Exemplo n.º 1
0
        $_POST = get_object_vars($data);
        // only post is affected by this
        $_REQUEST = $_POST;
    }
}
$operation = vtws_getParameter($_REQUEST, "operation");
$operation = strtolower($operation);
$format = vtws_getParameter($_REQUEST, "format", "json");
$sessionId = vtws_getParameter($_REQUEST, "sessionName");
$sessionManager = new SessionManager();
$operationManager = new OperationManager($adb, $operation, $format, $sessionManager);
try {
    if (!$sessionId || strcasecmp($sessionId, "null") === 0) {
        $sessionId = null;
    }
    $input = $operationManager->getOperationInput();
    $adoptSession = false;
    if (strcasecmp($operation, "extendsession") === 0) {
        if (isset($input['operation'])) {
            // Workaround fix for PHP 5.3.x: $_REQUEST doesn't have PHPSESSID
            if (isset($_REQUEST['PHPSESSID'])) {
                $sessionId = vtws_getParameter($_REQUEST, "PHPSESSID");
            } else {
                // NOTE: Need to evaluate for possible security issues
                $sessionId = vtws_getParameter($_COOKIE, 'PHPSESSID');
            }
            // END
            $adoptSession = true;
        } else {
            writeErrorOutput($operationManager, new WebServiceException(WebServiceErrorCode::$AUTHREQUIRED, "Authentication required"));
            return;