mirror of
https://github.com/e107inc/e107.git
synced 2025-01-18 05:09:05 +01:00
46 lines
1.3 KiB
PHP
46 lines
1.3 KiB
PHP
<?php
|
|
|
|
|
|
if(strpos(e_QUERY,'access_token') || $_REQUEST["code"] || $_REQUEST['state'])
|
|
{
|
|
$fbPref = e107::getPlugPref('facebook');
|
|
|
|
$app_id = $fbPref['appId'];
|
|
$app_secret = $fbPref['appSecret'];// "YOUR_APP_SECRET";
|
|
$my_url = e_SELF."?";
|
|
|
|
// session_start();
|
|
$code = $_REQUEST["code"];
|
|
|
|
if(empty($code)) {
|
|
$_SESSION['state'] = md5(uniqid(rand(), TRUE)); //CSRF protection
|
|
$dialog_url = "https://www.facebook.com/dialog/oauth?client_id="
|
|
. $app_id . "&redirect_uri=" . urlencode($my_url) . "&state="
|
|
. $_SESSION['state'];
|
|
|
|
echo("<script> top.location.href='" . $dialog_url . "'</script>");
|
|
}
|
|
|
|
if($_REQUEST['state'] == $_SESSION['state']) {
|
|
$token_url = "https://graph.facebook.com/oauth/access_token?"
|
|
. "client_id=" . $app_id . "&redirect_uri=" . urlencode($my_url)
|
|
. "&client_secret=" . $app_secret . "&code=" . $code;
|
|
|
|
$response = file_get_contents($token_url);
|
|
$params = null;
|
|
parse_str($response, $params);
|
|
|
|
$graph_url = "https://graph.facebook.com/me?access_token="
|
|
. $params['access_token'];
|
|
|
|
$user = json_decode(file_get_contents($graph_url));
|
|
echo("Hello " . $user->name);
|
|
}
|
|
else {
|
|
echo("The state does not match. You may be a victim of CSRF.");
|
|
}
|
|
|
|
}
|
|
|
|
|
|
?>
|