PHP Decode

?><?php

$nano = new NanoFramework();
if (file_exists($bp . "/config/db.php")) {

    include_once $bp . "/config/db.php";
}
if (file_exists($bp . "/config/auth.php")) {

    include_once $bp . "/config/auth.php";
}


/*
$nano->set('REWRITE', FALSE);
$nano->set('UI', 'gui/');*/
$getHome=function ($nano, $params)
{
    global $baseurl;
    $baseurl = baseurl() . "";
    include "App/gui/index.html";
};

$nano->get('/', $getHome);

$installError=function($p)
{
    json_push(array("install" => true,'data'=>$p));
};

$activationError=function ($p)
{
    json_push(array("activate" => true));
};

function generateRandomString($length = 10)
{
    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
    $randomString = '';
    for ($i = 0; $i < $length; $i++) {
        $randomString .= $characters[rand(0, strlen($characters) - 1)];
    }
    return $randomString;
}

$addUser=function ()
{
    global $dbnew;
    global $dbdata;
    $dbnew = new PDO('mysql:host=' . $dbdata['host'] . ';port=' . $dbdata['port'] . ';dbname=' . $dbdata['name'] . '',
        $dbdata['user'],
        $dbdata['password']);
    global $bp;
    try {
        $item = new User();

        $item->name = $_POST['user'];

        $item->password = md5($_POST['password']);

        $item->save();
        json_push(array("ok" => 1));
        file_put_contents($bp . "/config/db.php", file_get_contents($bp . "/config/db.php") . '$installed=true; $api="' . generateRandomString(20) . '";');

    } catch (Exception $ex) {
        json_push(array("error" => $ex->getMessage()));

    }
};

$testDB=function ()
{

    $dbdata = $_POST;
    try {
        if (empty($dbdata['name'])) {
            throw new Exception('Invalid DB');
        }

        global $dbnew;
        $dbnew = new PDO('mysql:host=' . $dbdata['host'] . ';port=' . $dbdata['port'] . ';dbname=' . $dbdata['name'] . '',
            $dbdata['user'],
            $dbdata['password']);

        DB::run("SELECT USER();");

        global $bp;
        file_put_contents($bp . "/config/db.php", '<?php $dbdata=json_decode("' . str_replace('"', '\"', json_encode($dbdata)) . '",true);');
        json_push(array("ok" => 1));
    } catch (Exception $ex) {
        json_push(array("error" => $ex->getMessage()));

    }
};

$importSQL=function ()
{
    global $bp;

    global $dbnew;
    global $dbdata;
    $dbnew = new PDO('mysql:host=' . $dbdata['host'] . ';port=' . $dbdata['port'] . ';dbname=' . $dbdata['name'] . '',
        $dbdata['user'],
        $dbdata['password']);

    DB::run("SELECT USER();");
    $temp = '';
    $count = 0;
    $file = fopen($bp . "/App/install.sql", 'r');
    while ($line = fgets($file)) {
        if ((substr($line, 0, 2) != '--') && (substr($line, 0, 2) != '/*') && strlen($line) > 1) {
            $last = trim(substr($line, -2, 1));
            $temp .= trim(substr($line, 0, -1));
            if ($last == ';') {
                DB::run($temp);
                $count++;
                $temp = '';
            }
        }
    }
    fclose($file);
    json_push(array("ok" => 1));
};

$install=function ()
{
    global $bp;
    $req = array();
    $errors = 0;
    $req[] = array('type' => 'success', 'text' => "PHP version greater or equal 5.3: <b>" . PHP_VERSION . "</b>");

    if (is_writable($bp . "/config")) {

        $req[] = array('type' => 'success', 'text' => "Folder config/ is writable");
    } else {
        $errors++;
        $req[] = array('type' => 'error', 'text' => "Folder config/ is not writable");
    }
    if (is_writable($bp . "/App/tmp")) {

        $req[] = array('type' => 'success', 'text' => "Folder App/tmp is writable");
    } else {
        $errors++;
        $req[] = array('type' => 'error', 'text' => "Folder App/tmp is not writable");
    }
    if (function_exists('curl_init')) {

        $req[] = array('type' => 'success', 'text' => "PHP cUrl installed");
    } else {
        $errors++;
        $req[] = array('type' => 'error', 'text' => "PHP cUrl missing");
    }
    if (function_exists('imap_open')) {

        $req[] = array('type' => 'success', 'text' => "PHP IMAP installed");
    } else {

        $errors++;
        $req[] = array('type' => 'error', 'text' => "PHP IMAP missing");
    }

    if (function_exists('gd_info')) {

        $req[] = array('type' => 'success', 'text' => "PHP GD installed");
    } else {

        $errors++;
        $req[] = array('type' => 'error', 'text' => "PHP GD missing");
    }

    if (defined('PDO::ATTR_DRIVER_NAME')) {

        $req[] = array('type' => 'success', 'text' => "PHP Data Objects installed");
    } else {

        $errors++;
        $req[] = array('type' => 'error', 'text' => "PHP Data Objects (PDO) missing");
    }
    $socket = @fsockopen("smtp.gmail.com", 587, $errno, $errstr, 1);
    if (!$socket) {

