phpGridServer/rest_xinventory.php at master · ft-/phpGridServer · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
<?php
/******************************************************************************
 * phpGridServer
 *
 * GNU LESSER GENERAL PUBLIC LICENSE
 * Version 2.1, February 1999
 *
 */

set_include_path(dirname($_SERVER["SCRIPT_FILENAME"]).PATH_SEPARATOR.get_include_path());
require_once("lib/services.php");
require_once("lib/rpc/restrpc.php");

if(function_exists("apache_request_headers"))
{
	$headers = apache_request_headers();
	if(isset($headers["X-SecondLife-Shard"]))
	{
		http_response_code("400");
		exit;
	}
}

/* variable is disabling deletion, so no user injected parameter can enable it at all */
if(!isset($disallow_delete))
{
	$disallow_delete = False;
}

if($_SERVER["REQUEST_METHOD"] != "POST")
{
	http_response_code("400");
	exit;
}

if(function_exists("apache_request_headers"))
{
	$headers = apache_request_headers();
	if(isset($headers["X-SecondLife-Shard"]))
	{
		http_response_code("400");
		exit;
	}
}

$db_uuid_cache = array();
function getCreatorData($item)
{
	global $db_uuid_cache;
	$serverParamService = getService("ServerParam");
	$userAccountService = getService("UserAccount");
	if(isset($db_uuid_cache["".$item->CreatorID]))
	{
		return $db_uuid_cache["".$item->CreatorID];
	}
	$homeURI = $serverParamService->getParam("HG_HomeURI", "http://${_SERVER["SERVER_NAME"]}:${_SERVER["SERVER_PORT"]}/");
	try
	{
		$userAccount = $userAccountService->getAccountByID(null, $item->CreatorID);
		$item->CreatorData = "$homeURI;".$userAccount->FirstName." ".$userAccount->LastName;
		$db_uuid_cache["".$item->CreatorID] = $item->CreatorData;
	}
	catch(Exception $e)
	{
		$db_uuid_cache["".$item->CreatorID] = "";
	}
	return $db_uuid_cache["".$item->CreatorID];
}


function sendBooleanResponse($result, $msg="")
{
	if($result)
	{
		header("Content-Type: text/xml");
		echo "<?xml version=\"1.0\" encoding=\"utf-8\"?><ServerResponse><RESULT>True</RESULT></ServerResponse>";
	}
	else
	{
		header("Content-Type: text/xml");
		echo "<?xml version=\"1.0\" encoding=\"utf-8\"?><ServerResponse><RESULT>False</RESULT></ServerResponse>";
	}
}

$inventoryService = getService("RPC_Inventory");

try
{
	$_RPC_REQUEST=RESTRPCHandler::parseREST($_POST);
}
catch(Exception $e)
{
	http_response_code("400");
	header("Content-Type: text/plain");
	echo $e->getMessage();
	exit;
}

if(isset($debugoutput) && $debugoutput)
{
	trigger_error("/xinventory Method=".$_RPC_REQUEST->Method);
}


if(!preg_match("/^[A-Za-z_]*$/", $_RPC_REQUEST->Method))
{
	http_response_code("400");
	exit;
}
else if(!file_exists("xinventory/rpc_".$_RPC_REQUEST->Method.".php"))
{
	http_response_code("400");
	exit;
}
else
{
	require_once("xinventory/rpc_".$_RPC_REQUEST->Method.".php");
}