phpbb / phpbb-website

src/AppBundle/Controller/VigLinkController.php

<?php

namespace AppBundle\Controller;
use Symfony\Bundle\FrameworkBundle\Controller\Controller;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\HttpFoundation\Request;

class VigLinkController extends Controller
{
	public function keyAction(Request $request)
	{
		$siteId = $request->query->get('siteid');
		$uuid = $request->query->get('uuid');
		$apiKey = $request->query->get('key');
		$siteDomain = $request->query->get('domain');

		if (!isset($siteId, $uuid, $apiKey, $siteDomain))
		{
			throw new \Symfony\Component\HttpKernel\Exception\NotFoundHttpException();
		}

		$subId = md5($siteId . $uuid);
		$expiration = strtotime("+1 year");
		$key = $this->container->hasParameter('viglink_api_key') ? $this->getParameter('viglink_api_key') : $apiKey;

		if (!$this->container->hasParameter('viglink_secret_key')) {
			throw new \Exception('Viglink is not enabled');
		}

		$secretKey = $this->getParameter('viglink_secret_key');

		$url = ("https://www.viglink.com/users/convertAccount?key=" . $key . "&subId=" . $subId);
		$signature = hash_hmac('md5', ($url . "-" . $expiration), $secretKey);

		$queryParams = http_build_query(
			['key' => $key,
			'subId' => $subId,
			'expiration' => $expiration,
			'signature' => $signature,]
		);

		$url = ('https://www.viglink.com/users/convertAccount?' . $queryParams);

		$response = new Response($url);

		return $response;
	}

	public function enabledAction(Request $request)

The parameter $request is not used and could be removed.

	{
		$response = new Response('1');
		// Set to '0' to disable viglink

		return $response;
	}
}