auto-commit for f3b04df9-f563-4cb2-9a0a-69756e09f838

2026-06-30 17:51:00 -05:00 · 2026-05-06 04:03:04 +00:00
parent deaad7b5d3
commit a02bdba1b7
38 changed files with 3127 additions and 0 deletions
@@ -0,0 +1,52 @@
+<?php
+/**
+ * Database Connection Class
+ * Uses PDO for secure MySQL connections
+ */
+
+class Database {
+    private static $instance = null;
+    private $conn;
+    
+    private function __construct() {
+        try {
+            $dsn = "mysql:host=" . DB_HOST . ";dbname=" . DB_NAME . ";charset=" . DB_CHARSET;
+            $options = [
+                PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
+                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+                PDO::ATTR_EMULATE_PREPARES => false,
+            ];
+            
+            $this->conn = new PDO($dsn, DB_USER, DB_PASS, $options);
+        } catch (PDOException $e) {
+            $this->handleError($e->getMessage());
+        }
+    }
+    
+    public static function getInstance() {
+        if (self::$instance === null) {
+            self::$instance = new self();
+        }
+        return self::$instance;
+    }
+    
+    public function getConnection() {
+        return $this->conn;
+    }
+    
+    private function handleError($message) {
+        if (DEBUG_MODE) {
+            die(json_encode(['error' => 'Database Error: ' . $message]));
+        } else {
+            die(json_encode(['error' => 'Database connection failed']));
+        }
+    }
+    
+    // Prevent cloning
+    private function __clone() {}
+    
+    // Prevent unserialization
+    public function __wakeup() {
+        throw new Exception("Cannot unserialize singleton");
+    }
+}
@@ -0,0 +1,87 @@
+<?php
+/**
+ * Helper Functions
+ */
+
+/**
+ * Set CORS headers
+ */
+function setCorsHeaders() {
+    $origin = isset($_SERVER['HTTP_ORIGIN']) ? $_SERVER['HTTP_ORIGIN'] : '';
+    
+    if ($origin && (ALLOWED_ORIGINS === '*' || strpos(ALLOWED_ORIGINS, $origin) !== false)) {
+        header("Access-Control-Allow-Origin: $origin");
+    } else {
+        header("Access-Control-Allow-Origin: " . ALLOWED_ORIGINS);
+    }
+    
+    header("Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS");
+    header("Access-Control-Allow-Headers: Content-Type, Authorization");
+    header("Access-Control-Allow-Credentials: true");
+    
+    // Handle preflight requests
+    if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+        http_response_code(200);
+        exit;
+    }
+}
+
+/**
+ * Send JSON response
+ */
+function jsonResponse($data, $statusCode = 200) {
+    http_response_code($statusCode);
+    header('Content-Type: application/json');
+    echo json_encode($data);
+    exit;
+}
+
+/**
+ * Get JSON input
+ */
+function getJsonInput() {
+    $input = file_get_contents('php://input');
+    return json_decode($input, true);
+}
+
+/**
+ * Validate email
+ */
+function isValidEmail($email) {
+    return filter_var($email, FILTER_VALIDATE_EMAIL) !== false;
+}
+
+/**
+ * Generate UUID v4
+ */
+function generateUuid() {
+    return sprintf('%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff),
+        mt_rand(0, 0xffff),
+        mt_rand(0, 0x0fff) | 0x4000,
+        mt_rand(0, 0x3fff) | 0x8000,
+        mt_rand(0, 0xffff), mt_rand(0, 0xffff), mt_rand(0, 0xffff)
+    );
+}
+
+/**
+ * Sanitize string
+ */
+function sanitizeString($string) {
+    return htmlspecialchars(strip_tags(trim($string)), ENT_QUOTES, 'UTF-8');
+}
+
+/**
+ * Validate required fields
+ */
+function validateRequired($data, $requiredFields) {
+    $errors = [];
+    
+    foreach ($requiredFields as $field) {
+        if (!isset($data[$field]) || empty(trim($data[$field]))) {
+            $errors[] = "$field is required";
+        }
+    }
+    
+    return $errors;
+}
@@ -0,0 +1,117 @@
+<?php
+/**
+ * JWT Authentication Functions
+ * Simple JWT implementation for PHP
+ */
+
+class JWT {
+    
+    /**
+     * Create a JWT token
+     */
+    public static function encode($payload, $secret) {
+        $header = json_encode(['typ' => 'JWT', 'alg' => 'HS256']);
+        $payload = json_encode($payload);
+        
+        $base64UrlHeader = self::base64UrlEncode($header);
+        $base64UrlPayload = self::base64UrlEncode($payload);
+        
+        $signature = hash_hmac('sha256', $base64UrlHeader . "." . $base64UrlPayload, $secret, true);
+        $base64UrlSignature = self::base64UrlEncode($signature);
+        
+        return $base64UrlHeader . "." . $base64UrlPayload . "." . $base64UrlSignature;
+    }
+    
+    /**
+     * Decode and verify a JWT token
+     */
+    public static function decode($jwt, $secret) {
+        $parts = explode('.', $jwt);
+        
+        if (count($parts) !== 3) {
+            return false;
+        }
+        
+        list($base64UrlHeader, $base64UrlPayload, $base64UrlSignature) = $parts;
+        
+        $signature = self::base64UrlDecode($base64UrlSignature);
+        $expectedSignature = hash_hmac('sha256', $base64UrlHeader . "." . $base64UrlPayload, $secret, true);
+        
+        if (!hash_equals($signature, $expectedSignature)) {
+            return false;
+        }
+        
+        $payload = json_decode(self::base64UrlDecode($base64UrlPayload), true);
+        
+        // Check expiration
+        if (isset($payload['exp']) && $payload['exp'] < time()) {
+            return false;
+        }
+        
+        return $payload;
+    }
+    
+    /**
+     * Create authentication token
+     */
+    public static function createToken($email) {
+        $payload = [
+            'sub' => $email,
+            'iat' => time(),
+            'exp' => time() + JWT_EXPIRY
+        ];
+        
+        return self::encode($payload, JWT_SECRET_KEY);
+    }
+    
+    /**
+     * Verify token from Authorization header
+     */
+    public static function verifyToken() {
+        $headers = getallheaders();
+        
+        if (!isset($headers['Authorization'])) {
+            return false;
+        }
+        
+        $authHeader = $headers['Authorization'];
+        
+        if (!preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) {
+            return false;
+        }
+        
+        $token = $matches[1];
+        $payload = self::decode($token, JWT_SECRET_KEY);
+        
+        return $payload;
+    }
+    
+    /**
+     * Base64 URL encode
+     */
+    private static function base64UrlEncode($data) {
+        return str_replace(['+', '/', '='], ['-', '_', ''], base64_encode($data));
+    }
+    
+    /**
+     * Base64 URL decode
+     */
+    private static function base64UrlDecode($data) {
+        return base64_decode(str_replace(['-', '_'], ['+', '/'], $data));
+    }
+}
+
+/**
+ * Require authentication middleware
+ */
+function requireAuth() {
+    $payload = JWT::verifyToken();
+    
+    if (!$payload) {
+        http_response_code(401);
+        echo json_encode(['error' => 'Unauthorized']);
+        exit;
+    }
+    
+    return $payload;
+}