index.php

<?php
ini_set('display_startup_errors', 1);
ini_set('display_errors', 1);
error_reporting(-1);

include_once 'config.php' ;

function prepare($db, $query, $maxtries = 10, $currenttry = 0)
{
	if($stmt = $db->prepare($query)){
		return $stmt;
	} else if($maxtries > $currenttry){
		quit("Database appears to be locked constantly...");
	} else {
		//Wait 100ms
		usleep(1000*100);
		return prepare($db, $query, $maxtries, $currenttry+1);
	}
}

function execute($stmt, $msg)
{
	if(($res = $stmt->execute()) === FALSE){
		quit("Error in query: $msg");
	}
	return $res;
}

# This is needed to run the scripts as an AJAX request from javascript
if(isset($_SERVER['HTTP_ORIGIN'])){
	$http_origin = $_SERVER['HTTP_ORIGIN'];
	if(is_allowed_origin($http_origin))
		header("Access-Control-Allow-Origin: $http_origin");
}

$db = open_db();

function quit($msg){
	global $db;
	echo $msg . "\n";
	if(!is_null($db)){
		$db->close();
	}
	http_response_code(400);
	exit;
}

# Lookup or just a redirect to cloogle.org
if($_SERVER['REQUEST_METHOD'] === 'GET'){
	$url = 'https://cloogle.org';
	$prefix = "";
	if(isset($_GET['key']) && isset($_GET['type'])){
		if($_GET['type'] === 'paste'){
			//No one should have slugs bigger than 128
			$safe_key = preg_replace(SLUG_SYMBOLS, "", substr($_GET['key'], 0, 128));
			header('Content-Type: text/plain');
			header('Content-Disposition: inline; filename="' . $safe_key . '.txt"');
			$fp = './' . PASTES . '/' . $safe_key . '/index.txt';
			if(file_exists($fp)){
				readfile($fp);
			} else {
				echo "Unknown paste";
				http_response_code(404);
			}
			exit;
		} else {
			if($_GET['type'] === 'regular'){
				$dbname = "regular";
				$iscloogle = 0;
			} else if($_GET['type'] === 'cloogle'){
				$dbname = "cloogle";
				$iscloogle = 1;
				$prefix = "https://cloogle.org/";
			} else {
				quit("Incorrect type");
			}
			$stmt = prepare($db, "SELECT rowid, url FROM $dbname WHERE rowid=:id");
			$stmt->bindValue(':id', intval(base64_decode($_GET['key'])), SQLITE3_INTEGER);
			$res = execute($stmt, "Select");
			if($arr = $res->fetchArray()){
				$urlid = intval($arr[0]);
				$url = $arr[1];
				$stmt->close();
	
				//Insert into log table
				$stmt = prepare($db, "
					INSERT INTO log (id, date, iscloogle)
					VALUES (:id, DATETIME('now', 'localtime'), :iscloogle)");
				$stmt->bindValue(':id', $urlid, SQLITE3_INTEGER);
				$stmt->bindValue(':iscloogle', $iscloogle, SQLITE3_INTEGER);
				$res = execute($stmt, "Select");
				$stmt->close();
			} else {
				quit("No url with key={$_GET['key']}");
			}
		}
	}
	header("Location: $prefix$url");
# Api call to generate a new link
} else if ($_SERVER['REQUEST_METHOD'] === 'POST'){
	if(!isset($_POST['type'])){
		quit("No type set");
	}
	
	switch($_POST['type']){
	case 'regular':
		if(!isset($_POST['token']))
			quit("Authentication token required");
	case 'cloogle':
		if(!isset($_POST['url']))
			quit("url argument missing");
		break;
	default:
		quit("Incorrect type");
	}
	
	if($_POST['type'] === 'cloogle'){
		$dbname = "cloogle";
		$mod="e/";
	} else if($_POST['type'] === 'regular'){
		$dbname = "regular";
		if(preg_match('#^[a-zA-Z+.-]+:/?/?#i', $_POST['url']) === 0) {
			$_POST['url'] = "http://{$_POST['url']}";
		}
		$mod="";
	}
	$stmt = prepare($db, "INSERT INTO $dbname (url, date) VALUES (:url, DATETIME('now', 'localtime'))");
	$stmt->bindParam(':url', $_POST['url'], SQLITE3_TEXT);
	execute($stmt, "Insert");
	echo "https://" . WEBSITENAME . "/" . $mod . base64_encode($db->lastInsertRowID()) . "\n";
	$stmt->close();
} else {
	quit("Unsupported request method");
}
$db->close();