<?php
/*
 *
 * @ This file is created by http://DeZender.Net
 * @ deZender (PHP5 Decoder for ionCube Encoder)
 *
 * @ Version		:	3.5.0.0
 * @ Author			:	DeZender
 * @ Release on		:	22.06.2018
 * @ Official site	:	http://DeZender.Net
 *
 */

require_once '/opt/unetlab/html/includes/init.php';
require_once BASE_DIR . '/html/includes/Slim/Slim.php';
require_once BASE_DIR . '/html/includes/Slim-Extras/DateTimeFileWriter.php';
require_once BASE_DIR . '/html/includes/api_authentication.php';
require_once BASE_DIR . '/html/includes/api_configs.php';
require_once BASE_DIR . '/html/includes/api_folders.php';
require_once BASE_DIR . '/html/includes/api_labs.php';
require_once BASE_DIR . '/html/includes/api_tasks.php';
require_once BASE_DIR . '/html/includes/api_networks.php';
require_once BASE_DIR . '/html/includes/api_nodes.php';
require_once BASE_DIR . '/html/includes/api_pictures.php';
require_once BASE_DIR . '/html/includes/api_status.php';
require_once BASE_DIR . '/html/includes/api_textobjects.php';
require_once BASE_DIR . '/html/includes/api_lineobjects.php';
require_once BASE_DIR . '/html/includes/api_topology.php';
require_once BASE_DIR . '/html/includes/api_uusers.php';
require_once BASE_DIR . '/html/includes/api_capture.php';
require_once BASE_DIR . '/html/includes/api_html5Desktop.php';
Slim\Slim::registerAutoloader();
$licprops = new_ioncube_license_properties();
$app = new Slim\Slim(array('mode' => 'production', 'debug' => true, 'log.level' => Slim\Log::WARN, 'log.enabled' => true, 'log.writer' => new Slim\LogWriter(fopen('/opt/unetlab/data/Logs/api.txt', 'a'))));
$app->hook(
	'slim.after.router',
	function() use ($app) {
	$request = $app->request;
	$response = $app->response;
	$app->log->debug('Request path: ' . $request->getPathInfo());
	$app->log->debug('Response status: ' . $response->getStatus());
}
);
$app->response->headers->set('Content-Type', 'application/json');
$app->response->headers->set('X-Powered-By', 'Unified Networking Lab API');
$app->response->headers->set('Cache-Control', 'no-store, no-cache, must-revalidate, max-age=0');
$app->response->headers->set('Cache-Control', 'post-check=0, pre-check=0');
$app->response->headers->set('Pragma', 'no-cache');
$app->notFound(
	function() use ($app) {
	$output['code'] = 404;
	$output['status'] = 'fail';
	$output['message'] = $GLOBALS['messages'][60038];
	$app->halt($output['code'], json_encode($output));
}
);
$db = checkDatabase();

if ($db === false) {
	$app->map(
		'/api/(:path+)',
		function() use ($app) {
		$output['code'] = 500;
		$output['status'] = 'fail';
		$output['message'] = $GLOBALS['messages'][90003];
		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));
	}
	)->via('DELETE', 'GET', 'POST');
	$app->run();
}

$html5_db = html5_checkDatabase();

if ($html5_db === false) {
	$app->map(
		'/api/(:path+)',
		function() use ($app) {
		$output['code'] = 500;
		$output['status'] = 'fail';
		$output['message'] = $GLOBALS['messages'][90003];
		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));
	}
	)->via('DELETE', 'GET', 'POST');
	$app->run();
}

if (updateDatabase($db) == false) {
	$app->map(
		'/api/(:path+)',
		function() use ($app) {
		$output['code'] = 500;
		$output['status'] = 'fail';
		$output['message'] = $GLOBALS['messages'][90006];
		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));
	}
	)->via('DELETE', 'GET', 'POST');
	$app->run();
}

