function _post($url, $method, $data = null, $optional_headers = null)
{
    $options = array(CURLOPT_CUSTOMREQUEST => $method);
    if ($optional_headers !== null) {
        $options[CURLOPT_HEADER] = $optional_headers;
    }
    if ($data !== null) {
        $options[CURLOPT_POSTFIELDS] = $data;
    }
    $reader = new Url_Reader($url, $options);
    $response = false;
    if ($reader->success()) {
        $response = $reader->get();
    } else {
        $response = $reader->get_errors();
    }
    return $response;
}
$callbackurl = APP_URL . "callback.php?" . $_SERVER['QUERY_STRING'];
//url de retorno
$lbsid = 'C40649834B4B1Z4B12';
$url_request = "http://api.apontador.com.br/v1/oauth/request_token";
// url pra pedir o oauth_token e oauth_secret (antes de autorizar)
$url_authorize = "http://api.apontador.com.br/v1/oauth/authorize";
// url pra pedir autorizacao
$options = array('consumer_key' => $key, 'consumer_secret' => $secret);
$method = "GET";
$params = null;
try {
    $consumer = new OAuthConsumer($key, $secret, NULL);
    $signature_method = new OAuthSignatureMethod_HMAC_SHA1();
    // Passo 1: Pedir o par de tokens inicial (oauth_token e oauth_token_secret) para o Apontador
    $req_req = OAuthRequest::from_consumer_and_token($consumer, NULL, "GET", $url_request, array());
    $req_req->sign_request($signature_method, $consumer, NULL);
    //a classe $req_req ao ser transformada em string nos devolve o url para pedir a chave
    $reader = new Url_Reader((string) $req_req);
    if ($reader->success()) {
        parse_str($reader->get());
    } else {
        throw new Exception(sprintf('Falha ao buscar auth token e token secret em %s. - %s'), (string) $req_req, $reader->get_errors());
    }
    //redireciona pro apontador pedindo autorizacao
    $oauth_callback = "{$callbackurl}&key={$key}&secret={$secret}&token={$oauth_token}&token_secret={$oauth_token_secret}&endpoint=" . urlencode($url_authorize);
    $auth_url = $url_authorize . "?oauth_token={$oauth_token}&oauth_callback=" . urlencode($oauth_callback) . "";
    //	var_dump($key,$secret,$auth_url);exit;
    header("Location: {$auth_url}");
} catch (OAuthException2 $e) {
    var_dump($e);
}
    $url = 'http://api.apontador.com.br/v1/search/places/byaddress?type=json&radius_mt=10000';
    $cidade = explode(',', utf8_decode($_REQUEST['city']));
    $uf = tiraAcento(strtoupper($cidade[1]));
    $cidade = tiraAcento($cidade[0]);
    $term = tiraAcento(utf8_decode(urldecode($_REQUEST['term'])));
    $cidade = $cidade;
    $uf = urlencode($uf);
    $term = urlencode($term);
    $url .= "&city={$cidade}&state={$uf}&term={$term}";
} else {
    $placeid = $_GET['lbsid'];
    $url = sprintf('http://api.apontador.com.br/v1/places/%s?type=json', $placeid);
}
//echo $url;
$options = array(CURLOPT_HTTPAUTH => CURLAUTH_BASIC, CURLOPT_PORT => $port, CURLOPT_USERPWD => "{$key}:{$secret}");
$reader = new Url_Reader($url, $options);
if ($reader->success()) {
    //retornou legal do servidor
    //echo $reader->get();
    //echo mb_detect_encoding($reader->get());
    $aRetorno = json_decode($reader->get());
    $places = array();
    //var_dump($aRetorno);
    if (!isset($_GET['lbsid'])) {
        if (intval($aRetorno->search->result_count) > 0) {
            foreach ($aRetorno->search->places as $k => $place) {
                $place = $place->place;
                $places[$k]['lbsid'] = $place->id;
                $places[$k]['nome'] = $place->name;
                $places[$k]['link'] = $place->main_url;
                $places[$k]['endereco'] = $place->address->street . ' ' . $place->address->number;