Proyectos de Subversion Moodle

<?php

header('Content-Type: application/json');

header('Access-Control-Allow-Origin: *');

define('LLWS_USERNAME', 'leaderdslinked-ws');

define('LLWS_PASSWORD', 'KFB3lFsLp&*CpB0uc2VNc!zVn@w!EZqZ*jr$J0AlE@sYREUcyP');

define('LLWS_RSA_N', 34589927);

define('LLWS_RSA_D', 4042211);

define('LLWS_RSA_E', 7331);

define('LLWS_CATEGORY_ID', 6);

require_once(__DIR__ . '/../config.php');

global $DB, $CFG;

require_once($CFG->libdir . '/moodlelib.php');

require_once($CFG->libdir . '/externallib.php');

require_once($CFG->libdir . '/authlib.php');

require_once($CFG->libdir . '/gdlib.php');

require_once($CFG->dirroot . '/user/lib.php');

require_once __DIR__ . '/rsa.php';

require_once __DIR__ . '/lib.php';

/*

$username   = trim(isset($_SERVER['HTTP_USERNAME']) ? filter_var($_SERVER['HTTP_USERNAME'], FILTER_SANITIZE_STRING) : '');

$password   = trim(isset($_SERVER['HTTP_PASSWORD']) ? filter_var($_SERVER['HTTP_PASSWORD'], FILTER_SANITIZE_STRING) : '');

$timestamp  = trim(isset($_SERVER['HTTP_TIMESTAMP']) ? filter_var($_SERVER['HTTP_TIMESTAMP'], FILTER_SANITIZE_STRING) : '');

$rand       = intval(isset($_SERVER['HTTP_RAND']) ? filter_var($_SERVER['HTTP_RAND'], FILTER_SANITIZE_NUMBER_INT) : 0,10);

*/

$username   = trim(isset($_REQUEST['data']['username']) ? filter_var($_REQUEST['data']['username'], FILTER_SANITIZE_STRING) : '');

$password   = trim(isset($_REQUEST['data']['password']) ? filter_var($_REQUEST['data']['password'], FILTER_SANITIZE_STRING) : '');

$timestamp  = trim(isset($_REQUEST['data']['timestamp']) ? filter_var($_REQUEST['data']['timestamp'], FILTER_SANITIZE_STRING) : '');

$rand       = intval(isset($_REQUEST['data']['rand']) ? filter_var($_REQUEST['data']['rand'], FILTER_SANITIZE_NUMBER_INT) : 0, 10);

$data       = trim(isset($_REQUEST['data']['data']) ? filter_var($_REQUEST['data']['data'], FILTER_SANITIZE_STRING) : '');

/*

$data = '';

$input = fopen("php://input", "r");

while ($line = fread($input, 1024))

{

    $data .= $line;

}

fclose($input);*/

/*

echo 'username = '. $username . PHP_EOL;

echo 'password = '. $password . PHP_EOL;

echo 'rand = '. $rand . PHP_EOL;

echo 'timestamp = '. $timestamp . PHP_EOL;

echo 'data = '. $data . PHP_EOL;

/*

list($usec, $sec) = explode(' ', microtime());

$seed = intval($sec + ((float) $usec * 100000));

$username   = LLWS_USERNAME;

$timestamp  = date('Y-m-d\TH:i:s');

mt_srand($seed, MT_RAND_MT19937);

$rand =  mt_rand();

$password   = LLWS_PASSWORD;

$password  = password_hash($username.'-'. $password. '-' . $rand. '-' . $timestamp, PASSWORD_DEFAULT);

$data       = $rsa->encrypt(json_encode(['email' => 'usuario4@test.com', 'first_name' => 'usuario4', 'last_name' => 'test']));

*/

if (empty($username) || empty($password) || empty($timestamp) || empty($rand) || !is_integer($rand)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY1']);

    exit;

}

if ($username != LLWS_USERNAME) {

    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY2']);

    exit;

}

$dt = \DateTime::createFromFormat('Y-m-d\TH:i:s', $timestamp);

if (!$dt) {

    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY3']);

    exit;