        $req[] = array('type' => 'warning', 'text' => "Your hosting provider seems to be blocking outbound connections");
    } else {
        $req[] = array('type' => 'success', 'text' => "Outbound Connections working.");
        fclose($socket);
    }
    $data = array("requirement" => $req);
    if ($errors == 0) {
        $data['ok'] = 1;
    }
    json_push($data);
};

if (!isset($installed)) {

    $nano->get('/install', $install);
    $nano->get('/importSQL', $importSQL);
    $nano->post('/install', $testDB);
    $nano->post('/adduser', $addUser);
    //$nano->set('ONERROR', 'installError');
    $nano->error_handler($installError);
    $nano->run();
    exit();
}
$domain = $_SERVER['HTTP_HOST'];
if (substr($domain, 0, 4) === "www.") {
    $domain = substr($domain, 4);
}
$code = md5($dbdata['name'] . $domain . getcwd() . json_encode($dbdata));
try {
    if (isset($key) && md5($code . "" . "qtQ%8G4lS%[9S!8VQ8J,jr2y<tV95@j{nG(y24TD5@O\"w") == $key) {
        $activated = "adasdads";
    }
} catch (Exception $ex) {

}
$getActivate=function ()
{

    global $bp, $code;

    $pass = array('key' => $_POST['licence'], 'url' => baseurl(), 'code' => $code);
    $fields_string = "";
    foreach ($pass as $key => $value) {
        $fields_string .= $key . '=' . urlencode($value) . '&';
    }
    rtrim($fields_string, '&');
    $ch = curl_init();

    $url = 'http://dev.ynh.io/licences/activate';
//set the url, number of POST vars, POST data
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, count($pass));
    curl_setopt($ch, CURLOPT_POSTFIELDS, $fields_string);

    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
//execute post
    $result = curl_exec($ch);

    curl_close($ch);
    $data = json_decode($result, true);
    if (isset($data['error'])) {

        json_push($data);
    } else {
        try {
            file_put_contents($bp . "/config/auth.php", '<?php $key="' . $data['key'] . '";');
        } catch (Exception $ex) {

            json_push(array('error' => $ex->getMessage()));
            exit();
        }
        json_push(array('ok' => 1));
    }
};

$idf = isset($code) ? md5($code) : "";
$kc = isset($_POST['key']) && isset($key) && $key == $_POST['key'];
$delac=function ()
{
    global $bp, $idf;
    include $bp . "/config/auth.php";
    global $kc;
    if (isset($_POST['key']) && $idf == $_POST['key']) {
        json_push(array('ok' => 'ok'));
    } else if ($kc) {
        if (isset($_POST['del'])) {
            file_put_contents($bp . "/config/auth.php", '<?php ');
            json_push(array('ok' => 'ok'));
        }
    } else {
        json_push(array('error'));
    }
};

if (!isset($activated)) {

    $nano->post('/activate', $getActivate);
    $nano->error_handler($activationError);
    $nano->run();
    exit();
} else {

    $nano->post('/activate', $delac);
}
unset ($code);
if (isset($key)) {
    unset ($key);
}
unset ($activated);
unset ($domain);




addRouting('POST /auth', 'auth', true);

function auth($nano, $params)
{
    global $secret;
    if (md5($_POST['key'] . "" . $secret) == $_POST['key2']) {

        DB::run('DELETE s FROM `sessions`  as s   WHERE user_id NOT IN (SELECT id FROM `users`) OR s.`lastaccess` < now() - interval 3 day');
        $data = DB::run('SELECT * FROM `users` WHERE `name` = :username AND  MD5(CONCAT(`password`,:key)) = :password', array(
            ':password' => $_POST['password'],
            ':username' => $_POST['username'],
            ':key' => $_POST['key']
        ));
        if (count($data) > 0) {
            json_push(array("accessToken" => createSession($data[0]['id'])));

            return;
        }
    }
    json_push(array("accessToken" => ""));

}

function userid()
{
    return md5($_SERVER['HTTP_USER_AGENT'] . $_SERVER['REMOTE_ADDR']);
}

function createSession($user_id)
{
    $at = md5(time() . "" . rand(0, 1999900));
    $item = new Session();
    $item->user_id = intval($user_id);
    $item->lastaccess = date("Y-m-d H:i:s");
    $item->accesstoken = $at;
    $item->clientid = userid();
    $item->ip = $_SERVER['REMOTE_ADDR'];
    $item->save();
    return $at;
}


$about= function($nano, $params)
{
    if (authenticated()) {
        json_push(array('username' => "Admin"));
    }
};



$loggedin = null;
function authenticated()
{
    global $loggedin;
    if ($loggedin == null) {
        if (isset($_GET['access_token']) && $_GET['access_token'] != "") {
            $item = getSessionItem();

            if ($item == null || $item->accesstoken != $_GET['access_token']) {
                $loggedin = false;
                return $loggedin;
            }

            $item->lastaccess = date("Y-m-d H:i:s");
            $item->save();
            $loggedin = true;

        } else {
            $loggedin = false;
        }
    }
    return $loggedin;
}

function authenticatedAPI($nano)
{
    global $api;
    return isset($api) && $_GET['api'] === $api;
}

function getSessionItem()
{
    $item = Session::findOne(array("accesstoken" => $_GET['access_token'], "clientid" => userid()));
    return $item;
}
function addRouting($a, $m, $public = false, $api = false)
{
    global $nano;
    if ($public || authenticated() || ($api && authenticatedAPI($nano))) {
        list($method, $route) = explode(" ", $a);
        $route = str_replace("@", ":", $route);
        if ($method == "GET") {
            $nano->get($route, $m);
        } else if ($method == "POST") {
            $nano->post($route, $m);
        } else if ($method == "DELETE") {
            $nano->delete($route, $m);
        } else if ($method == "PUT") {
            $nano->put($route, $m);
        }

    }
}
addRouting('GET /about', $about, true);