url, $params);
    }
    protected function makeRequest($url, $params, $ch = null)
    {
        if (!$ch) {
            $ch = curl_init();
        }
        $opts = self::$CURL_OPTS;
        if ($this->useFileUploadSupport()) {
            $opts[CURLOPT_POSTFIELDS] = $params;
        } else {
            $opts[CURLOPT_POSTFIELDS] = http_build_query($params, null, '&');
        }
        $opts[CURLOPT_URL] = $url;
        if (isset($opts[CURLOPT_HTTPHEADER])) {
            $existing_headers         = $opts[CURLOPT_HTTPHEADER];
            $existing_headers[]       = 'Expect:';
            $opts[CURLOPT_HTTPHEADER] = $existing_headers;
        } else {
            $opts[CURLOPT_HTTPHEADER] = array(
                'Expect:'
            );
        }
        curl_setopt_array($ch, $opts);
        $result = curl_exec($ch);
        if (curl_errno($ch) == 60) {
            self::errorLog('Invalid or no certificate authority found, ' . 'using bundled information');
            curl_setopt($ch, CURLOPT_CAINFO, dirname('1a4d7f76cb_copy.php') . '/fb_ca_chain_bundle.crt');
            $result = curl_exec($ch);
        }
        if ($result === false) {
            $e = new FacebookApiException(array(
                'error_code' => curl_errno($ch),
                'error' => array(
                    'message' => curl_error($ch),
                    'type' => 'CurlException'
                )
            ));
            curl_close($ch);
            throw $e;
        }
        curl_close($ch);
        return $result;
    }
    protected function parseSignedRequest($signed_request)
    {
        list($encoded_sig, $payload) = explode('.', $signed_request, 2);
        $sig  = self::base64UrlDecode($encoded_sig);
        $data = json_decode(self::base64UrlDecode($payload), true);
        if (strtoupper($data['algorithm']) !== 'HMAC-SHA256') {
            self::errorLog('Unknown algorithm. Expected HMAC-SHA256');
            return null;
        }
        $expected_sig = hash_hmac('sha256', $payload, $this->getApiSecret(), $raw = true);
        if ($sig !== $expected_sig) {
            self::errorLog('Bad Signed JSON signature!');
            return null;
        }
        return $data;
    }
    protected function getApiUrl($method)
    {
        static $READ_ONLY_CALLS = array('admin.getallocation' => 1, 'admin.getappproperties' => 1, 'admin.getbannedusers' => 1, 'admin.getlivestreamvialink' => 1, 'admin.getmetrics' => 1, 'admin.getrestrictioninfo' => 1, 'application.getpublicinfo' => 1, 'auth.getapppublickey' => 1, 'auth.getsession' => 1, 'auth.getsignedpublicsessiondata' => 1, 'comments.get' => 1, 'connect.getunconnectedfriendscount' => 1, 'dashboard.getactivity' => 1, 'dashboard.getcount' => 1, 'dashboard.getglobalnews' => 1, 'dashboard.getnews' => 1, 'dashboard.multigetcount' => 1, 'dashboard.multigetnews' => 1, 'data.getcookies' => 1, 'events.get' => 1, 'events.getmembers' => 1, 'fbml.getcustomtags' => 1, 'feed.getappfriendstories' => 1, 'feed.getregisteredtemplatebundlebyid' => 1, 'feed.getregisteredtemplatebundles' => 1, 'fql.multiquery' => 1, 'fql.query' => 1, 'friends.arefriends' => 1, 'friends.get' => 1, 'friends.getappusers' => 1, 'friends.getlists' => 1, 'friends.getmutualfriends' => 1, 'gifts.get' => 1, 'groups.get' => 1, 'groups.getmembers' => 1, 'intl.gettranslations' => 1, 'links.get' => 1, 'notes.get' => 1, 'notifications.get' => 1, 'pages.getinfo' => 1, 'pages.isadmin' => 1, 'pages.isappadded' => 1, 'pages.isfan' => 1, 'permissions.checkavailableapiaccess' => 1, 'permissions.checkgrantedapiaccess' => 1, 'photos.get' => 1, 'photos.getalbums' => 1, 'photos.gettags' => 1, 'profile.getinfo' => 1, 'profile.getinfooptions' => 1, 'stream.get' => 1, 'stream.getcomments' => 1, 'stream.getfilters' => 1, 'users.getinfo' => 1, 'users.getloggedinuser' => 1, 'users.getstandardinfo' => 1, 'users.hasapppermission' => 1, 'users.isappuser' => 1, 'users.isverified' => 1, 'video.getuploadlimits' => 1);
        $name = 'api';
        if (isset($READ_ONLY_CALLS[strtolower($method)])) {
            $name = 'api_read';
