blob: 928c0b6e6ba69ef4e59b8dc19d813fa188600d7a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
<?php
declare(strict_types=1);
/**
* API entry point for FreshRSS extensions on
* `/api/misc.php/Extension%20name/` or `/api/misc.php?ext=Extension%20name`
*/
require dirname(__DIR__, 2) . '/constants.php';
require LIB_PATH . '/lib_rss.php'; //Includes class autoloader
function badRequest(): never {
header('HTTP/1.1 400 Bad Request');
header('Content-Type: text/plain; charset=UTF-8');
die('Bad Request!');
}
function serviceUnavailable(): never {
header('HTTP/1.1 503 Service Unavailable');
header('Content-Type: text/plain; charset=UTF-8');
die('Service Unavailable!');
}
$extensionName = is_string($_GET['ext'] ?? null) ? $_GET['ext'] : '';
if ($extensionName === '') {
$pathInfo = '';
if (empty($_SERVER['PATH_INFO']) || !is_string($_SERVER['PATH_INFO'] ?? null)) {
if (!empty($_SERVER['ORIG_PATH_INFO']) && is_string($_SERVER['ORIG_PATH_INFO'])) {
// Compatibility https://php.net/reserved.variables.server
$pathInfo = $_SERVER['ORIG_PATH_INFO'];
}
} else {
$pathInfo = $_SERVER['PATH_INFO'];
}
$pathInfo = rawurldecode($pathInfo);
$pathInfo = preg_replace('%^(/api)?(/misc\.php)?%', '', $pathInfo); //Discard common errors
if ($pathInfo !== '' && is_string($pathInfo)) {
$pathInfos = explode('/', $pathInfo, limit: 3);
if (count($pathInfos) > 1) {
$extensionName = $pathInfos[1];
}
}
}
if ($extensionName === '') {
badRequest();
}
Minz_Session::init('FreshRSS', volatile: true);
FreshRSS_Context::initSystem();
if (
!FreshRSS_Context::hasSystemConf() ||
!FreshRSS_Context::systemConf()->api_enabled ||
empty(FreshRSS_Context::systemConf()->extensions_enabled[$extensionName])
) {
serviceUnavailable();
}
// Only enable the extension that is being called
FreshRSS_Context::systemConf()->extensions_enabled = [$extensionName => true];
Minz_ExtensionManager::init();
Minz_Translate::init();
if (!Minz_ExtensionManager::callHookUnique(Minz_HookType::ApiMisc)) {
serviceUnavailable();
}
|
