php-frs/index.php

<?php

require_once __DIR__ . '/vendor' . '/autoload.php';

$m = new Mustache_Engine(array(
    'loader' => new Mustache_Loader_FilesystemLoader(dirname(__FILE__) . '/templates'),
    'partials_loader' => new Mustache_Loader_FilesystemLoader(dirname(__FILE__) . '/templates/partials'),
    'charset' => 'utf-8',
    'logger' => new Mustache_Logger_StreamLogger('php://stderr'),
));

$data = array();

$client = new Google_Client();
$client->setAuthConfigFile('client_secret.json');
$client->addScope(Google_Service_Oauth2::USERINFO_EMAIL);

session_start();

if (isset($_GET['action']) && $_GET['action'] == 'logout') {
    // Delete session and redirect to self
    #$client->setAccessToken($_SESSION['access_token']);
    #$client->revokeToken();   // removed granted permissions from account
    $_SESSION = array();
    if (ini_get('session.use_cookies')) {
        $params = session_get_cookie_params();
        setcookie(session_name(), '', time()-42000, $params['path'], $params['domain'], $params['secure'], $params['httponly']);
    }
    session_destroy();
    header('Location: ' . $client->getRedirectUri());
    exit(0);
}

if (isset($_GET['code']) && $_GET['code']) {
    // Validate OAuth2 result, set access token and redirect to self
    $client->authenticate($_GET['code']);
    $_SESSION['access_token'] = $client->getAccessToken();
    header('Location: ' . $client->getRedirectUri());
    exit(0);
}

$tpl_done = false;

// route pages that work with and without login
if (isset($_GET['action'])) {
    switch ($_GET['action']) {
        case 'faq':
            $tpl = $m->loadTemplate('faq_html');
            $tpl_done = true;
            break;
        case 'send':
            // Store input in session
            $form_type = $_POST['form_type'];
            $skey = 'form_' . $form_type;
            $_SESSION[$skey] = $_POST;
            break;
    }
}

if (!$tpl_done && isset($_SESSION['access_token']) && $_SESSION['access_token']) {
    // Authenticated
    $created = $_SESSION['access_token']['created'];
    $expires = $_SESSION['access_token']['expires_in'];
    $expire_stamp = intval($created) + intval($expires);
    $data['session_created'] = $created;
    $data['session_expires'] = $expires;
    $data['session_time_left'] = ($expire_stamp) - time();

    $client->setAccessToken($_SESSION['access_token']);
    if ($client->isAccessTokenExpired()) {
        // TODO: Redirect to $client->createAuthUrl(); to reauthenticate
        echo "Token expired! <a href=\"" . $client->createAuthUrl() . "\">Request new one</a>.";
        #session_destroy();
        die();
    }

    $oauth = new Google_Service_Oauth2($client);
    $userdata = $oauth->userinfo->get();

    $data['user'] = array(
        'name_first' => $userdata->givenName,
        'name_last'  => $userdata->familyName,
        'name'       => $userdata->name,
        'picture'    => $userdata->picture,
        'email'      => $userdata->email,
        'gender'     => $userdata->gender,
    );

    $data['date_today'] = date('Y-m-d');


    // Check $userdata->verifiedEmail and deny if not verified.
    if (!$userdata->verifiedEmail) {
        $tpl = $m->loadTemplate('notverified_html');
        $tpl_done = true;
    } else {
        switch ($_GET['action']) {
            case 'send':
                echo "This would send the mail...";
                $mtpl = $m->loadTemplate('mail_' . $form_type);
                $action = $form_type;
                $data['action'] = $action;
                $data['action_uc'] = ucwords($action);
                require 'prep_mail.php';
                $mail_html = $mtpl->render($data);
                list($headers, $mailbody) = preg_split('/\r?\n\r?\n/', $mail_html, 2);
                echo '<hr/>'.$headers.'<hr/>'.$mailbody;
                $header_lines = preg_split('/\r?\n/', $headers);
                $header_filtered = '';
                $recipient = $data['user']['name_first'] . ' ' . $data['user']['name_last'] . ' <' . $data['user']['email'] . '>';
                $subject = '[FRS] ' . $data['action_uc'] . ' Reservation';
                foreach ($header_lines as $header_line) {
                    list($key, $value) = preg_split('/: /', $header_line, 2);
                    if (in_array(strtolower($key), array('subject', 'to'))) {
                        // Skip Subject and To headers as they're added by PHP
                        if (strtolower($key) == 'subject') {
                            $subject = $value;
                        }
                        continue;
                    }
                    $header_filtered .= $header_line . "\r\n";
                }
                $mail_sent = mail($recipient, $subject, $mailbody, $header_filtered);
                if ($mail_sent) {
                    echo 'Mail sent successfully.';
                } else {
                    echo 'Mail sending failed!!';
                }
                break;
            case 'event':
                $tpl = $m->loadTemplate('event_html');
                $tpl_done = true;
                break;
            case 'hotel':
                $tpl = $m->loadTemplate('hotel_html');
                $tpl_done = true;
                $action = 'hotel';
                require 'prep_form.php';
                break;
            case 'restaurant':
                $tpl = $m->loadTemplate('restaurant_html');
                $tpl_done = true;
                $action = 'restaurant';
                require 'prep_form.php';
                break;
            case 'rentalcar':
                $tpl = $m->loadTemplate('rentalcar_html');
                $tpl_done = true;
                $action = 'rentalcar';
                require 'prep_form.php';
                break;
              default:
                if (!$tpl_done) {
                    $tpl = $m->loadTemplate('loggedin_html');
                    $tpl_done = true;
                }
                break;
        }
    }
} elseif (!$tpl_done) {
    // Not authenticated
    $data['auth_url'] = $client->createAuthUrl();
    $tpl = $m->loadTemplate('index_html');
}

$data['action'] = $_GET['action'];
echo $tpl->render($data);