Hướng dẫn php api script

Hướng dẫn php api script

#product.php


#utility.php


 abc\\okok
	//abc\okok (user) -> abc\okok (server) -> sql (abc\okok) -> xuat hien ky tu \ -> ky tu dac biet -> error query
	//abc\okok (user) -> abc\okok (server) -> convert -> abc\\okok -> sql (abc\\okok) -> chinh xac
	$str = str_replace('\\', '\\\\', $str);
	//abc'okok -> abc\'okok
	//abc'okok (user) -> abc'okok (server) -> sql (abc'okok) -> xuat hien ky tu \ -> ky tu dac biet -> error query
	//abc'okok (user) -> abc'okok (server) -> convert -> abc\'okok -> sql (abc\'okok) -> chinh xac
	$str = str_replace('\'', '\\\'', $str);

	return $str;
}

function authenToken() {
	if (isset($_SESSION['user'])) {
		return $_SESSION['user'];
	}

	$token = getCOOKIE('token');
	if (empty($token)) {
		return null;
	}

	$sql    = "select users.* from users, login_tokens where users.id = login_tokens.id_user and login_tokens.token = '$token'";
	$result = executeResult($sql);

	if ($result != null && count($result) > 0) {
		$_SESSION['user'] = $result[0];

		return $result[0];
	}

	return null;
}

function getPOST($key) {
	$value = '';
	if (isset($_POST[$key])) {
		$value = $_POST[$key];
	}
	return fixSqlInjection($value);
}

function getCOOKIE($key) {
	$value = '';
	if (isset($_COOKIE[$key])) {
		$value = $_COOKIE[$key];
	}
	return fixSqlInjection($value);
}

function getGET($key) {
	$value = '';
	if (isset($_GET[$key])) {
		$value = $_GET[$key];
	}
	return fixSqlInjection($value);
}

function md5Security($pwd) {
	return md5(md5($pwd).MD5_PRIVATE_KEY);
}

#dbhelper.php


 ko tra ve ket qua.
 */
function execute($sql) {
	//Mo ket noi toi database
	$conn = mysqli_connect(HOST, USERNAME, PASSWORD, DATABASE);
	mysqli_set_charset($conn, 'utf8');

	//Xu ly cau query
	mysqli_query($conn, $sql);

	//Dong ket noi database
	mysqli_close($conn);
}

/**
 * Su dung voi cau lenh query: select.
 */
function executeResult($sql, $isSingleRecord = false) {
	//Mo ket noi toi database
	$conn = mysqli_connect(HOST, USERNAME, PASSWORD, DATABASE);
	mysqli_set_charset($conn, 'utf8');

	// echo $sql;
	//Xu ly cau query
	$resultset = mysqli_query($conn, $sql);
	// var_dump($resultset);
	// die();
	if ($isSingleRecord) {
		$data = mysqli_fetch_array($resultset, 1);
	} else {
		$data = [];
		while (($row = mysqli_fetch_array($resultset, 1)) != null) {
			$data[] = $row;
		}
	}

	/**
	 * TH: param2 = 1
	 * $row = [
	 * 		'id' => 1,
	 * 		'title' => '1 - Android Tivi Sony 4K 55 inch KD-55X8000H',
	 * 		'thumbnail' => '12321',
	 * 		...
	 * ];
	 *
	 * TH: param2 = 2
	 * $row = [1, '1 - Android Tivi Sony 4K 55 inch KD-55X8000H', '12321', ...];
	 */

	//Dong ket noi database
	mysqli_close($conn);

	return $data;
}

#config.php


#authen.php


 1,
			"msg"    => "Logout success!!!"
		];
		echo json_encode($res);
		return;
	}

	// Xoa token khoi database
	$sql = "delete from login_tokens where token = '$token'";
	execute($sql);

	// Xoa token khoi cookie
	setcookie('token', '', time()-7*24*60*60, '/');

	$res = [
		"status" => 1,
		"msg"    => "Logout success!!!"
	];
	echo json_encode($res);

	session_destroy();
}

function doLogin() {
	$email    = getPOST('email');
	$password = getPOST('password');

	$password = md5Security($password);

	$sql  = "select * from users where email = '$email' and password = '$password'";
	$user = executeResult($sql, true);

	if ($user != null) {
		$email = $user['email'];
		$id    = $user['id'];

		$token = md5Security($email.time().$id);

		// setcookie('status', 'login', time()+7*24*60*60, '/');
		setcookie('token', $token, time()+7*24*60*60, '/');

		// save database
		$sql = "insert into login_tokens (id_user, token) values ('$id', '$token')";
		execute($sql);

		$res = [
			"status" => 1,
			"msg"    => "Login success!!!"
		];
	} else {
		$res = [
			"status" => -1,
			"msg"    => "Login failed!!!"
		];
	}
	echo json_encode($res);
}

function doRegister() {
	$username = getPOST('username');
	$fullname = getPOST('fullname');
	$email    = getPOST('email');
	$password = getPOST('password');
	$address  = getPOST('address');

