Changed from GET to POST on all parameter passing. Fixed a nasty bug in previous...

[hermes] / api / alias.php

diff --git a/api/alias.php b/api/alias.php
index 5bbdbf2c4a9e93b696b1f77c20284d5efb2d73fc..6a5981e9915c7d3ac028c2c092fe29086b375665 100644 (file)
--- a/api/alias.php
+++ b/api/alias.php
@@ -34,9 +34,9 @@ token_auth();
                        $dest_username = "";
                        $dest_domain   = "";
                        $e164_only = false;
-                       if ( array_key_exists( 'destination', $_GET) )
+                       if ( array_key_exists( 'destination', $_POST) )
                        {
-                               $tmp = split_sipaddress($_GET['destination']);
+                               $tmp = split_sipaddress($_POST['destination']);
                                if ( !$tmp )
                                {
                                        print json_encode ( array( 'response' => 'failed', 'cause' => 'invalid', 'detail' => 'Invalid SIP address') );
@@ -44,9 +44,9 @@ token_auth();
                                }
                                list ( $dest_username, $dest_domain ) = $tmp;
 
-                               if ( array_key_exists( 'e164', $_GET ) )
+                               if ( array_key_exists( 'e164', $_POST ) )
                                {
-                                       if ( strtolower($_GET['e164']) == "true" ) $e164_only = true;
+                                       if ( strtolower($_POST['e164']) == "true" ) $e164_only = true;
                                        $list = get_e164_alias( $dest_username, $dest_domain );
                                }
                                else if ( $dest_username && $dest_domain )
@@ -54,9 +54,9 @@ token_auth();
                                        $list = get_aliases( $dest_username, $dest_domain );
                                }
                        }
-                       else if ( array_key_exists( 'alias', $_GET) )
+                       else if ( array_key_exists( 'alias', $_POST) )
                        {
-                               $tmp = split_sipaddress($_GET['alias']);
+                               $tmp = split_sipaddress($_POST['alias']);
                                if ( !$tmp )
                                {
                                        print json_encode ( array( 'response' => 'failed', 'cause' => 'invalid', 'detail' => 'Invalid SIP address') );
@@ -73,19 +73,19 @@ token_auth();
                        print json_encode ( array( 'response' => 'ok', 'aliases' => $list ) );
                        break;
                case "/add":
-                       if ( array_key_exists( 'destination', $_GET) 
-                               && ( ( array_key_exists( 'alias_username', $_GET) && array_key_exists( 'alias_domain', $_GET ) ) || array_key_exists('alias', $_GET) ) )
+                       if ( array_key_exists( 'destination', $_POST) 
+                               && ( ( array_key_exists( 'alias_username', $_POST) && array_key_exists( 'alias_domain', $_POST ) ) || array_key_exists('alias', $_POST) ) )
                        {
                                $alias_username = "";
                                $alias_domain = "";
-                               if ( array_key_exists('alias_username', $_GET) )
+                               if ( array_key_exists('alias_username', $_POST) )
                                {
-                                       $alias_username = $_GET['alias_username'];
-                                       $alias_domain = $_GET['alias_domain'];
+                                       $alias_username = $_POST['alias_username'];
+                                       $alias_domain = $_POST['alias_domain'];
                                }
                                else
                                {
-                                       $alias = split_sipaddress($_GET['alias']);
+                                       $alias = split_sipaddress($_POST['alias']);
                                        if ( !$alias )
                                        {
                                                print json_encode ( array( 'response' => 'failed', 'cause' => 'invalid', 'detail' => 'Invalid SIP address') );
@@ -94,7 +94,7 @@ token_auth();
                                        list ( $alias_username, $alias_domain ) = $alias;
                                }
 
-                               if ( !verify_sipadress($_GET['destination']) ) 
+                               if ( !verify_sipadress($_POST['destination']) ) 
                                {
                                        // TODO: Provide a better response..
                                        print json_encode ( array( 'response' => 'invalid', 'cause' => 'destination' ) );
@@ -114,7 +114,7 @@ token_auth();
                                        break;
                                }
 
-                               list ( $dest_username, $dest_domain ) = split_sipaddress( $_GET['destination']);
+                               list ( $dest_username, $dest_domain ) = split_sipaddress( $_POST['destination']);
 
                                if ( (!$dest_username)||(!$dest_domain))
                                {
@@ -166,18 +166,18 @@ token_auth();
                        }       
                        break;
                case "/remove":
-                       if ( ( array_key_exists( 'alias_username', $_GET) && array_key_exists( 'alias_domain', $_GET ) ) || array_key_exists('alias', $_GET) )
+                       if ( ( array_key_exists( 'alias_username', $_POST) && array_key_exists( 'alias_domain', $_POST ) ) || array_key_exists('alias', $_POST) )
                        {
                                $alias_username = "";
                                $alias_domain = "";
-                               if ( array_key_exists('alias_username', $_GET) )
+                               if ( array_key_exists('alias_username', $_POST) )
                                {
-                                       $alias_username = $_GET['alias_username'];
-                                       $alias_domain = $_GET['alias_domain'];
+                                       $alias_username = $_POST['alias_username'];
+                                       $alias_domain = $_POST['alias_domain'];
                                }
                                else
                                {
-                                       $alias = split_sipaddress($_GET['alias']);
+                                       $alias = split_sipaddress($_POST['alias']);
                                        if ( !$alias )
                                        {
                                                print json_encode ( array( 'response' => 'failed', 'cause' => 'invalid', 'detail' => 'Invalid SIP address') );