select('*') ->join('usr_details', 'usr_details.user_id', '=', 'users.id') ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id') ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id') ->get(); } public function getUser($id) { // /api/rpc/user/user/getuser/id return DB::table('users') ->join('usr_details', 'usr_details.user_id', '=', 'users.id') ->join('usr_profile', 'usr_profile.user_id', '=', 'users.id') ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'users.id') ->where('id', $id) ->get(array( "users.id", 'username', 'perm_id', 'member_title', 'reg_date', 'website_address', 'website_name', 'gender', 'location', 'birthday', 'bio', 'avatar', 'strikes', 'name_style', 'display_name', 'yt_channel', 'country', // TODO: hide the following stuff away from unprivileaged users. 'email', 'ip_address', 'strikes' )); } public function getPostStyle($id) { // /api/rpc/user/user/getpoststyle/id return DB:: table('users') ->select('header', 'footer') ->where('id', $id) ->get(); } public function getGroupColours() { // /api/rpc/user/user/getgroupcolours return DB::table('usr_perm_module') ->select( 'id', 'name', 'colour_m', 'colour_f', 'colour_u' // 'badge' (this is a pipeline feature, please don't uncomment for now!) ) ->get(); } public function isAuth(Request $request) { // /apt/rpc/user/auth/isauth return $request->cookie('username'); } public function login(Request $request) { // /api/rpc/user/auth/login $getUser = DB::table('users') ->select('id', 'username', 'password', 'remember_token') ->where('username', $request->username) ->get(); $login_ok = false; try { $check_password = hash('sha256', $request->password . $getUser[0]->salt); for ($round = 0; $round < 65536; $round++) { $check_password = hash('sha256', $check_password . $getUser[0]->salt); } if ($check_password === $getUser[0]->password) { $login_ok = true; $credentials = array( "username" => $request->username, "password" => $check_password ); //dd($credentials); try { if (!$token = JWTAuth::attempt($credentials)) { return response()->json(['error' => 'invalid_credentials'], 401); } } catch (JWTException $e) { return response()->json(['error' => 'could_not_create_token'], 500); } return response()->json(['token' => "Bearer $token"]); //return $_SERVER['HTTP_HOST']; // setcookie("username", $_POST['username'], time()+3600*24*30*72, "/", $_SERVER['HTTP_HOST'], false, true); // setcookie("password", $check_password, time()+3600*24*30*72, "/", $_SERVER['HTTP_HOST'], false, true); //$cookieU = $request->cookie('username', $request->username, time()+3600*24*30*72); //$cookieP = $request->cookie('password', $check_password, time()+3600*24*30*72); //dd($cookieP); //dd($request); //dd($cookie->name)); //return response('') //->cookie('username', $cookieU) //->cookie('password', $cookieP); } return "bad"; } catch (Exception $e) { return $e->getMessage(); } } public function register(Request $request) { // /api/rpc/user/auth/register return; } public function logout(Request $request) { // /api/rpc/user/auth/logout return; } // public function passwordReset() {} // public function confirmReset() {} // Owner public function countOwnersOfEntry($file_id) { // /api/rpc/user/owner/countownersofentry/id return DB::table('str_owners') ->where('file_id', $file_id) ->count(); } public function getOwnersOfEntry($file_id) { // /api/rpc/user/owner/getownersofentry/id return DB::table('str_owners') ->join('str_file', 'str_owners.file_id', '=', 'str_file.id') ->join('users', 'str_owners.user_id', '=', 'users.id') ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id') ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id') ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id') ->where('file_id', $file_id) ->get(array( "users.id", "title", "version", "views", "downloads", "submit_date", "last_date", "username", "avatar", "perm_id", "gender", "display_name", "name_style", )); } public function countEntriesOfOwner($user_id) { // /api/rpc/user/owner/countentriesofowner/id return DB::table('str_owners') ->where('user_id', $user_id) ->count(); } public function getEntriesOfOwner($user_id) { // /api/rpc/user/owner/getentriesofowner/id return DB::table('str_owners') ->join('str_file', 'str_owners.file_id', '=', 'str_file.id') ->join('users', 'str_owners.user_id', '=', 'users.id') ->join('usr_details', 'usr_details.user_id', '=', 'str_owners.user_id') ->join('usr_profile', 'usr_profile.user_id', '=', 'str_owners.user_id') ->join('usr_perm_id', 'usr_perm_id.user_id', '=', 'str_owners.user_id') ->where('user_id', $user_id) ->get(array( "users.id", "title", "version", "views", "downloads", "submit_date", "last_date", "username", "avatar", "perm_id", "gender", "display_name", "name_style", )); } }