Initial import from local backup (Documents-Playground/pakerpale)
This commit is contained in:
jeonghwa
203
application/hooks/Common.php
Normal file
203
application/hooks/Common.php
Normal file
@@ -0,0 +1,203 @@
|
||||
<?php
|
||||
defined('BASEPATH') OR exit('No direct script access allowed');
|
||||
|
||||
/**
|
||||
* Common hook class
|
||||
*/
|
||||
|
||||
class _Common
|
||||
{
|
||||
|
||||
function init()
|
||||
{
|
||||
$CI =& get_instance();
|
||||
|
||||
if ($CI->uri->segment(1) === 'api') {
|
||||
$headers = $CI->input->request_headers();
|
||||
if (!empty($headers['token'])) {
|
||||
if($headers['token']) {
|
||||
if(!$this->checkToken($headers['token'])) {
|
||||
$response = json_encode(array(
|
||||
'result' => 'error',
|
||||
'result_text' => "유효한 토큰이 아닙니다"
|
||||
));
|
||||
die($response);
|
||||
}else {
|
||||
$_POST['token'] = $headers['token'];
|
||||
}
|
||||
}else {
|
||||
$response = json_encode(array(
|
||||
'result' => 'error',
|
||||
'result_text' => "토큰 값이 넘어오지 않았습니다"
|
||||
));
|
||||
die($response);
|
||||
}
|
||||
}else if($CI->uri->segment(2) === 'token') {
|
||||
$client_id = $CI->input->post_get('client_id');
|
||||
$client_secret = $CI->input->post_get('client_secret');
|
||||
$token = $this->requestToken($client_id, $client_secret);
|
||||
$response = json_encode(array(
|
||||
'result' => 'ok',
|
||||
'result_text' => $token
|
||||
));
|
||||
die($response);
|
||||
}
|
||||
}
|
||||
|
||||
if ($CI->uri->segment(1) === 'install') {
|
||||
return;
|
||||
}
|
||||
|
||||
if (config_item('use_lock_ip') && $CI->configlib->item('site_ip_whitelist')) {
|
||||
$whitelist = $CI->configlib->item('site_ip_whitelist');
|
||||
$whitelist = preg_replace("/[\r|\n|\r\n]+/", ',', $whitelist);
|
||||
$whitelist = preg_replace("/\s+/", '', $whitelist);
|
||||
if (preg_match('/(<\?|<\?php|\?>)/xsm', $whitelist)) {
|
||||
$whitelist = '';
|
||||
}
|
||||
if ($whitelist) {
|
||||
$whitelist = explode(',', trim($whitelist, ','));
|
||||
$whitelist = array_unique($whitelist);
|
||||
if (is_array($whitelist)) {
|
||||
$CI->load->library('Ipfilter');
|
||||
$ipfilter = new Ipfilter();
|
||||
if ( ! $ipfilter->filter($whitelist)) {
|
||||
$title = ($CI->configlib->item('site_blacklist_title'))
|
||||
? $CI->configlib->item('site_blacklist_title')
|
||||
: 'Maintenance in progress...';
|
||||
$message = $CI->configlib->item('site_blacklist_content');
|
||||
|
||||
show_error($message, '500', $title);
|
||||
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
if (config_item('use_lock_ip') && $CI->configlib->item('site_ip_blacklist')) {
|
||||
$blacklist = $CI->configlib->item('site_ip_blacklist');
|
||||
$blacklist = preg_replace("/[\r|\n|\r\n]+/", ',', $blacklist);
|
||||
$blacklist = preg_replace("/\s+/", '', $blacklist);
|
||||
if (preg_match('/(<\?|<\?php|\?>)/xsm', $blacklist)) {
|
||||
$blacklist = '';
|
||||
}
|
||||
if ($blacklist) {
|
||||
$blacklist = explode(',', trim($blacklist, ','));
|
||||
$blacklist = array_unique($blacklist);
|
||||
if (is_array($blacklist)) {
|
||||
$CI->load->library('Ipfilter');
|
||||
$ipfilter = new Ipfilter();
|
||||
if ($ipfilter->filter($blacklist)) {
|
||||
$title = ($CI->configlib->item('site_blacklist_title'))
|
||||
? $CI->configlib->item('site_blacklist_title')
|
||||
: 'Maintenance in progress...';
|
||||
$message = $CI->configlib->item('site_blacklist_content');
|
||||
show_error($message, '500', $title);
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
$CI->load->library('Mobile_detect');
|
||||
$detect = new Mobile_detect();
|
||||
|
||||
$device_view_type = (get_cookie('device_view_type') === 'desktop' OR get_cookie('device_view_type') === 'mobile')
|
||||
? get_cookie('device_view_type') : '';
|
||||
if (empty($device_view_type)) {
|
||||
$device_view_type = $detect->isMobile() ? 'mobile' : 'desktop';
|
||||
}
|
||||
$CI->configlib->set_device_view_type($device_view_type);
