Archived
51 lines
1.3 KiB
PHP
51 lines
1.3 KiB
PHP
<?php
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . "/mysql.php";
|
|
|
|
|
|
header('Content-Type: application/json; charset=utf-8');
|
|
$data = (object) [
|
|
'status' => 000,
|
|
'message' => ""
|
|
];
|
|
|
|
if (!isset($_GET['id'])) {
|
|
$data->status = 403;
|
|
$data->message = "Missing parameters";
|
|
|
|
echo json_encode($data);
|
|
http_response_code(403);
|
|
exit();
|
|
}
|
|
|
|
if (!isset($_SESSION['siteusername'])) {
|
|
$data->status = 403;
|
|
$data->message = "You need to be logged in";
|
|
|
|
echo json_encode($data);
|
|
http_response_code(403);
|
|
exit();
|
|
}
|
|
|
|
$stmt = $db->prepare("SELECT * FROM servers WHERE id = :id");
|
|
$stmt->execute([':id' => $_GET['id']]);
|
|
$server = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
$stmt = $db->prepare("SELECT status FROM users WHERE username = :username");
|
|
$stmt->execute([':username' => $_SESSION['siteusername']]);
|
|
$user = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if (!$stmt->rowCount() && ($server['author'] != $_SESSION['siteusername']) && $server['hosting'] == 1 && $user['status'] != "admin") {
|
|
$data->status = 403;
|
|
$data->message = "You are not authorized to commit this action";
|
|
|
|
echo json_encode($data);
|
|
http_response_code(403);
|
|
exit();
|
|
}
|
|
|
|
$data->status = 200;
|
|
$data->message = nl2br($server['console']);
|
|
|
|
echo json_encode($data);
|
|
http_response_code(200);
|
|
exit(); |