}

$t0 = $dt->getTimestamp();

$t1 = strtotime('-5 minutes');

$t2 = strtotime('+5 minutes');

if ($t0 < $t1 || $t0 > $t2) {

    //echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY4']) ;

    //exit;

}

if (!password_verify($username . '-' . LLWS_PASSWORD . '-' . $rand . '-' . $timestamp, $password)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY5']);

    exit;

}

if (empty($data)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS1']);

    exit;

}

$data = base64_decode($data);

if (empty($data)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS2']);

    exit;

}

try {

    $rsa = new rsa();

    $rsa->setKeys(LLWS_RSA_N, LLWS_RSA_D, LLWS_RSA_E);

    $data = $rsa->decrypt($data);

} catch (Throwable $e) {

    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS3']);

    exit;

}

$data = (array) json_decode($data);

if (empty($data)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS4']);

    exit;

}

$email      = trim(isset($data['email']) ? filter_var($data['email'], FILTER_SANITIZE_EMAIL) : '');

$first_name = trim(isset($data['first_name']) ? filter_var($data['first_name'], FILTER_SANITIZE_STRING) : '');

$last_name  = trim(isset($data['last_name']) ? filter_var($data['last_name'], FILTER_SANITIZE_STRING) : '');

if (!filter_var($email, FILTER_VALIDATE_EMAIL) || empty($first_name) || empty($last_name)) {

    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS5']);

    exit;

}

$user = ll_get_user_by_email($email);

if ($user) {

    $new_user = false;

} else {

    $new_user = true;

    $username = ll_get_username_available($first_name, $last_name);

    $user = ll_create_user($username, $email, $first_name, $last_name);

    if ($user) {

        $filename   = trim(isset($data['image_filename']) ? filter_var($data['image_filename'], FILTER_SANITIZE_EMAIL) : '');

        $content    = trim(isset($data['image_content']) ? filter_var($data['image_content'], FILTER_SANITIZE_STRING) : '');

        if ($filename && $content) {

            $tempfile = __DIR__ . DIRECTORY_SEPARATOR . $filename;

            try {

                file_put_contents($filename, base64_decode($content));

                if (file_exists($tempfile)) {

                    $usericonid = process_new_icon(context_user::instance($user->id, MUST_EXIST), 'user', 'icon', 0, $tempfile);

                    if ($usericonid) {

                        $DB->set_field('user', 'picture', $usericonid, array('id' => $user->id));

                    }

                }

            } catch (\Throwable $e) {

            } finally {

                if (file_exists($tempfile)) {

                    unlink($tempfile);

                }

            }

        }

    }

}

if (!$user) {

    echo json_encode(['success' => false, 'data' => 'ERROR_MOODLE1']);

    exit;

}

if ($new_user) {

    $role = $DB->get_record('role', array('archetype' => 'student'));

    $enrolmethod = 'manual';

    $courses = get_courses();

    foreach ($courses as $course) {

        if ($course->categoy_id == LLWS_CATEGORY_ID) {

            $context = context_course::instance($course->id);

            if (!is_enrolled($context, $user)) {

                $enrol = enrol_get_plugin($enrolmethod);

                if ($enrol === null) {

                    return false;

                }

                $instances = enrol_get_instances($course->id, true);

                $manualinstance = null;

                foreach ($instances as $instance) {

                    if ($instance->name == $enrolmethod) {

                        $manualinstance = $instance;

                        break;

                    }

                }

                if ($manualinstance !== null) {

                    $instanceid = $enrol->add_default_instance($course);

                    if ($instanceid === null) {

                        $instanceid = $enrol->add_instance($course);

                    }

                    $instance = $DB->get_record('enrol', array('id' => $instanceid));

                    if ($instance) {

                        $enrol->enrol_user($instance, $user->id, $role->id);

                    }

                }

            }

        }

    }

}

$user = get_complete_user_data('id', $user->id);

if (!isloggedin()) {

    complete_user_login($user);

}

header('Location: ' . $CFG->wwwroot . '/my');

exit;