From 5f4cb4f1012a4b9848e92798e6220e8ad9a123ea Mon Sep 17 00:00:00 2001
From: frederik <frederik.slos@gmail.com>
Date: Sun, 17 Aug 2025 14:21:04 +0200
Subject: [PATCH] provide basic rest api

---
 homepage/index.php |  7 +++++++
 scripts/api.php    | 43 +++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 scripts/api.php

diff --git a/homepage/index.php b/homepage/index.php
index cff395a..3f24eda 100644
--- a/homepage/index.php
+++ b/homepage/index.php
@@ -1,5 +1,12 @@
 <?php
 
+$requestUri = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
+
+if (strpos($requestUri, '/api/v1/') === 0) {
+  include_once 'scripts/api.php';
+  die();
+}
+
 /* Prevent XSS input */
 $_GET   = filter_input_array(INPUT_GET, FILTER_SANITIZE_STRING);
 $_POST  = filter_input_array(INPUT_POST, FILTER_SANITIZE_STRING);
diff --git a/scripts/api.php b/scripts/api.php
new file mode 100644
index 0000000..cfd8f74
--- /dev/null
+++ b/scripts/api.php
@@ -0,0 +1,43 @@
+<?php
+
+define('__ROOT__', dirname(dirname(__FILE__)));
+require_once(__ROOT__ . '/scripts/common.php');
+
+$requestUri = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
+$requestMethod = $_SERVER['REQUEST_METHOD'];
+
+if ($requestMethod !== 'GET') {
+  sendResponse405();
+}
+
+if (preg_match('#^/api/v1/image/(\S+)$#', $requestUri, $matches)) {
+  if ($config["IMAGE_PROVIDER"] === 'FLICKR') {
+    $image_provider = new Flickr();
+  } else {
+    $image_provider = new Wikipedia();
+  }
+  $sci_name = urldecode($matches[1]);
+  debug_log($sci_name);
+  $result = $image_provider->get_image($sci_name);
+
+  if ($result == false) {
+    http_response_code(404);
+    echo "Error 404! No image found!";
+  } else {
+    http_response_code(200);
+    header('Content-Type: application/json');
+    echo json_encode([
+      "status" => "success",
+      "message" => "successfully image data from database",
+      "data" => $result
+    ]);
+  }
+} else {
+  http_response_code(404);
+  echo "Error 404! No route found!";
+}
+
+function sendResponse405() {
+  http_response_code(405);
+  echo json_encode(["message" => "Method Not Allowed"]);
+}