$forbidden = array('code' => 401, 'status' => 'forbidden', 'message' => $GLOBALS['messages'][90032]);
$app->post(
	'/api/auth/login',
	function() use ($app, $db, $html5_db, $licprops) {
	$event = json_decode($app->request()->getBody());
	$p = json_decode(json_encode($event), true);

	if (($licprops['expire']['value'] < intval(date('Ymd')) || $licprops['expire']['value'] == 'unlicensed') && isset($p['html5']) && $p['html5'] == 2) {
		$output['code'] = 401;
		$output['data']['reason'] = 'License expired ( ' . $licprops['expire']['value'] . ' )';
		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));
	} else {
		$cookie = genUuid();
		$output = apiLogin($db, $html5_db, $p, $cookie);
		$mycookie = $cookie;

		if ($output['code'] == 200) {
			if (CHECK == 'strict') {
				$user = getUserByCookie($db, $cookie);
				$max = $licprops[$user['role'] . 's']['value'];
				$now = strtotime('now') + date('Z');
				$role = $user['role'];
				$query = "select count(session) as nb from users where role='" . $role . "' and session > " . $now . ' ;';
				$statement = $db->prepare($query);
				$statement->execute();
				$result = $statement->fetch();
				$cur = $result['nb'];

				if ($max < $cur) {
					$query = " update users set session = NULL where username = '" . $user['username'] . "'";
					$statement = $db->prepare($query);
					$statement->execute();
					$output = array();
					$output['code'] = 402;
					$output['data']['reason'] = 'Insufficient Licenses';
					$app->response->setStatus($output['code']);
					$app->response->setBody(json_encode($output));

					return null;
				}
			}

			$output = apiLogin($db, $html5_db, $p, $cookie);
			$mycookie = $cookie;
			$app->setCookie('unetlab_session', $cookie, 0, '/api/', $_SERVER['SERVER_NAME'], false, false);
		}

		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));

		if ($output['code'] == 200) {
			list($user, $tenant, $noneed) = apiAuthorization($db, $mycookie);

			if ($user == false) {
				$output['code'] = 400;
				$output['data']['reason'] = 'Unauthorized';
				$app->response->setStatus($output['code']);
				$app->response->setBody(json_encode($output));

				return null;
			}

			$role = $user['role'];
			$key = $role . 's';
			$max = $licprops[$key]['value'];
			$query = "select session from users where role='" . $role . "' order by session desc limit 1 offset " . $max . ' ;';
			$statement = $db->prepare($query);
			$statement->execute();
			$result = $statement->fetch();
			$maxval = $result['session'];

			if (0 < intval($maxval)) {
				$query = "update users set session = NULL where role = '" . $role . "' and session <= " . $maxval . ';';
				$statement = $db->prepare($query);
				$statement->execute();
			}
		}

		$db = null;
		$html5_db = null;
	}
}
);
$app->get(
	'/api/auth/logout',
	function() use ($app, $db) {
	$cookie = $app->getCookie('unetlab_session');
	$app->deleteCookie('unetlab_session');
	$output = apiLogout($db, $cookie);
	$app->response->setStatus($output['code']);
	$app->response->setBody(json_encode($output));
	$db = null;
	$html5_db = null;
}
);
$app->get(
	'/api/auth',
	function() use ($app, $db, $licprops) {
	list($user, $tenant, $output) = apiAuthorization($db, $app->getCookie('unetlab_session'));

	if ($user === false) {
		$output['code'] = 401;

		if ($licprops['expire']['value'] < intval(date('Ymd'))) {
			$output['data']['reason'] = 'License expired ( ' . $licprops['expire']['value'] . ' )';
		}

		$app->response->setStatus($output['code']);
		$app->response->setBody(json_encode($output));
	} else {
		if (checkFolder(BASE_LAB . $user['folder']) !== 0) {
			$user['folder'] = '/';
		}

		$output['code'] = 200;
		$output['status'] = 'success';
		$output['message'] = $GLOBALS['messages'][90002];
...........................................................................
................................................
............................