103 lines
3.2 KiB
PHP
103 lines
3.2 KiB
PHP
<?php
|
|
|
|
/* Pull in Inside */
|
|
set_include_path("../includes/".PATH_SEPARATOR."../inside/".PATH_SEPARATOR."../snapporder");
|
|
require_once("functions.php");
|
|
require_once("User.php");
|
|
|
|
/* Pull in some nifty stuff from snapporder integration */
|
|
require_once("api_functions.php");
|
|
require_once("lib/functions.php");
|
|
require_once("config.php");
|
|
|
|
/* Validate request */
|
|
$body = file_get_contents('php://input');
|
|
if(strlen($body) === 0) {
|
|
return_json_response(array('error' => 'Invalid request'), 400);
|
|
}
|
|
|
|
/* Decode body */
|
|
$data = json_decode($body, true);
|
|
if($data === NULL) {
|
|
return_json_response(array('error' => 'Can\'t decode body'), 400);
|
|
}
|
|
/* Check type of registration and set valid fields */
|
|
$reg_type = "new";
|
|
if( isset($data['type']) && $data['type'] === "renewal" ) {
|
|
/* Renewal */
|
|
$reg_type = $data['type'];
|
|
}
|
|
|
|
$required_keys = array('apikey', 'user_id');
|
|
$valid_keys = $required_keys;
|
|
$valid_keys = array_merge($valid_keys, array('purchased', 'source'));
|
|
|
|
$valid_sources = array('card');
|
|
|
|
/* Validate supplied data */
|
|
foreach($required_keys as $key) {
|
|
if(!array_key_exists($key, $data)) {
|
|
return_json_response(array('error' => 'missing required field \''.$key.'\''), 400);
|
|
}
|
|
}
|
|
foreach($data as $key => $value) {
|
|
if(!in_array($key, $valid_keys)) {
|
|
return_json_response(array('error' => 'unknown field \''.$key.'\''), 400);
|
|
}
|
|
}
|
|
|
|
/* Valid API KEY (defined in credentials.php) ? */
|
|
if( $data['apikey'] !== USER_API_KEY_KASSA ) {
|
|
return_json_response(array('error' => "Invalid apikey: '".$data['apikey']."'."), 400);
|
|
}
|
|
|
|
$conn = get_db_connection(DB_FETCHMODE_ASSOC);
|
|
|
|
/* Existing user? */
|
|
$user = get_user($user_id);
|
|
/* Don't allow renewal of an existing valid membership. */
|
|
if( $user['membership_status'] !== 0 ) {
|
|
if($user['expires'] === '') {
|
|
// Life long
|
|
return_json_response(array('error' => 'Cannot renew, user with id '.$user['id'].' has a life long membership.'), 409);
|
|
}
|
|
return_json_response(array('error' => 'Cannot renew, user with phone '.$user['id'].' has a valid membership until: '.$user['expires']), 409);
|
|
}
|
|
|
|
/* Validate optional purchase_date */
|
|
if( isset($data['purchased']) ) {
|
|
$purchased = clean_date($data['purchased']) ;
|
|
if($purchased === false) {
|
|
return_json_response(array('error' => 'Could not parse date from field purchased: '.$data['purchased']), 400);
|
|
}
|
|
$data['purchased'] = $purchased;
|
|
}
|
|
|
|
/* Validate optional source */
|
|
if( isset($data['source']) && !in_array($data['source'], $valid_sources) ) {
|
|
return_json_response(array('error' => 'Invalid value in field source: '.$data['source']), 400);
|
|
}
|
|
|
|
/* Add or renew membership */
|
|
try {
|
|
// TODO ADD or renew membership
|
|
add_or_renew_membership($user, $data);
|
|
} catch(InsideDatabaseException $e) {
|
|
error_log($e->getMessage());
|
|
return_json_response(array('error' => 'db_error', 'error_message' => $e->getMessage()), 500);
|
|
}
|
|
|
|
/* Get and format user */
|
|
$user = NULL;
|
|
try {
|
|
$user = get_user($user_id);
|
|
} catch(InsideDatabaseException $e) {
|
|
error_log($e->getMessage());
|
|
return_json_response(array('error' => 'db_error', 'error_message' => $e->getMessage()), 500);
|
|
}
|
|
|
|
// TODO: send new membership or renewal email
|
|
|
|
/* Return encrypted user object */
|
|
return_json_response($user);
|