Internal API stuff

frontend/api.local.php

@@ -0,0 +1,75 @@
+<?php
+/*
+ * CVM is more free software. It is licensed under the WTFPL, which
+ * allows you to do pretty much anything with it, without having to
+ * ask permission. Commercial use is allowed, and no attribution is
+ * required. We do politely request that you share your modifications
+ * to benefit other developers, but you are under no enforced
+ * obligation to do so :)
+ * 
+ * Please read the accompanying LICENSE document for the full WTFPL
+ * licensing text.
+ */
+
+$_CVM = true;
+require("includes/include.base.php");
+
+$return_object = array();
+$return_success = false;
+
+if(isset($_GET['key']) && $_GET['key'] == $settings['local_api_key'])
+{
+	switch($_GET['action'])
+	{
+		case "verify_user":
+			$sUsername = mysql_real_escape_string($_GET['username']);
+			if($result = mysql_query_cached("SELECT * FROM users WHERE `Username` = '{$sUsername}'"))
+			{
+				$sUser = new User($result);
+				
+				if($sUser->VerifyPassword($_GET['password']) === true)
+				{
+					$return_object = true;
+					$return_success = true;
+				}
+				else
+				{
+					$return_object = false;
+					$return_success = true;
+				}
+			}
+			break;
+			
+		case "list_vps":
+			if(!empty($_GET['userid']))
+			{
+				$sUserId = (is_numeric($_GET['userid'])) ? $_GET['userid'] : 0;
+				$query = "SELECT * FROM containers WHERE `UserId` = '{$sUserId}'";
+			}
+			else
+			{
+				$query = "SELECT * FROM containers";
+			}
+			
+			if($result = mysql_query_cached($query))
+			{
+				// TODO: output results
+			}
+			break;
+			
+		case "vps_info":
+			// TODO: return VPS info
+			break;
+	}
+}
+else
+{
+	$return_object = "Authentication failure.";
+}
+
+echo(json_encode(array(
+	'status'	=> $return_success,
+	'data'		=> $return_object
+)));
+
+?>

frontend/includes/.gitignore

@@ -0,0 +1 @@
+include.config.api.php

frontend/includes/include.config.api.sample.php

@@ -0,0 +1,14 @@
+<?php
+/*
+ * CVM is more free software. It is licensed under the WTFPL, which
+ * allows you to do pretty much anything with it, without having to
+ * ask permission. Commercial use is allowed, and no attribution is
+ * required. We do politely request that you share your modifications
+ * to benefit other developers, but you are under no enforced
+ * obligation to do so :)
+ * 
+ * Please read the accompanying LICENSE document for the full WTFPL
+ * licensing text.
+ */
+
+$settings['local_api_key'] = "something";

frontend/includes/include.config.php

@@ -14,5 +14,7 @@
 $settings['master_privkey'] = "/etc/cvm/key";
 $settings['master_pubkey'] = "/etc/cvm/key.pub";
 $settings['salt'] = "kAU0qM";
- 
+
+require("include.config.api.php");
+
 ?>