OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	11/28/2024 11:03:35 AM	rwxrwxr-x
📄 api.php	1.35 KB	10/22/2024 07:13:21 AM	rw-r--r--
📄 db.php	355 bytes	10/22/2024 07:13:21 AM	rw-r--r--
📄 fetch_data.php	3.65 KB	10/23/2024 05:21:21 AM	rw-r--r--
📄 generate_token.php	1.34 KB	10/22/2024 07:13:22 AM	rw-r--r--
📄 proxy_fetch_data.php	932 bytes	10/22/2024 07:13:22 AM	rw-r--r--
📄 zfetch_data.php	1.89 KB	10/22/2024 07:13:22 AM	rw-r--r--

Editing: generate_token.php

<?php
include '../inc/validate.logged.php';
include 'db.php';

function generateToken($length = 64) {
    return bin2hex(random_bytes($length / 2));
}

$user_id = $gUserId;

if ($user_id) {
    $stmt = $mysqli->prepare("SELECT api_token, access_key FROM api_tokens WHERE user_id = ?");
    $stmt->bind_param("i", $user_id);
    $stmt->execute();
    $result = $stmt->get_result();

if ($result->num_rows == 0) {
        $api_token = generateToken();
        $access_key = generateToken(64);
        $stmt = $mysqli->prepare("INSERT INTO api_tokens (user_id, api_token, access_key) VALUES (?, ?, ?)");
        $stmt->bind_param("iss", $user_id, $api_token, $access_key);
        
        if ($stmt->execute()) {
            // Return the generated token and access key as JSON
            echo json_encode([
                'api_token' => $api_token,
                'access_key' => $access_key
            ]);
        } else {
            echo json_encode(['error' => "Error: " . $stmt->error]);
        }
    } else {
        $row = $result->fetch_assoc();
        // Return existing token and access key as JSON
        echo json_encode([
            'api_token' => $row['api_token'],
            'access_key' => $row['access_key']
        ]);
    }
} else {
    echo json_encode(['error' => "User ID is required."]);
}
?>