api/config.php - master - maaxutka/KMD

api/config.php

110 строк4 KB

maaxutka

Create: config.php, index.php, init_db.php, schema.sqlite, balanc.png, bez.webp, chist.jpg, cmena.webp, cyw.jpg, far.jpg, free-icon-cleaning-spray-16282206.png, free-icon-paper-wrap-3639385.png, free-icon-service-15897442.png, free-icon-tire-12847473.png, mag.jpg, ozonir.png, pen.webp, plen.webp, ppf.jpg, service-1.png, service-2.png, service-3.png, service-4.png, sid.jpg, win.webp, index.html, service-1.html, service-2.html, service-3.html, service-4.html, docker-compose.yml, Dockerfile, nginx.conf, .gitignore, profiles_settings.xml, Project_Default.xml, KMD.iml, misc.xml, modules.xml, workspace.xml

14 июн 2026, 13:31

Верифицирован

14 июн 2026, 13:3171a0993

<?php
// Устанавливаем кодировку UTF-8
mb_internal_encoding('UTF-8');
ini_set('default_charset', 'UTF-8');

// Используем папку /tmp/sqlite с полными правами
define('DB_PATH', '/tmp/sqlite/kmd_detailing.db');
define('JWT_SECRET', 'kmd-detailing-secret-key-2026');

// Проверяем, запущен ли скрипт через веб-сервер или CLI
if (php_sapi_name() !== 'cli') {
    header('Content-Type: application/json; charset=utf-8');
    header('Access-Control-Allow-Origin: *');
    header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
    header('Access-Control-Allow-Headers: Content-Type, Authorization');

    if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
        http_response_code(200);
        exit();
    }
}

class Database {
    private static $instance = null;
    private $pdo;

    private function __construct() {
        try {
            $dbDir = dirname(DB_PATH);
            if (!is_dir($dbDir)) {
                mkdir($dbDir, 0777, true);
            }

            // Отключаем проверку внешних ключей временно
            $this->pdo = new PDO('sqlite:' . DB_PATH);
            $this->pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
            $this->pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
            $this->pdo->exec('PRAGMA foreign_keys = OFF');
            $this->pdo->exec('PRAGMA journal_mode = WAL');
        } catch(PDOException $e) {
            if (php_sapi_name() !== 'cli') {
                sendError('Database connection failed: ' . $e->getMessage(), 500);
            } else {
                throw $e;
            }
        }
    }

    public static function getInstance() {
        if (self::$instance === null) {
            self::$instance = new Database();
        }
        return self::$instance;
    }

    public function getConnection() {
        return $this->pdo;
    }
}

// Функции для работы с ответами
function sendResponse($data, $status = 200) {
    http_response_code($status);
    echo json_encode($data, JSON_UNESCAPED_UNICODE);
    exit();
}

function sendError($message, $status = 400) {
    http_response_code($status);
    echo json_encode(['error' => $message], JSON_UNESCAPED_UNICODE);
    exit();
}

function generateToken($userId, $username, $role) {
    $header = base64_encode(json_encode(['alg' => 'HS256', 'typ' => 'JWT']));
    $payload = base64_encode(json_encode([
        'user_id' => $userId,
        'username' => $username,
        'role' => $role,
        'exp' => time() + 86400
    ]));
    $signature = hash_hmac('sha256', "$header.$payload", JWT_SECRET, true);
    $signature = base64_encode($signature);
    return "$header.$payload.$signature";
}

function verifyToken($token) {
    $parts = explode('.', $token);
    if (count($parts) !== 3) return null;

    list($header, $payload, $signature) = $parts;
    $expectedSignature = base64_encode(hash_hmac('sha256', "$header.$payload", JWT_SECRET, true));

    if ($signature !== $expectedSignature) return null;

    $payloadData = json_decode(base64_decode($payload), true);
    if ($payloadData['exp'] < time()) return null;

    return $payloadData;
}

function getAuthUser() {
    $headers = function_exists('getallheaders') ? getallheaders() : [];
    $authHeader = $headers['Authorization'] ?? $_SERVER['HTTP_AUTHORIZATION'] ?? '';

    if (preg_match('/Bearer\s(\S+)/', $authHeader, $matches)) {
        return verifyToken($matches[1]);
    }
    return null;
}