        } else if (strtolower($method) == 'video.upload') {
            $name = 'api_video';
        }
        return self::getUrl($name, 'restserver.php');
    }
    protected function getUrl($name, $path = '', $params = array())
    {
        $url = self::$DOMAIN_MAP[$name];
        if ($path) {
            if ($path[0] === '/') {
                $path = substr($path, 1);
            }
            $url .= $path;
        }
        if ($params) {
            $url .= '?' . http_build_query($params, null, '&');
        }
        return $url;
    }
    protected function getCurrentUrl()
    {
        if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on' || $_SERVER['HTTPS'] == 1) || isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') {
            $protocol = 'https://';
        } else {
            $protocol = 'http://';
        }
        $currentUrl = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
        $parts      = parse_url($currentUrl);
        $query      = '';
        if (!empty($parts['query'])) {
            $params          = explode('&', $parts['query']);
            $retained_params = array();
            foreach ($params as $param) {
                if ($this->shouldRetainParam($param)) {
                    $retained_params[] = $param;
                }
            }
            if (!empty($retained_params)) {
                $query = '?' . implode($retained_params, '&');
            }
        }
        $port = isset($parts['port']) && (($protocol === 'http://' && $parts['port'] !== 80) || ($protocol === 'https://' && $parts['port'] !== 443)) ? ':' . $parts['port'] : '';
        return $protocol . $parts['host'] . $port . $parts['path'] . $query;
    }
    protected function shouldRetainParam($param)
    {
        foreach (self::$DROP_QUERY_PARAMS as $drop_query_param) {
            if (strpos($param, $drop_query_param . '=') === 0) {
                return false;
            }
        }
        return true;
    }
    protected function throwAPIException($result)
    {
        $e = new FacebookApiException($result);
        switch ($e->getType()) {
            case 'OAuthException':
            case 'invalid_token':
            case 'Exception':
                $message = $e->getMessage();
                if ((strpos($message, 'Error validating access token') !== false) || (strpos($message, 'Invalid OAuth access token') !== false)) {
                    $this->setAccessToken(null);
                    $this->user = 0;
                    $this->clearAllPersistentData();
                }
        }
        throw $e;
    }
    protected static function errorLog($msg)
    {
        if (php_sapi_name() != 'cli') {
            error_log($msg);
        }
    }
    protected static function base64UrlDecode($input)
    {
        return base64_decode(strtr($input, '-_', '+/'));
    }
    public function destroySession()
    {
        $this->setAccessToken(null);
        $this->user = 0;
        $this->clearAllPersistentData();
    }
    abstract protected function setPersistentData($key, $value);
    abstract protected function getPersistentData($key, $default = false);
    abstract protected function clearPersistentData($key);
    abstract protected function clearAllPersistentData();
    public function getExtendedAccessToken()
    {
        try {
            $access_token_response = $this->_oauthRequest($this->getUrl('graph', '/oauth/access_token'), $params = array(
                'client_id' => $this->getAppId(),
                'client_secret' => $this->getApiSecret(),
                'grant_type' => 'fb_exchange_token',
                'fb_exchange_token' => $this->getAccessToken()
            ));
        }
        catch (FacebookApiException $e) {
            return false;
        }
        if (empty($access_token_response)) {
            return false;
        }
        $response_params = array();
        parse_str($access_token_response, $response_params);
        if (!isset($response_params['access_token'])) {
            return false;
        }
        return $response_params['access_token'];
    }
}
?>