<?php
// header('Access-Control-Allow-Origin: http://www.baidu.com'); //设置http://www.baidu.com允许跨域访问
// header('Access-Control-Allow-Headers: X-Requested-With,X_Requested_With'); //设置允许的跨域header
// date_default_timezone_set("Asia/chongqing");
// error_reporting(E_ERROR);
// header("Content-Type: text/html; charset=utf-8");
require_once '../../../init.php';
error_reporting(0);

// 与 AdminController 一致的登录态验证
function ueditor_check_auth()
{
    if (!session('sid')) {// 启动会话
        return false;
    }
    $sid = encrypt_string(session_id() . session('id'));
    if ($sid != session('sid')) {
        session_destroy();
        return false;
    }
    return true;
}

if (!ueditor_check_auth()) {
    echo json_encode(array(
        'state' => '权限不足，请重新登录'
    ));
    exit;
}

$CONFIG = json_decode(preg_replace("/\/\*[\s\S]+?\*\//", "", file_get_contents("config.json")), true);
$action = $_GET['action'];

switch ($action) {
    case 'config':
        $result = json_encode($CONFIG);
        break;
    
    /* 上传图片 */
    case 'uploadimage':
    /* 上传涂鸦 */
    case 'uploadscrawl':
    /* 上传视频 */
    case 'uploadvideo':
    /* 上传文件 */
    case 'uploadfile':
        $result = include ("action_upload.php");
        break;
    
    /* 列出图片 */
    case 'listimage':
        $result = include ("action_list.php");
        break;
    /* 列出文件 */
    case 'listfile':
        $result = include ("action_list.php");
        break;
    
    /* 抓取远程文件 */
    case 'catchimage':
        $result = include ("action_crawler.php");
        break;
    
    default:
        $result = json_encode(array(
            'state' => '请求地址出错'
        ));
        break;
}

/* 输出结果 */
if (isset($_GET["callback"])) {
    if (preg_match("/^[\w_]+$/", $_GET["callback"])) {
        echo htmlspecialchars($_GET["callback"]) . '(' . $result . ')';
    } else {
        echo json_encode(array(
            'state' => 'callback参数不合法'
        ));
    }
} else {
    echo $result;
}