WooYun.org

class controller_api_article extends api_controller_abstract
{
				private $article = NULL;
				public function __construct( $app )
				{
								$FN_-2147483646( $app );
								$this->article = loader::model( "admin/article" );
				}
				public function get( )
				{
								$contentid = value( $_GET, "contentid", 0 );
								if ( !$contentid )
								{
												$result = array( "state" => FALSE, "error" => "内容编号错误" );
								}
								else
								{
												$data = $this->article->get( $contentid, "*", "show" );
												if ( $data )
												{
																foreach ( array( "status_old", "unpublished", "unpublishedby", "modified", "modifiedby", "checked", "checkedby", "locked", "lockedby", "noted", "notedby", "note", "workflow_step", "workflow_roleid", "placeid", "saveremoteimage" ) as $field )
																{
																				unset( $data[$field] );
																}
												}
												$result = array(
																"state" => TRUE,
																"data" => $data
												);
								}
								echo json_encode( $result );
				}

public function __construct( $app )
				{
								$FN_-2147483646( $app );
								$this->config = config::get( "config" );
								$this->setting = setting::get( $app->app );
								$this->system = setting::get( "system" );
								$this->json = factory::json( );
								$this->cache = factory::cache( );
								$this->auth_key = $this->get_key( );
								if ( !$this->auth_key )
								{
												$this->showmessage( "KEY获取失败" );
								}
								$this->auth_sign = $this->get_sign( );
								if ( !$this->auth_sign )
								{
												$this->showmessage( "SIGN签名获取失败" );
								}
								$this->auth_secret = $this->get_secret( $this->auth_key );

protected function get_key( )
				{
								$key = isset( $_GET['key'] ) ? $_GET['key'] : "";
								if ( !$key )
								{
												$key = isset( $_POST['key'] ) ? $_POST['key'] : "";
								}
								return $key;
				}

protected function get_secret( $key )
				{
								$userinfo = $this->get_userinfo( $key );
								return $userinfo['auth_secret'];
				}

protected function get_userinfo( $key )
				{
								$_key = "api_userinfo_".$key;
								$userinfo = $this->cache->get( $_key );
								if ( !$userinfo )
								{
												$openauth = loader::model( "admin/openauth", "system" );
												$userinfo = $openauth->get( "auth_key='{$key}' AND disabled=0" );
												if ( !$userinfo )
												{
																return FALSE;
												}
												$user_model = loader::model( "admin/admin", "system" );
												$a = $user_model->login( $userinfo['userid'] );
												if ( !$a )
												{
																return FALSE;
												}
												$userinfo = array_merge( $userinfo, $a );
												$user_model = loader::model( "member", "member" );
												$a = $user_model->get( $userinfo['userid'], "groupid" );
												if ( !$a )
												{
																return FALSE;
												}
												$userinfo = array_merge( $userinfo, $a );
												$this->cache->set( $_key, $userinfo );
								}
								return $userinfo;

public function get( $where = NULL, $fields = "*", $order = NULL )
				{
								return $this->select( $where, $fields, $order, NULL, NULL, array( ), FALSE );
				}