tuttogare/public_html/api/rest/service.php

<?
  session_name('APISESSID');
  $elaborazioneApi = true;
  $error = ["errorHeader" => 403,"errorCode"=>403,"errorDescription"=>"Forbidden"];
  $configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";   include_once($configPath);
  $headers = getallheaders();
  if (!empty($headers['X-Tuttogare-Api-Key'])) {
    include_once __DIR__."/../apiManager.class.php";
    $api = new apiManager($headers['X-Tuttogare-Api-Key']); 
    if (!empty($api->init)) {
      $request = explode("?",$_SERVER['REQUEST_URI']);
      $method = explode("/",$request[0]);
      $api->method = end($method);
      $api->endPoint = "/api/v1/service.php";
      $api->debug = false;
      // Query rimane per retrocompatibilità
      $query = "";
      $body = $get = $post = [];
      if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        $post = $_POST;
        $body = json_decode(file_get_contents("php://input"),true);
        if (!empty($_POST)) {
          $query = $_POST;
        } else {
          $query = json_decode(file_get_contents("php://input"),true);
        }
      }
      if (!empty($request[1])) {
        if(empty($query))
          parse_str($request[1],$query);
        parse_str($request[1], $get);
      }
      $api->query = $query;
      $api->get = $get;
      $api->post = $post;
      $api->body = $body;
      $error = "";
      $results = $api->handleRequest();
      if ($results === false || !empty($results["error"])) {
        $error = ["errorHeader" => $api->errorHeader,"errorCode"=>$api->errorCode,"errorDescription"=>$api->errorDescription,"transactionID"=>$api->codiceLog];
      } else {
        echo json_encode($results);
      }
    } else {
      $error = ["errorHeader" => 500,"errorCode"=>500,"errorDescription"=>"Errori nella sessione"];
    }
  }
  if (!empty($error)) { 
    header('HTTP/1.0 ' . $error["errorHeader"]);
    unset($error["errorHeader"]);
    echo json_encode($error);
    die(); 
  }
?>