<?php
error_reporting(1);

/**
 * FindMyiPhone - A PHP class for interacting with iCloud's Find My iPhone.
 * Developed by Neal, Fixed by Aminetiaret (2017)
 */

class FindMyiPhone
{
	private $username;
	private $password;

	private $loggedIn;
	private $cookies;

	public $devices = array();

	private $email_updates = true;

	private $host = 'p45-fmipweb.icloud.com';

	private $client_context = array(
		'appName' => 'FindMyiPhone',
		'appVersion' => '3.0',
		'buildVersion' => '376',
		'clientTimestamp' => 0,
		'deviceUDID' => null,
		'inactiveTime' => 1,
		'osVersion' => '7.0.3',
		'productType' => 'iPhone6,1'
	);

	private $server_context = array(
		'callbackIntervalInMS' => 10000,
		'classicUser' => false,
		'clientId' => null,
		'cloudUser' => true,
		'deviceLoadStatus' => '200',
		'enableMapStats' => false,
		'isHSA' => false,
		'lastSessionExtensionTime' => null,
		'macCount' => 0,
		'maxDeviceLoadTime' => 60000,
		'maxLocatingTime' => 90000,
		'preferredLanguage' => 'en-us',
		'prefsUpdateTime' => 0,
		'sessionLifespan' => 900000,
		'timezone' => null,
		'trackInfoCacheDurationInSecs' => 86400,
		'validRegion' => true
	);


	/**
	 * Constructor
	 * Checks requred extensions, sets username/password and gets url host for the user.
	 * @param $username - iCloud Apple ID
	 * @param $password - iCloud Password
	 */
	public function __construct($username, $password)
	{
		if (!extension_loaded('curl')) {
			throw new FindMyiPhoneException('PHP extension cURL is not loaded.');
		}

		$this->username = $username;
		$this->password = $password;

		if ( !$this->login() )
		{
			return $this->loggedIn = false;
		}
		return $this->loggedIn = true;
	}

	private function login()
	{
		$url = 'https://setup.icloud.com/setup/ws/1/login';

		$data = array(
			'apple_id' => $this->username,
			'password' => $this->password,
			'extended_login' => flase
		);

		$response = $this->request($url, json_encode($data));
		$result = $response[0];
		$result_with_headers = $response[1];

		$res = json_decode($result, true);

		if ( isset($res['error']) )
		{
			return false;
		}
		else{
			$this->host = $res['webservices']['findme']['url'];
			$this->cookies = 'Cookie: '. $this->parseCookies($result_with_headers);
			$this->refresh_client();

			return true;
		}
	}

	public function parseCookies($headers)
	{
		preg_match_all('/^Set-Cookie:\s*([^;]*)/mi', $headers, $matches);

		$cookies = '';

		foreach ( $matches[0] as $value )
		{
			$value = str_replace('Set-Cookie: ', '', $value);
			$cookies .= $value.'; ';
		}

		return $cookies;
	}

	public function loggedIn()
	{
		return $this->loggedIn;
	}

	/**
	 * Set email updates
	 * If false, requests will request to not send email to the user. (doesn't work on all requests)
	 * True by default. (optional to set)
	 * $param $email_updates - bool
	 */
	public function set_email_updates($email_updates) {
		$this->email_updates = (bool) $email_updates;
	}


	/**
	 * Init Client
	 *
	 */
	private function init_client() {
		$post_data = json_encode(array(
			'clientContext' => $this->client_context
		));

		$headers = $this->parse_curl_headers($this->make_request('initClient', $post_data, true));

		$this->host = $headers['X-Apple-MMe-Host'];

		if ( !empty($this->host) || isset($this->host) )
		{
			$this->refresh_client();
		}
	}


	/**
	 * Refresh Client
	 *
	 */
	public function refresh_client() {
		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context
		));

		foreach (json_decode($this->make_request('refreshClient', $post_data))->content as $id => $device) {
			$this->devices[$id] = $device;
		}
	}

	/**
	 * Remove Device
	 *
	 */
	public function remove_client($device_id)
	{
		if(!is_string($device_id)) return;

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
		));

		return json_decode($this->make_request('remove', $post_data));
	}


	/**
	 * Play Sound
	 *
	 */
	public function play_sound($device_id, $subject = 'Find My iPhone Alert') {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($subject)) throw new FindMyiPhoneException('Expected $subject to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'subject' => $subject
		));

		return json_decode($this->make_request('playSound', $post_data))->content[0]->snd;
	}


