1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

<?PHP

/**
 *
 * PHP version 5
 *
 * Copyright 2011, Google Inc. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * @author     api.anash@gmail.com (Anash P. Oommen)
 * @author     api.davidtorres@gmail.com (David Torres)
 */

/**
 * A simple proxy method to forward an HTTP/HTTPS call to a server.
 */
function forwardCall() {
  // Allowed URLs to post, any other url sent to this proxy will return a
  // 500 error.
  $validDomains = array('https://adwords.google.com',
      'https://adwords-sandbox.google.com', 'https://www.google.com');

  $url = urldecode($_POST['url']);

  $valid = false;
  foreach ($validDomains as $validDomain) {
    if (strpos($url, $validDomain) === 0) {
      $valid = true;
    }
  }
  if (!$valid) {
    header("HTTP/1.1 500 Internal Server Error");
    die('Can\'t send requests to ' . $url);
  }

  if ($_POST['method'] == 'GET') {
    if ($_POST['params'] != 'null') {
      $url .= '?' . $_POST['params'];
    }
  }

  $ch = curl_init();
  curl_setopt($ch, CURLOPT_URL, $url);


  $headers = (array) json_decode(get_magic_quotes_gpc()?
      stripslashes($_POST['headers']) : $_POST['headers'], TRUE);

  $curl_headers = array();
  foreach ($headers as $header_key => $header_value) {
    $curl_headers[] = "$header_key: $header_value";
  }

  if (!empty($curl_headers)) {
    curl_setopt($ch, CURLOPT_HTTPHEADER, $curl_headers);
  }

  curl_setopt($ch, CURLOPT_HEADER, true);
  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  curl_setopt($ch, CURLOPT_BINARYTRANSFER, 1);

  if ($_POST['method'] == 'POST') {
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, stripslashes(get_magic_quotes_gpc()?
      stripslashes($_POST['params']) : $_POST['params']));
  }
  curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  //curl_setopt($ch, CURLOPT_PROXY, "http://localhost:8888");
  $output = curl_exec($ch);
  $info = curl_getinfo($ch);

  if ($output === false) {
    header("HTTP/1.1 404 Not Found");
    exit;
  } else {
    list($response_headers, $response_body) = explode("\r\n\r\n", $output, 2);
    $response_header_lines = explode("\r\n", $response_headers);
    // just send the response code back.
    header($response_header_lines[0]);
    print $response_body;
  }
  curl_close($ch);
}

forwardCall();
?>