|
||||
|
||||
$device_type = $detect->isMobile() ? 'mobile' : 'desktop';
|
||||
$CI->configlib->set_device_type($device_type);
|
||||
|
||||
if ($CI->userlib->is_user()) {
|
||||
if ($CI->userlib->item('user_id') === false) {
|
||||
unset($CI->user);
|
||||
$CI->session->sess_destroy();
|
||||
redirect(current_full_url(), 'refresh');
|
||||
}
|
||||
$user_id = (int) $CI->userlib->item('user_id');
|
||||
if ($CI->userlib->item('user_denied')) {
|
||||
unset($CI->user);
|
||||
$CI->session->sess_destroy();
|
||||
redirect(current_full_url(), 'refresh');
|
||||
} else {
|
||||
if (substr($CI->userlib->item('user_lastlogin_datetime'), 0, 10) !== cdate('Y-m-d')) {
|
||||
$updatedata = array(
|
||||
'user_lastlogin_datetime' => cdate('Y-m-d H:i:s'),
|
||||
'user_lastlogin_ip' => $CI->input->ip_address(),
|
||||
);
|
||||
$CI->User_model->update($user_id, $updatedata);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// 관리자 페이지
|
||||
if ($CI->userlib->is_admin() !== 'super'
|
||||
&& $CI->userlib->is_admin() !== 'general'
|
||||
&& $CI->uri->segment(1) === config_item('uri_segment_admin')) {
|
||||
redirect('login?url=' . urlencode(current_full_url()));
|
||||
}
|
||||
|
||||
if (config_item('use_lock_ip')
|
||||
&& $CI->uri->segment(1) === config_item('uri_segment_admin')
|
||||
&& $CI->configlib->item('admin_ip_whitelist')) {
|
||||
|
||||
$whitelist = $CI->configlib->item('admin_ip_whitelist');
|
||||
$whitelist = preg_replace("/[\r|\n|\r\n]+/", ',', $whitelist);
|
||||
$whitelist = preg_replace("/\s+/", '', $whitelist);
|
||||
if (preg_match('/(<\?|<\?php|\?>)/xsm', $whitelist)) {
|
||||
$whitelist = '';
|
||||
}
|
||||
if ($whitelist) {
|
||||
$whitelist = explode(',', trim($whitelist, ','));
|
||||
$whitelist = array_unique($whitelist);
|
||||
if (is_array($whitelist)) {
|
||||
$CI->load->library('Ipfilter');
|
||||
if ( ! Ipfilter::filter($whitelist)) {
|
||||
$title = '관리자 페이지';
|
||||
$message = '현재 접속하신 아이피는 관리자 페이지 접근이 차단되었습니다';
|
||||
show_error($message, '500', $title);
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private function checkToken($token) {
|
||||
$url = "https://api.fasterest.net:30443/api/test";
|
||||
|
||||
$ch = curl_init(); //curl 초기화
|
||||
curl_setopt($ch, CURLOPT_URL, $url); //URL 지정하기
|
||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); //요청 결과를 문자열로 반환
|
||||
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); //connection timeout 10초
|
||||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); //원격 서버의 인증서가 유효한지 검사 안함
|
||||
curl_setopt($ch, CURLOPT_HTTPHEADER, array('Authorization: Bearer '. $token));
|
||||
$response = curl_exec($ch);
|
||||
curl_close($ch);
|
||||
return json_decode($response)->isValid;
|
||||
}
|
||||
|
||||
private function requestToken($client_id, $client_secret) {
|
||||
$url = "https://api.fasterest.net:30443/oauth/token?client_id=".$client_id."&grant_type=client_credentials&client_secret=".$client_secret;
|
||||
|
||||
$ch = curl_init(); //curl 초기화
|
||||
curl_setopt($ch, CURLOPT_URL, $url); //URL 지정하기
|
||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); //요청 결과를 문자열로 반환
|
||||
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10); //connection timeout 10초
|
||||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); //원격 서버의 인증서가 유효한지 검사 안함
|
||||
|
||||
$response = curl_exec($ch);
|
||||
curl_close($ch);
|
||||
|
||||
$res = json_decode($response, true);
|
||||
if(empty($res['access_token'])) {
|
||||
return null;
|
||||
}else {
|
||||
return $res['access_token'];
|
||||
}
|
||||
}
|
||||
}
|
||||
10
application/hooks/index.html
Normal file
10
application/hooks/index.html
Normal file
@@ -0,0 +1,10 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>403 Forbidden</title>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<p>Directory access is forbidden.</p>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user