From 00125d1060cb8c61e8adb021d2358e9083585042 Mon Sep 17 00:00:00 2001
From: jfefe <jfefe@aternatik.fr>
Date: Mon, 15 Jun 2015 14:11:43 +0200
Subject: [PATCH] Add option to set production mode to API

---
 htdocs/api/admin/api.php       | 79 +++++++++++++---------------------
 htdocs/api/class/api.class.php |  4 +-
 htdocs/langs/en_US/admin.lang  |  1 +
 htdocs/public/api/index.php    |  3 +-
 4 files changed, 34 insertions(+), 53 deletions(-)

diff --git a/htdocs/api/admin/api.php b/htdocs/api/admin/api.php
index 0e1673715d2..740d3eb7e8d 100644
--- a/htdocs/api/admin/api.php
+++ b/htdocs/api/admin/api.php
@@ -3,7 +3,7 @@
  * Copyright (C) 2005-2010	Laurent Destailleur		<eldy@users.sourceforge.org>
  * Copyright (C) 2011		Juanjo Menent			<jmenent@2byte.es>
  * Copyright (C) 2012		Regis Houssin			<regis.houssin@capnetworks.com>
- * Copyright (C) 2015		Regis Houssin			<jfefe@aternatik.fr>
+ * Copyright (C) 2015		Jean-François Ferry     <jfefe@aternatik.fr>
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License as published by
@@ -33,27 +33,22 @@ $langs->load("admin");
 if (! $user->admin)
 	accessforbidden();
 
-$actionsave=GETPOST("save");
+$action=GETPOST("action");
 
-// Sauvegardes parametres
-if ($actionsave)
+//Activate ProfId
+if ($action == 'setproductionmode')
 {
-    $i=0;
+	$status = GETPOST('status','alpha');
 
-    $db->begin();
-
-    $i+=dolibarr_set_const($db,'API_KEY',trim(GETPOST("API_KEY")),'chaine',0,'',$conf->entity);
-
-    if ($i >= 1)
-    {
-        $db->commit();
-        setEventMessage($langs->trans("SetupSaved"));
-    }
-    else
-    {
-        $db->rollback();
-        setEventMessage($langs->trans("Error"), 'errors');
-    }
+	if (dolibarr_set_const($db, 'API_PRODUCTION_MODE', $status, 'chaine', 0, '', $conf->entity) > 0)
+	{
+		header("Location: ".$_SERVER["PHP_SELF"]);
+		exit;
+	}
+	else
+	{
+		dol_print_error($db);
+	}
 }
 
 
@@ -69,7 +64,7 @@ print_fiche_titre($langs->trans("ApiSetup"),$linkback,'title_setup');
 print $langs->trans("ApiDesc")."<br>\n";
 print "<br>\n";
 
-print '<form name="apisetupform" action="'.$_SERVER["PHP_SELF"].'" method="post">';
+//print '<form name="apisetupform" action="'.$_SERVER["PHP_SELF"].'" method="post">';
 print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
 print '<table class="noborder" width="100%">';
 
@@ -80,22 +75,24 @@ print "<td>&nbsp;</td>";
 print "</tr>";
 
 print '<tr class="impair">';
-print '<td class="fieldrequired">'.$langs->trans("KeyForApiAccess").'</td>';
-print '<td><input type="text" class="flat" id="API_KEY" name="API_KEY" value="'. (GETPOST('API_KEY')?GETPOST('API_KEY'):(! empty($conf->global->API_KEY)?$conf->global->API_KEY:'')) . '" size="40">';
-if (! empty($conf->use_javascript_ajax))
-	print '&nbsp;'.img_picto($langs->trans('Generate'), 'refresh', 'id="generate_token" class="linkobject"');
-print '</td>';
+print '<td>'.$langs->trans("ApiProductionMode").'</td>';
+$production_mode=(empty($conf->global->API_PRODUCTION_MODE)?false:true);
+if ($production_mode)
+{
+    print '<td align="center"><a href="'.$_SERVER['PHP_SELF'].'?action=setproductionmode&value='.($i+1).'&status=0">';
+    print img_picto($langs->trans("Activated"),'switch_on');
+    print '</a></td>';
+}
+else
+{
+    print '<td align="center"><a href="'.$_SERVER['PHP_SELF'].'?action=setproductionmode&value='.($i+1).'&status=1">';
+    print img_picto($langs->trans("Disabled"),'switch_off');
+    print '</a></td>';
+}
 print '<td>&nbsp;</td>';
 print '</tr>';
 
