index.php

<?php

# we can't do anything without a config file
if ( ! file_exists('config.php') ) {
    die;
}
$config = include_once './config.php';

# invoke the composer autoloader for our dependencies
require_once __DIR__.'/vendor/autoload.php';

# load our common libraries
include_once './inc/common.php';
include_once './inc/content.php';
include_once './inc/media.php';
include_once './inc/twitter.php';

$photo_urls = array();

// Take headers and other incoming data
$headers = getallheaders();
if ($headers === false ) {
    quit(400, 'invalid_headers', 'The request lacks valid headers');
}
$headers = array_change_key_case($headers, CASE_LOWER);
if (!empty($_POST['access_token'])) {
    $token = "Bearer ".$_POST['access_token'];
    $headers["authorization"] = $token;
}
if (! isset($headers['authorization']) ) {
    quit(401, 'no_auth', 'No authorization token supplied.');
}
// check the token for this connection.
indieAuth($config['token_endpoint'], $headers['authorization'], $config['base_url']);

# is this a GET request?
if ($_SERVER['REQUEST_METHOD'] === 'GET') {
    if (isset($_GET['q'])) {
        switch ($_GET['q']):
            case 'config':
                show_config();
                break;
            case 'source':
               show_content_source($_GET['url'], $_GET['properties']);
                break;
            case 'syndicate-to':
                show_config('syndicate-to');
                break;
            default:
                show_info();
                break;
        endswitch;
    } else {
        show_info();
    }
} elseif ($_SERVER['REQUEST_METHOD'] === 'POST') {
    # set up some variables for use with media uploads.
    $subdir = date('Y/m/');
    $upload_path = $config['base_path'] . $config['upload_path'] . $subdir;
    $copy_path = $config['source_path'] . 'static/' . $config['upload_path'] . $subdir;
    if (array_key_exists('file', $_FILES)) {
        # this is a media endpoint file upload.  Process it and end.
        check_target_dir($upload_path);
        $upload = media_upload($_FILES['file'], $upload_path, $config['max_image_width']);
        # do we need to copy this file to the source /static/ directory?
        if ($config['copy_uploads_to_source'] === TRUE ) {
            # we need to ensure '/source/static/uploads/YYYY/mm/' exists
            check_target_dir($copy_path);
            if ( copy ( $upload_path . $upload, $copy_path . $upload ) === FALSE ) {
                quit(400, 'copy_error', 'Unable to copy upload to source directory');
            }
            # be sure to copy the thumbnail file, too
            $thumb = str_replace('-' . $config['max_image_width'] . '.', '-200.', $upload);
            if ( copy ( $upload_path . $thumb, $copy_path . $thumb ) === FALSE ) {
                quit(400, 'copy_error', 'Unable to copy thumbnail to source directory');
            }
        }
        $url = $config['base_url'] . $config['upload_path'] . $subdir . $upload;
        quit(201, '', '', $url);
    }
    # one or more photos may be uploaded along with the content.
    if (!empty($_FILES['photo'])) {
        check_target_dir($copy_path);
        # ensure we have a normal array of files on which to iterate
        $photos = normalize_files_array($_FILES['photo']);
        foreach($photos as $photo) {
            # we upload to $copy_path here, because Hugo will copy the contents
            # of our static site into the rendered site for us.
            $upload = media_upload($photo, $copy_path, $config['max_image_width']);
            $photo_urls[] = $config['base_url'] . $config['upload_path'] . $subdir . $upload;
        }
    }
    # Parse the JSON or POST body into an object
    $request = parse_request();
    switch($request->action):
        case 'delete':
            delete($request);
            break;
        case 'undelete':
            undelete($request);
            break;
        case 'update':
            update($request, $photo_urls);
            break;
        default:
            create($request, $photo_urls);
            break;
    endswitch;
} else {
    # something other than GET or POST?  Unsupported.
    quit(400, 'invalid_request', 'HTTP method unsupported');
}
?>