-
Notifications
You must be signed in to change notification settings - Fork 0
/
fetch-data.php
74 lines (61 loc) · 2.56 KB
/
fetch-data.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
<?php
use ENMLibrary\datatypes\GradesData;
use ENMLibrary\datatypes\PhrasesData;
use ENMLibrary\GradeFileDataHelper;
use ENMLibrary\LoggingHandler;
use ENMLibrary\LoginHandler;
use ENMLibrary\RequestResponse;
include("includes/imports.php");
if(!isset($_POST["csrf_token"])){
die(RequestResponse::ErrorResponse(RequestResponse::ERROR_MISSING_ARGUMENTS)->getResponse());
}
//try opening database
$loginHandler = new LoginHandler();
$loginHandler->loginWithSession();
if(!$loginHandler->isLoggedIn() || $loginHandler->isAdmin()){
http_response_code(403);
die();
}
if(!$loginHandler->checkCSRFToken($_POST["csrf_token"])){
LoggingHandler::getLogger()->warning("access with wrong CSRF token", [LoggingHandler::LOCATION => "fetch-data"]);
die(RequestResponse::ErrorResponse(RequestResponse::ERROR_CSRF_TOKEN)->getResponse());
}
try {
if(!isset($_POST["tables"])){
die(RequestResponse::ErrorResponse(RequestResponse::ERROR_MISSING_ARGUMENTS, $loginHandler->getCSRFToken())->getResponse());
}
//database is now accessible
try{
$data = json_decode($_POST["tables"]);
} catch(Exception $e) {
die(RequestResponse::ErrorResponse(RequestResponse::ERROR_WRONG_ARGUMENTS, $loginHandler->getCSRFToken())->getResponse());
}
$fileHelper = new GradeFileDataHelper($loginHandler->getGradeFile());
$result = [];
foreach($data as $table) {
if($table == "Grades"){
$gradesData = new GradesData($loginHandler->getGradeFile());
$result[$table] = $gradesData->getGradesArray();
} else if($table == "Phrases"){
if(getConstant("SHOW_CLASS_TEACHER_TAB", false)){
$phrasesData = new PhrasesData($loginHandler->getGradeFile());
$result[$table] = $phrasesData->getJSON();
}
} else {
if($table == "ClassTeacherTable" && !getConstant("SHOW_CLASS_TEACHER_TAB", false)){
continue;
} else if($table == "ExamsTable" && !getConstant("SHOW_EXAMS_TAB", false)){
continue;
}
$result[$table] = $fileHelper->getDataObject($table)->getJSON();
}
}
$response = RequestResponse::SuccessfulResponse($loginHandler->getCSRFToken());
$response->addData("data", $result);
echo $response->getResponse();
$loginHandler->getGradeFile()->close();
} catch (Exception $e) {
$errorId = LoggingHandler::logTrackableException($e);
die(RequestResponse::ErrorResponse(RequestResponse::ERROR_UNKNOWN, $loginHandler->getCSRFToken(), $e, $errorId)->getResponse());
}
?>