api.php

<?php
// Require the needed classes.
require_once "class/AuthToken.php";
require_once "class/Database.php";
require_once "class/Route.php";
require_once "class/Server.php";
require_once "class/User.php";
require_once "inc/config.php";
require_once "inc/helper.php";

// Use this namespace.
use Steampixel\Route;

// Login route.
Route::add("/login", function () {

    // Globalize some important variables. Failure to do so will output errors like the 500 error.
    global $AUTH;
    global $USER;
    global $BCRYPT_OPTIONS;

    // Assign request post and response.
    $request = $_POST;
    $response = "";

    // Check if the url has the "action" parameter.
    if (isParameterSet($request, "action")) {

        // Get the action's action type.
        $action = getParameter($request, "action");

        switch ($action) {
            case "login":

                // If login, find username & password.
                $username = isParameterSet($request, "username") ? getParameter($request, "username") : "";
                $password = isParameterSet($request, "password") ? getParameter($request, "password") : "";
                $rememberme = isParameterSet($request, "rememberme") ? getParameter($request, "rememberme") : "";
                $rememberme = $rememberme == "on" ? true : false;

                // If username and password fields aren't empty.
                if (!empty($username) && !empty($password)) {
                    // Username and password are not empty, continue...

                    // Fetch the account from database.
                    $USER->setUserInfo($username, $password, null);
                    $AUTH->username = $username;

                    // If user exists login.
                    if ($USER->userExists()) {

                        // Set the login session.
                        $USER->setuserTokenSession();
                        $USER->updateUserLoginSession();

                        // If user should be remembered.
                        if ($rememberme) {

                            // Create or update auth token to skip login
                            // in future login attempts.
                            if ($AUTH->authTokenUserIdExists()) {
                                // Generate new token for this user.
                                $AUTH->updateauthToken();
                            } else {
                                $AUTH->createauthToken();
                            }

                            // Set the auth token in a session.
                            $AUTH->setauthTokenSession();
                        }

                        // Then at last add the login complete response!
                        $response = json_encode(array("message" => "You have been logged in."));
                        gotoPage("game");
                    } // If not...
                    else $response = json_encode(array("error" => "No matching account was found."));

                } // If they are...
                else $response = json_encode(array("error" => "No username and password supplied."));
                break;
        }
    } else $response = json_encode(array("error" => "Wrong login parameter."));

    // Set the header depending on whether the response is empty or not.
    if (!empty($response)) header("Content-Type: application/json");
    else header("Content-Type: text/html");

    // Show the response.
    echo $response;

}, ["get", "post"]);

// Registration route.
Route::add("/register", function () {

    // Globalize some important variables. Failure to do so will output errors like the 500 error.
    global $AUTH;
    global $USER;
    global $BCRYPT_OPTIONS;

    // Assign request post and response.
    $request = $_POST;
    $response = "";

    // Check if the url has the "action" parameter.
    if (isParameterSet($request, "action")) {

        // Get the action's action type.
        $action = getParameter($request, "action");

        // If login, find username & password.
        $username = isParameterSet($request, "username") ? getParameter($request, "username") : "";
        $password = isParameterSet($request, "password") ? getParameter($request, "password") : "";
        $rememberme = isParameterSet($request, "rememberme") ? getParameter($request, "rememberme") : "";
        $rememberme = $rememberme == "on" ? true : false;

        switch ($action) {
            case "register":

                // If register, find username & password.
                $username = isParameterSet($request, "username") ? getParameter($request, "username") : "";
                $password = isParameterSet($request, "password") ? getParameter($request, "password") : "";

                if (!empty($username) && !empty($password)) {
                    // Username and password are not empty, continue...

                    // Fetch the account from database and assign it as the found.
                    $USER->setUserInfo($username, $password, null);
                    $AUTH->username = $username;

                    // If user doesn't exists.
                    if (!$USER->userExists()) {

                        // Create the user.
                        $USER->createUser();

                        // Set the login session. Makes us be seen as logged in.
                        $USER->setuserTokenSession();

                        // If user should be remembered.
                        if ($rememberme) {

                            // Create or update auth token to skip login
                            // in future login attempts.
                            if ($AUTH->authTokenUserIdExists()) {
                                // Generate new token for this user.
                                $AUTH->updateauthToken();
                            } else {
                                $AUTH->createauthToken();
                            }

                            // Set the auth token in a session.
                            $AUTH->setauthTokenSession();
                        }


                        // Then add the login success response.
                        $response = json_encode(array("message" => "Account for: $username is now created."));

                    } // If it does, tell the user that the username is already taken.
                    else $response = json_encode(array("error" => "Username: $username already exists. Try another username."));
                } // If the fields are empty, tell the user.
                else
                    $response = json_encode(array("error" => "No username and password supplied."));
                break;
        }
    } else $response = json_encode(array("error" => "Wrong registration parameter."));

    // Set the header depending on whether the response is empty or not.
    if (!empty($response)) header("Content-Type: application/json");
    else header("Content-Type: text/html");

    // Show the response.
    echo $response;

}, ["get", "post"]);

// Play game route.
Route::add("/game", function () {
    global $LOGIN_COOKIE_NAME;
    $response = "";

    if (!isCookieSet($LOGIN_COOKIE_NAME))
        $response = json_encode(array("error" => "You are not logged in."));
    //else require_once "game.php";
    else gotoPage("../game.php");

    // Set the header depending on whether the response is empty or not.
    if (!empty($response)) header("Content-Type: application/json");
    else header("Content-Type: text/html");

    // Output the response.
    echo $response;

});

// Log out route.
Route::add("/logout", function () {
    global $LOGIN_COOKIE_NAME;
    $response = "";

    if (isCookieSet($LOGIN_COOKIE_NAME)) {
        destroyCookie($LOGIN_COOKIE_NAME);
        $response = json_encode(array("message" => "You have been logged out."));
    } else $response = json_encode(array("error" => "You are not logged in."));

    // Set the header depending on whether the response is empty or not.
    if (!empty($response)) header("Content-Type: application/json");
    else header("Content-Type: text/html");

    // Output the response.
    echo $response;
});

// Server info route.
Route::add("/serverinfo", function () {
    global $SERVER_NAME;
    global $LOGIN_IP;
    global $GAMEFILES_LINK;
    global $UNITY_FILE;

    $response = "";

    $server = new Server();
    $server->setServerInfo($SERVER_NAME, $LOGIN_IP, $GAMEFILES_LINK, $UNITY_FILE);
    $response = $server->toJson();

    // Set the header depending on whether the response is empty or not.
    if (!empty($response)) header("Content-Type: application/json");
    else header("Content-Type: text/html");

    // Output the server info as response.
    echo $response;

});


// Use the path as base path for urls. This must lead to the php file.
Route::run(APIPATH);