From 0db1f88b7f8aa64e325ba87cd0b42039b3d574a1 Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Fri, 20 Nov 2015 22:05:44 -0500
Subject: [PATCH] More work on security

---
 api/businesslogic/security_retriever.php |  8 ++++++++
 api/{admin => }/category/index.php       |  2 +-
 api/dao/security_dao.php                 | 17 +++++++++++++++++
 3 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 api/businesslogic/security_retriever.php
 rename api/{admin => }/category/index.php (91%)
 create mode 100644 api/dao/security_dao.php

diff --git a/api/businesslogic/security_retriever.php b/api/businesslogic/security_retriever.php
new file mode 100644
index 00000000..ef2fbfe9
--- /dev/null
+++ b/api/businesslogic/security_retriever.php
@@ -0,0 +1,8 @@
+<?php
+require_once(API_PATH . 'dao/security_dao.php');
+
+function get_user_for_token($token, $hesk_settings) {
+    $hash = hash('sha512', $token);
+
+    return get_user_for_token_hash($hash, $hesk_settings);
+}
\ No newline at end of file
diff --git a/api/admin/category/index.php b/api/category/index.php
similarity index 91%
rename from api/admin/category/index.php
rename to api/category/index.php
index 291e3854..d759c659 100644
--- a/api/admin/category/index.php
+++ b/api/category/index.php
@@ -1,7 +1,7 @@
 <?php
 define('IN_SCRIPT', 1);
 define('HESK_PATH', '../../../');
-define('API_PATH', '../../');
+define('API_PATH', '../');
 require_once(HESK_PATH . 'hesk_settings.inc.php');
 require_once(HESK_PATH . 'inc/common.inc.php');
 require_once(API_PATH . 'core/output.php');
diff --git a/api/dao/security_dao.php b/api/dao/security_dao.php
new file mode 100644
index 00000000..2d80b3be
--- /dev/null
+++ b/api/dao/security_dao.php
@@ -0,0 +1,17 @@
+<?php
+
+function get_user_for_token_hash($hash, $hesk_settings) {
+    $user_id_sql = "SELECT `user_id` FROM `" . hesk_dbEscape($hesk_settings['db_pfix']) . "user_api_tokens`
+        WHERE `token` = '" . hesk_dbEscape($hash) . "'";
+
+    $user_id_rs = hesk_dbQuery($user_id_sql);
+    if (hesk_dbNumRows($user_id_rs) == 0) {
+        return http_response_code(422);
+    }
+    $user_id = hesk_dbFetchAssoc($user_id_rs);
+
+    $user_sql = "SELECT * FROM `" . hesk_dbEscape($hesk_settings['db_pfix']) . "users` WHERE `id` = ".intval($user_id['user_id']);
+    $user_rs = hesk_dbQuery($user_sql);
+
+    return hesk_dbFetchAssoc($user_rs);
+}
\ No newline at end of file