function post_xhr()
{
if ($this->checkAuth()) {
$usernameOrEmail = mb_strtolower($_POST['usernameOrEmail']);
if (mb_strlen($usernameOrEmail) >= 8 && preg_match('/^[a-zA-Z0-9_\\-]+$/', $usernameOrEmail) || filter_var($usernameOrEmail, FILTER_VALIDATE_EMAIL)) {
$secondFactor = mb_strtolower($_POST['secondFactor']);
if (ctype_alnum($secondFactor) || empty($secondFactor)) {
$answer = mb_strtolower($_POST['answer']);
if (mb_strlen($answer) >= 6 || empty($answer)) {
$newPassword = $_POST['passwordForgot'];
$newRetypedPassword = $_POST['passwordRetypedForgot'];
if ($newPassword == $newRetypedPassword) {
$userForgot = new AuthUser();
$responseArr = $userForgot->forgotPassword($usernameOrEmail, $secondFactor, $answer, $newPassword);
if ($responseArr['continue'] == true) {
echo json_encode(StatusReturn::S200($responseArr));
} else {
echo json_encode(StatusReturn::E400('Unknown Error 5'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error 4'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
}
}
function post()
{
if ($this->checkAuth()) {
if (AvailablePaymentMethodsData::hasBitPay()) {
$jsonObj = json_decode(file_get_contents("php://input"));
if (json_last_error() == JSON_ERROR_NONE) {
//file_put_contents('IPNData.txt', print_r($jsonObj, true));
$payment = new PaymentSystem();
$posDataObj = json_decode($jsonObj->posData);
$invoiceArr = explode(',', $posDataObj->invoiceList);
if (json_last_error() == JSON_ERROR_NONE) {
//file_put_contents('IPNPosData.txt', print_r($invoiceArr, true));
// todo: maybe confirm posData for extra Security?
if ($payment->confirmBitPayPaidComplete($jsonObj->id)) {
// todo: compare amounts paid vs invoice amount
//file_put_contents('here1.txt', $posDataObj->userID);
$payment->updateInvoicesPaid($invoiceArr, $jsonObj->id, PaymentMethod::BitPay, $posDataObj->userID);
} else {
if ($payment->confirmBitPayPending($jsonObj->id)) {
//file_put_contents('here2.txt', $posDataObj->userID);
$payment->updateInvoicesPending($invoiceArr, $posDataObj->userID);
}
}
} else {
// todo: record error somewhere
}
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Bad JSON!'));
}
} else {
echo json_encode(StatusReturn::E404('404 Not Found!'));
}
}
}
function get_xhr($email)
{
if ($this->checkAuth()) {
if (!AuthUserData::emailExist(mb_strtolower($email))) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Email Already Being Used!'));
}
}
}
function get_xhr($authUser)
{
if ($this->checkAuth()) {
if (!AuthUserData::userExist(mb_strtolower($authUser))) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Username Exists Already!'));
}
}
}
function post_xhr()
{
if ($this->checkAuth()) {
if (!empty($_POST['oldPassword']) && !empty($_POST['newPassword'])) {
$headers = getallheaders();
$newUser = new AuthUser();
$newUser->loadUser(mb_strtolower($headers['Auth-User']));
if ($newUser->setPassword($_POST['oldPassword'], $_POST['newPassword'])) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
}
}
function post_xhr()
{
if ($this->checkAuth()) {
if (!empty($_POST['question']) && isset($_POST['answer']) && mb_strlen($_POST['answer']) >= _SECURITY_ANSWER_MIN_LENGTH_) {
$headers = getallheaders();
$newUser = new AuthUser();
$newUser->loadUser(mb_strtolower($headers['Auth-User']));
if ($newUser->setQuestion($_POST['question'], mb_strtolower($_POST['answer']))) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
}
}
function post_xhr()
{
if ($this->checkAuth()) {
if (isset($_POST['user'], $_POST['answer']) && mb_strlen($_POST['user']) >= _USERNAME_MIN_LENGTH_ && preg_match('/^[a-zA-Z0-9_\\-]+$/', $_POST['user']) && !empty($_POST['email']) && filter_var($_POST['email'], FILTER_VALIDATE_EMAIL) && !empty($_POST['question']) && mb_strlen($_POST['answer']) >= _SECURITY_ANSWER_MIN_LENGTH_ && !empty($_POST['password']) && (empty($_POST['factor']) || mb_strlen($_POST['answer']) >= _SECURITY_ANSWER_MIN_LENGTH_)) {
$newUser = new AuthUser();
if ($newUser->createUser(mb_strtolower($_POST['user']), mb_strtolower($_POST['email']), $_POST['password'], $_POST['question'], mb_strtolower($_POST['answer']), $_POST['factor'])) {
if (isset($_POST['lang']) && $_POST['lang'] != '' && mb_strlen($_POST['lang']) == 2 && ctype_alpha($_POST['lang'])) {
$newUser->setLanguage($_POST['lang']);
}
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
} else {
echo json_encode(StatusReturn::E400('Unknown Error'));
}
}
}
function post_xhr()
{
if ($this->checkAuth()) {
if (isset($_POST['baseLang'], $_POST['twoFactorType']) && !empty($_POST['baseLang']) && TwoFactor::isValidValue($_POST['twoFactorType'], false)) {
$headers = getallheaders();
$newUser = new AuthUser();
$newUser->loadUser(mb_strtolower($headers['Auth-User']));
$packages = array();
if (isset($_POST['packages'])) {
$packages = $_POST['packages'];
}
if ($newUser->setSettings($_POST['baseLang'], $_POST['twoFactorType'], $packages)) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Failed to save settings!'));
}
} else {
echo json_encode(StatusReturn::E400('Missing or bad data!'));
}
}
}
function delete_xhr($type, $paymentProfileID)
{
if ($this->checkAuth()) {
$headers = getallheaders();
$userPay = new PaymentSystem();
$userPay->loadUser(mb_strtolower($headers['Auth-User']));
if ($type == 'profiles') {
if (isset($paymentProfileID) && $userPay->delPaymentProfile($paymentProfileID)) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Profile Missing!'));
}
} else {
echo json_encode(StatusReturn::E404('404 Not Found!'));
}
}
}
function delete_xhr($userID)
{
if ($this->checkAuth()) {
if (AuthUserData::userExistByID($userID)) {
$headers = getallheaders();
$subUser = new AuthSubUser(mb_strtolower($headers['Auth-User']), (int) $userID);
if ($subUser->delUser()) {
echo json_encode(StatusReturn::S200());
} else {
echo json_encode(StatusReturn::E400('Error'));
}
}
}
}
