blob: 48c6b1131a9835a0c73d4af6cfdd9907ff3c6eba (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
<?php
class ControllerApiLogin extends Controller {
public function index() {
$this->load->language('api/login');
$json = array();
$this->load->model('account/api');
// Login with API Key
if(isset($this->request->post['username'])) {
$api_info = $this->model_account_api->login($this->request->post['username'], $this->request->post['key']);
} else {
$api_info = $this->model_account_api->login('Default', $this->request->post['key']);
}
if ($api_info) {
// Check if IP is allowed
$ip_data = array();
$results = $this->model_account_api->getApiIps($api_info['api_id']);
foreach ($results as $result) {
$ip_data[] = trim($result['ip']);
}
if (!in_array($this->request->server['REMOTE_ADDR'], $ip_data)) {
$json['error']['ip'] = sprintf($this->language->get('error_ip'), $this->request->server['REMOTE_ADDR']);
}
if (!$json) {
$json['success'] = $this->language->get('text_success');
$session = new Session($this->config->get('session_engine'), $this->registry);
$session->start();
$this->model_account_api->addApiSession($api_info['api_id'], $session->getId(), $this->request->server['REMOTE_ADDR']);
$session->data['api_id'] = $api_info['api_id'];
// Create Token
$json['api_token'] = $session->getId();
} else {
$json['error']['key'] = $this->language->get('error_key');
}
}
$this->response->addHeader('Content-Type: application/json');
$this->response->setOutput(json_encode($json));
}
}
|