35 lines
994 B
PHP
35 lines
994 B
PHP
<?php
|
|
$authorized_ip = '0.0.0.0';
|
|
$allowed_origin_prefix = 'https://vrchatapi-';
|
|
$allowed_origin_suffix = '.kvs.fyi';
|
|
|
|
$client_ip = $_SERVER['REMOTE_ADDR'] ?? '';
|
|
$origin = $_SERVER['HTTP_ORIGIN'] ?? '';
|
|
|
|
function startsWith($haystack, $needle) {
|
|
return substr($haystack, 0, strlen($needle)) === $needle;
|
|
}
|
|
|
|
function endsWith($haystack, $needle) {
|
|
return substr($haystack, -strlen($needle)) === $needle;
|
|
}
|
|
|
|
$is_ip_allowed = $client_ip === $authorized_ip;
|
|
$is_origin_allowed = startsWith($origin, $allowed_origin_prefix) && endsWith($origin, $allowed_origin_suffix);
|
|
|
|
if (!$is_ip_allowed && !$is_origin_allowed) {
|
|
header("Location: https://github.com/unstealable");
|
|
exit;
|
|
}
|
|
|
|
$vrchat_token = [
|
|
"manual_username" => "TonUsername",
|
|
"displayName" => "TonDisplayName",
|
|
"user_id" => "usr_abcdef1234567890",
|
|
"auth" => "ZGF0YQ==",
|
|
"auth_cookie" => "auth_cookie_valeur"
|
|
];
|
|
|
|
header('Content-Type: application/json');
|
|
echo json_encode($vrchat_token, JSON_PRETTY_PRINT);
|