Adds check for API-key

api/user.php

@@ -33,6 +33,13 @@ if(DB :: isError($conn)) {
 }
 $conn->setFetchMode(DB_FETCHMODE_ORDERED);
 
+/* Valid API KEY (defined in credentials.php) ? */
+if(!isset($_GET['apikey']) || $_GET['apikey'] !== USER_API_KEY) {
+    set_response_code(400);
+    echo json_encode(array('error' => "Invalid apikey."));
+    die();
+}
+
 /* Validate params */
 if(!isset($_GET['q'])) {
     set_response_code(400);

inside/credentials-sample.php

@@ -24,4 +24,7 @@ function getDSN($host = "default") {
 
 	return "$driver://$user_name:$password@$host_name/$db_name";
 }
+
+define("USER_API_KEY", "");
+
 ?>