	/**
	 * Send Message
	 *
	 */
	public function send_message($device_id, $text, $sound = false, $subject = 'Important Message') {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($text)) throw new FindMyiPhoneException('Expected $text to be a string');
		if(!is_bool($sound)) throw new FindMyiPhoneException('Expected $sound to be a bool');
		if(!is_string($subject)) throw new FindMyiPhoneException('Expected $subject to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'emailUpdates' => $this->email_updates,
			'sound' => $sound,
			'subject' => $subject,
			'text' => $text,
			'userText' => true
		));

		return json_decode($this->make_request('sendMessage', $post_data))->content[0]->msg;
	}


	/**
	 * Lock Device
	 *
	 */
	public function lost_device($device_id, $passcode, $owner_phone_number = '911', $sound = true, $text = 'This iPhone has been lost. Please call me.') {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($passcode)) throw new FindMyiPhoneException('Expected $passcode to be a string');
		if(strlen($passcode) !== 4) throw new FindMyiPhoneException('Expected $passcode to be 4 characters long');
		if(!is_string($owner_phone_number)) throw new FindMyiPhoneException('Expected $owner_phone_number to be a string');
		if(!is_bool($sound)) throw new FindMyiPhoneException('Expected $sound to be a bool');
		if(!is_string($text)) throw new FindMyiPhoneException('Expected $text to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'emailUpdates' => $this->email_updates,
			'lostModeEnabled' => true,
			'ownerNbr' => $owner_phone_number,
			'passcode' => $passcode,
			'sound' => $sound,
			'text' => $text,
			'trackingEnabled' => true,
			'userText' => true
		));

		return json_decode($this->make_request('lostDevice', $post_data))->content[0]->lostDevice;
	}


	/**
	 * Notify When Found
	 *
	 */
	public function notify_when_found($device_id, $notify = true) {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($notify)) throw new FindMyiPhoneException('Expected $notify to be a boolean');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'lostModeEnabled' => $notify
		));

		return json_decode($this->make_request('saveLocFoundPref', $post_data))->content[0]->locFoundEnabled;
	}


	/**
	 * Lock and Message
	 *
	 */
	public function lock_and_message($device_id, $passcode, $text, $sound = true, $title = 'Find My iPhone Alert') {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($passcode)) throw new FindMyiPhoneException('Expected $passcode to be a string');
		if(strlen($passcode) !== 4) throw new FindMyiPhoneException('Expected $passcode to be 4 characters long');
		if(!is_string($text)) throw new FindMyiPhoneException('Expected $text to be a string');
		if(!is_bool($sound)) throw new FindMyiPhoneException('Expected $sound to be a bool');
		if(!is_string($title)) throw new FindMyiPhoneException('Expected $title to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'emailUpdates' => $this->email_updates,
			'passcode' => $passcode,
			'sound' => $sound,
			'text' => $text,
			'title' => $title,
			'userText' => true
		));

		return json_decode($this->make_request('lockAndMessage', $post_data))->content[0]->remoteLock;
	}


	/**
	 * Remote Lock
	 *
	 */
	public function remote_lock($device_id, $passcode) {
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($passcode)) throw new FindMyiPhoneException('Expected $passcode to be a string');
		if(strlen($passcode) !== 4) throw new FindMyiPhoneException('Expected $passcode to be 4 characters long');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'emailUpdates' => $this->email_updates,
			'passcode' => $passcode
		));

		return json_decode($this->make_request('remoteLock', $post_data))->content[0]->remoteLock;
	}


	/**
	 * Remote Wipe
	 *
	 */
	public function remote_wipe($device_id, $passcode, $text)
	{
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');
		if(!is_string($passcode)) throw new FindMyiPhoneException('Expected $passcode to be a string');
		if(strlen($passcode) !== 4) throw new FindMyiPhoneException('Expected $passcode to be 4 characters long');
		if(!is_string($text)) throw new FindMyiPhoneException('Expected $text to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'passcode' => $passcode,
			'text' => $text,
			'ownerNbr' => '444-4',
			'authToken' => $this->get_auth_token($device_id),
			'emailUpdates' => $this->email_updates
		));

		return json_decode($this->make_request('remoteWipeWithUserAuth', $post_data));
	}

	/**
	 * Get Wipe Auth Token
	 *
	 */
	public function get_auth_token($device_id)
	{
		if(!is_string($device_id)) throw new FindMyiPhoneException('Expected $device_id to be a string');

		$post_data = json_encode(array(
			'clientContext' => $this->client_context,
			'serverContext' => $this->server_context,
			'device' => $device_id,
			'authToken' => $this->password
		));

