示例#1
0
 *  POST : access_token postalcode
*/
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // access_token, occupation
    $ret = array();
    $access_token = $_POST["access_token"];
    $postalcode = $_POST["postalcode"];
    if (Validation::includeBlank($access_token, $postalcode)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidPostalcode($postalcode)) {
            HandleResponse::badRequest("Invalid user postalcode");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid Accesstoken");
                } else {
                    // Update postal code
                    $ret = updatePostalcode($conn, $user_id, $postalcode);
                }
                mysqli_query($conn, "commit");
示例#2
0
 *
 *  http://eventjoiner.io/client/mobile/v1.0/user/updateimage.php
 *
 *  POST : access_token image (form/multipart)
 */
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/image.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // image, access_token
    $ret = array();
    $access_token = $_POST["access_token"];
    if (Validation::includeBlank($access_token)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        $conn = null;
        try {
            $db = new DBConnection();
            $conn = $db->getConnection();
            mysqli_query($conn, "set autocommit = 0");
            mysqli_query($conn, "begin");
            $user_id = getUserIdFromToken($conn, $access_token);
            if ($user_id == null) {
                $ret = HandleResponse::badRequestReturn("Invalid Accesstoken");
            } else {
                // Limitation 1MB
                if (!isset($_FILES['profile']['error']) || is_array($_FILES['profile']['error'])) {
                    $ret = HandleResponse::badRequestReturn("Failed to upload iamge");
                } else {
示例#3
0
 */
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // image, access_token, address
    $ret = array();
    $access_token = $_POST["access_token"];
    $address = $_POST["address"];
    if (Validation::includeBlank($access_token, $address)) {
        http_response_code(400);
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidAddress($address)) {
            HandleResponse::badRequest("Invalid user address");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid Accesstoken");
                } else {
                    // Update address
                    $ret = updateAddress($conn, $user_id, $address);
                }
                mysqli_query($conn, "commit");
示例#4
0
 *  POST : deviceid(iOS, Android)
 */
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // device
    $ret = array();
    $deviceid = $_POST["device"];
    if (Validation::includeBlank($deviceid)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        $conn = null;
        try {
            $db = new DBConnection();
            $conn = $db->getConnection();
            mysqli_query($conn, "set autocommit = 0");
            mysqli_query($conn, "begin");
            $ret = invalidToken($conn, $deviceid);
            mysqli_query($conn, "commit");
            print json_encode($ret);
        } catch (Exception $e) {
            mysqli_query($conn, "rollback");
            HandleResponse::badRequest($e->getMessage());
        }
    }
} else {
    // NOT POST request
    http_response_code(404);
}
示例#5
0
 *  POST : access_token lastname
*/
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // access_token, lastname
    $ret = array();
    $access_token = $_POST["access_token"];
    $last_name = $_POST["lastname"];
    if (Validation::includeBlank($access_token, $last_name)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidUserName($last_name)) {
            HandleResponse::badRequest("Invalid user last name");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid user last name");
                } else {
                    // Update last name
                    $ret = updateLastname($conn, $user_id, $last_name);
                }
                mysqli_query($conn, "commit");
示例#6
0
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // TODO : Request Validation
    $ret = array();
    // email, password, device_id  (required)
    $email = $_POST["email"];
    $password = $_POST["password"];
    $deviceid = $_POST["device"];
    // Validation
    if (Validation::includeBlank($email, $password, $deviceid)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidEmail($email)) {
            HandleResponse::badRequest("Email is invalid");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = matchUser($conn, $email, $password);
                if ($user_id == -1) {
                    $ret = HandleResponse::badRequestReturn("Email or Password is wrong");
                } else {
                    $token_data = getExistingToken($conn, $user_id, $deviceid);
                    $access_token = UUID::v4();
                    if ($token_data != null) {
                        // Update token
示例#7
0
 *  POST : access_token occupation
*/
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // access_token, occupation
    $ret = array();
    $access_token = $_POST["access_token"];
    $occupation = $_POST["occupation"];
    if (Validation::includeBlank($access_token, $occupation)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidOccupation($occupation)) {
            HandleResponse::badRequest("Invalid user occupation");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid user occupation");
                } else {
                    // Update occupation
                    $ret = updateOccupation($conn, $user_id, $occupation);
                }
                mysqli_query($conn, "commit");
示例#8
0
 $email = $_POST["email"];
 $password = $_POST["password"];
 $firstname = $_POST["firstname"];
 $lastname = $_POST["lastname"];
 $birthday = $_POST["birthday"];
 if (Validation::includeBlank($email, $password, $firstname, $lastname, $birthday)) {
     HandleResponse::badRequest("Parameters are blank");
 } else {
     if (!Validation::isValidEmail($email)) {
         HandleResponse::badRequest("Email is invalid");
     } else {
         if (!Validation::isValidPassword($password)) {
             HandleResponse::badRequest("Password should be over 6!");
         } else {
             if (!Validation::isValidTime($birthday)) {
                 HandleResponse::badRequest("Birthday style is wrong!");
             } else {
                 $conn = null;
                 try {
                     $db = new DBConnection();
                     $conn = $db->getConnection();
                     mysqli_query($conn, "set autocommit = 0");
                     mysqli_query($conn, "begin");
                     if (isExistUser($conn, $email)) {
                         $ret = HandleResponse::badRequestReturn("This email is already exist");
                     } else {
                         $ret = createUser($conn, $email, $password, $firstname, $lastname, $birthday);
                     }
                     mysqli_query($conn, "commit");
                 } catch (Exception $e) {
                     mysqli_query($conn, "rollback");
示例#9
0
 *  POST : access_token sex 0: nothing, 1: male, 2: female
*/
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // access_token, occupation
    $ret = array();
    $access_token = $_POST["access_token"];
    $sex = $_POST["sex"];
    if (Validation::includeBlank($access_token, $sex)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidSex($sex)) {
            HandleResponse::badRequest("Invalid user sex");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid Accesstoken");
                } else {
                    // Update postal code
                    $ret = updateSex($conn, $user_id, $sex);
                }
                mysqli_query($conn, "commit");
示例#10
0
 *  POST : access_tokenm phone_number
 */
include_once "../../common/validation.php";
include_once "../../common/dbconfig.php";
include_once "../../common/database.php";
include_once "../../common/handleresponse.php";
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    // image, access_token, phone number
    $ret = array();
    $access_token = $_POST["access_token"];
    $phone_number = $_POST["phone_number"];
    if (Validation::includeBlank($access_token, $phone_number)) {
        HandleResponse::badRequest("Parameters are blank");
    } else {
        if (!Validation::isValidPhonenumber($phone_number)) {
            HandleResponse::badRequest("Invalid phone number");
        } else {
            $conn = null;
            try {
                $db = new DBConnection();
                $conn = $db->getConnection();
                mysqli_query($conn, "set autocommit = 0");
                mysqli_query($conn, "begin");
                $user_id = getUserIdFromToken($conn, $access_token);
                if ($user_id == null) {
                    $ret = HandleResponse::badRequestReturn("Invalid Accesstoken");
                } else {
                    // Update Phone number
                    $ret = updatePhoneNumber($conn, $user_id, $phone_number);
                }
                mysqli_query($conn, "commit");