. /** * Base action for OAuth API endpoints * * @category API * @package GNUsocial * @author Zach Copley * @copyright 2010 StatusNet, Inc. * @license https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later */ defined('GNUSOCIAL') || die(); require_once INSTALLDIR . '/lib/api/apiaction.php'; /** * Base action for API OAuth enpoints. Clean up the * request. Some other common functions. * * @category API * @package GNUsocial * @author Zach Copley * @license https://www.gnu.org/licenses/agpl.html GNU AGPL v3 or later */ class ApiOAuthAction extends ApiAction { /** * Is this a read-only action? * * @return boolean false */ public function isReadOnly($args) { return false; } protected function prepare(array $args=array()) { self::cleanRequest(); return parent::prepare($args); } /* * Clean up the request so the OAuth library doesn't find * any extra parameters or anything else it's not expecting. * I'm looking at you, p parameter. */ public static function cleanRequest() { // strip out the p param added in index.php unset($_GET['p']); unset($_POST['p']); unset($_REQUEST['p']); $queryArray = explode('&', $_SERVER['QUERY_STRING']); for ($i = 0; $i < sizeof($queryArray); $i++) { if (substr($queryArray[$i], 0, 2) == 'p=') { unset($queryArray[$i]); } } $_SERVER['QUERY_STRING'] = implode('&', $queryArray); } }