	$sql    = "select * from users where username = '$username' or email = '$email'";
	$result = executeResult($sql);
	if ($result == null || count($result) == 0) {
		$password = md5Security($password);

		$sql = "insert into users(fullname, username, email, password, address) values ('$fullname', '$username', '$email', '$password', '$address')";
		execute($sql);

		$res = [
			"status" => 1,
			"msg"    => "Create new account success!!!"
		];
	} else {
		$res = [
			"status" => -1,
			"msg"    => "Email|Username existed!!!"
		];
	}
	echo json_encode($res);
}

function doUserList() {
	$user = authenToken();
	// var_dump($user);
	// die();
	if ($user == null) {
		$res = [
			"status"   => -1,
			"msg"      => "Not login!!!",
			"userList" => []
		];
		echo json_encode($res);
		return;
	}

	$sql    = "select * from users";
	$result = executeResult($sql);
	$res    = [
		"status"   => 1,
		"msg"      => "success!!!",
		"userList" => $result
	];
	echo json_encode($res);
}

#readme.txt


Xây dựng dự án sử dụng API
	- Backend: (PHP) -> logic nghiệp vụ
	- Client:
		- Mobile, PC Application
		- Frontend -> HTML/CSS/JS

========================================
Mini Project:

- Backend:
	API
		Authen:
			- login
			- register
			- userList
			- update/delete/add => Tự viết thêm => Bài tập
		Product:
			- productList
			- add/update/delete => Tự viết thêm => Bài tập
- Client: Web Client -> Goi API
	login page
	register page
	userList page
	productList page

Triển khai:

B1. Xậy dựng database.
- Tao Tables: users, products
- Fake du lieu

B2. Phân tịch API

BASE_URL: http://localhost/aptech/T2008A/lesson07/server/

Authen:
	API: login
		- URL: api/authen.php
		- Method: POST
		- Request: {
			"action": "login",
			"email": "",
			"password": "123456"
		}
		- Response: {
			"status": 1 (1: success, 2 failed),
			"msg": "Error ???"
		}
	API: login
		- URL: api/authen.php
		- Method: POST
		- Request: {
			"action": "logout"
		}
		- Response: {
			"status": 1 (1: success, 2 failed),
			"msg": "Error ???"
		}
	API: register
		- URL: api/authen.php
		- Method: POST
		- Request: {
			"action": "register",
			"fullname": "TRAN VAN DIEP",
			"username": "dieptv",
			"email": "",
			"password": "123456",
			"address": "Ha Noi"
		}
		- Response: {
			"status": 1 (1: success, 2 failed),
			"msg": "Error ???"
		}
	API: userList
		- URL: api/authen.php
		- Method: POST
		- Request: {
			"action": "list"
		}
		- Response: {
			"status": 1 (1: success, 2 failed),
			"msg": "Error ???",
			"userList": [
				{
					"id": "1",
					"fullname": "TRAN VAN DIEP",
					"username": "dieptv",
					"email": "",
					"address": "Ha Noi"
				}, {
					"id": "2",
					"fullname": "TRAN VAN DIEP",
					"username": "dieptv",
					"email": "",
					"address": "Ha Noi"
				}
			]
		}
Product:
	API: productList
		- URL: api/product.php
		- Method: POST
		- Request: {
			"action": "list"
		}
		- Response: {
			"status": 1 (1: success, 2 failed),
			"msg": "Error ???",
			"productList": [
				{
					"id": "1",
					"title": "Bai viet",
					"thumbnail": "URL",
					"updated_at": "2021-06-12 12:02"
				}, {
					"id": "2",
					"title": "Bai viet",
					"thumbnail": "URL",
					"updated_at": "2021-06-12 12:02"
				}
			]
		}

B3. Code Server Backend
- Xay dung 1 khung chuong trinh
- db
	- config.php
	- dbhelper.php
- utils
	- utility.php
- api
	- authen.php
	- product.php

#users.html





	Login Page
	
	

	
	

	
	

	
	

	


	

User List Manager (Logout)

No Full Name User Name Email Address

#register.html





	Register Page
	
	

	
	

	
	

	
	

	


	

Create New Account

I have a account

#login.html





	Login Page
	
	

	
	

	
	

	
	

	


	

Login

Create new account

#config.js


var BASE_URL = 'http://localhost/aptech/T2008A/lesson07/server/';

// Authen API
var API_AUTHEN = 'api/authen.php';

var AUTHEN_LOGIN = 'login';
var AUTHEN_REGISTER = 'register';
var AUTHEN_LOGOUT = 'logout';
var AUTHEN_USER_LIST = 'list';

// Product API