 print '</table>';
-
-print '<br><div class="center">';
-print '<input type="submit" name="save" class="button" value="'.$langs->trans("Save").'">';
-print '</div>';
-
-print '</form>';
-
 print '<br><br>';
 
 // API endpoint
@@ -111,27 +108,9 @@ $url=DOL_MAIN_URL_ROOT.'/public/api/explorer/index.html';
 print img_picto('','object_globe.png').' <a href="'.$url.'" target="_blank">'.$url."</a><br>\n";
 
 print '<br>';
-
-
 print '<br>';
 print $langs->trans("OnlyActiveElementsAreExposed", DOL_URL_ROOT.'/admin/modules.php');
 
-if (! empty($conf->use_javascript_ajax))
-{
-	print "\n".'<script type="text/javascript">';
-	print '$(document).ready(function () {
-            $("#generate_token").click(function() {
-            	$.get( "'.DOL_URL_ROOT.'/core/ajax/security.php", {
-            		action: \'getrandompassword\',
-            		generic: true
-				},
-				function(token) {
-					$("#API_KEY").val(token);
-				});
-            });
-    });';
-	print '</script>';
-}
 
 
 llxFooter();
diff --git a/htdocs/api/class/api.class.php b/htdocs/api/class/api.class.php
index fc892b8d412..33bbe56e0a1 100644
--- a/htdocs/api/class/api.class.php
+++ b/htdocs/api/class/api.class.php
@@ -43,8 +43,10 @@ class DolibarrApi
      * @param	DoliDb	$db		Database handler
      */
     function __construct($db) {
+        global $conf;
         $this->db = $db;
-        $this->r = new Restler();
+        $production_mode = ( empty($conf->global->API_PRODUCTION_MODE) ? false : true );
+        $this->r = new Restler($production_mode);
     }
 
     /**
diff --git a/htdocs/langs/en_US/admin.lang b/htdocs/langs/en_US/admin.lang
index 163267ff52f..2ae1e67ca87 100755
--- a/htdocs/langs/en_US/admin.lang
+++ b/htdocs/langs/en_US/admin.lang
@@ -1564,6 +1564,7 @@ EndPointIs=SOAP clients must send their requests to the Dolibarr endpoint availa
 ApiSetup=API module setup
 ApiDesc=By enabling this module, Dolibarr become a REST server to provide miscellaneous web services.
 KeyForApiAccess=Key to use API (parameter "api_key")
+ApiProductionMode=Enable production mode
 ApiEndPointIs=You can access to the API at url
 ApiExporerIs=You can explore the API at url
 OnlyActiveElementsAreExposed=Only elements from enabled modules are exposed
diff --git a/htdocs/public/api/index.php b/htdocs/public/api/index.php
index 73be0c76b78..f78424ce6a9 100644
--- a/htdocs/public/api/index.php
+++ b/htdocs/public/api/index.php
@@ -28,8 +28,7 @@
 if (! defined("NOLOGIN"))        define("NOLOGIN",'1');
 
 $res=0;
-if (! $res && file_exists("../../main.inc.php")) $res=@include '../../main.inc.php';
-if (! $res && file_exists("../../../dolibarr/htdocs/main.inc.php")) $res=@include '../../../dolibarr/htdocs/main.inc.php';     // For custom directory
+if (! $res && file_exists("../../main.inc.php")) $res=include '../../main.inc.php';
 if (! $res) die("Include of main fails");
 
 require_once DOL_DOCUMENT_ROOT.'/includes/restler/vendor/autoload.php';