		$json = json_decode($this->make_request('authForUserDevice', $post_data), true);

		return $json['authToken'];
	}


	/**
	 * Locate Device
	 *
	 */
	public function locate_device($device, $timeout = 120) {
		if(!is_integer($device)) throw new FindMyiPhoneException('Expected $device to be an integer');
		if(!isset($this->devices[$device])) $this->refresh_client();

		$start = time();
		while (!$this->devices[$device]->location->locationFinished) {
			if ((time() - $start) > intval($timeout)) {
				throw new FindMyiPhoneException('Failed to locate device! Request timed out.');
			}
			sleep(5);
			$this->refresh_client();
		}

		return $this->devices[$device]->location;
	}


	/**
	 * Make request to the Find My iPhone server.
	 * @param $method - the method
	 * @param $post_data - the POST data
	 * @param $return_headers - also return headers when true
	 * @param $headers - optional headers to send
	 * @return HTTP response
	 */
	private function make_request($method, $post_data, $return_headers = false, $headers = array())
	{
		if(!is_string($method)) throw new FindMyiPhoneException('Expected $method to be a string');
		if(!$this->is_json($post_data)) throw new FindMyiPhoneException('Expected $post_data to be json');
		if(!is_array($headers)) throw new FindMyiPhoneException('Expected $headers to be an array');
		if(!is_bool($return_headers)) throw new FindMyiPhoneException('Expected $return_headers to be a bool');

		array_push($headers, 'Origin: https://www.icloud.com');
		array_push($headers, 'Accept-Language: en-us');
		array_push($headers, 'Content-Type: application/json; charset=utf-8');
		array_push($headers, 'X-Apple-Realm-Support: 1.0');
		array_push($headers, 'X-Apple-Find-Api-Ver: 3.0');
		array_push($headers, 'X-Apple-Authscheme: UserIdGuest');
		array_push($headers, $this->cookies);

		$curl = curl_init();
		curl_setopt($curl, CURLOPT_TIMEOUT, 9);
		curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 5);
		curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
		curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
		curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($curl, CURLOPT_AUTOREFERER, true);
		curl_setopt($curl, CURLOPT_VERBOSE, false);
		curl_setopt($curl, CURLOPT_POST, true);
		curl_setopt($curl, CURLOPT_POSTFIELDS, $post_data);
		curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
		curl_setopt($curl, CURLOPT_HEADER, $return_headers);
		curl_setopt($curl, CURLOPT_URL, sprintf("%s/fmipservice/client/web/%s", $this->host, $method));
		curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0) Gecko/20100101 Firefox/49.0.2.1 Waterfox/49.0.2.1');

		$http_result = curl_exec($curl);

		if ( curl_errno($curl) )
		{
			echo 'cUrl error: ' . curl_error( $curl );
		}

		curl_close($curl);

		return $http_result;
	}


	/**
	 * Parse cURL headers
	 * @param $response - cURL response including the headers
	 * @return array of headers
	 */
	private function parse_curl_headers($response) {
		$headers = array();
		foreach (explode("\r\n", substr($response, 0, strpos($response, "\r\n\r\n"))) as $i => $line) {
			if ($i === 0) {
				$headers['http_code'] = $line;
			} else {
				list($key, $value) = explode(': ', $line);
				$headers[$key] = $value;
			}
		}
		return $headers;
	}

	/**
	 * Finds whether a variable is json.
	 */
	private function is_json($var) {
		json_decode($var);
		return (json_last_error() == JSON_ERROR_NONE);
	}

	public function request($url, $data)
	{
		$headers = array(
			'Origin: https://www.icloud.com ',
			'User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36 ',
			'Content-Type: text/plain ',
			'Accept: */*',
			'Referer: https://www.icloud.com/ ',
			'Accept-Encoding: gzip, deflate ',
			'Accept-Language: en-US,en;q=0.8 ',
		);

		$ch = curl_init($url);
		curl_setopt($ch ,CURLOPT_POST,true);
		curl_setopt($ch ,CURLOPT_HTTP_VERSION,CURL_HTTP_VERSION_1_1);
		curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
		curl_setopt($ch, CURLOPT_POST, true);
		curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
		curl_setopt($ch, CURLOPT_ENCODING, 'UTF-8');
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_VERBOSE, true);

		$result = curl_exec($ch);

		$res = json_decode($result, true);
		if ( !isset($res['error']) )
		{
			curl_setopt($ch, CURLOPT_HEADER, true);
			$result_with_headers = curl_exec($ch);
			return array($result, $result_with_headers);
		}

		return array($result, null);
	}
}

class FindMyiPhoneException extends Exception {}

?>