/api/rest/site.php

<?php 

/**
 * This class defines an example resource that is wired into the URI /example
 * @uri /site/test
 */
class SiteTestResource extends Tonic\Resource {

    /**
     * @method GET
     */
    function get() {

        $response = new Tonic\Response(Tonic\Response::OK);
        $response->contentType = 'text/HTML';
        $response->body = 'API works!';

        return $response;
    }
}

/**
 * This class defines an example resource that is wired into the URI /example
 * @uri /site/validate/id
 */
class SiteValidateIdResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {

        // parse request
        parse_str($this->request->data, $request);

        $friendlyId = $request['friendlyId'];
        
        $isFriendlyIdUnique = Site::IsFriendlyIdUnique($friendlyId);
        
        // check for reserved names
        if($friendlyId == 'app' || $friendlyId == 'sites' || $friendlyId == 'api'){
	        $isFriendlyIdUnique = false;
        }
	            
        if($isFriendlyIdUnique==false){
            return new Tonic\Response(Tonic\Response::CONFLICT);
        }
        else{
	        return new Tonic\Response(Tonic\Response::OK);
        }

    }
}

/**
 * This class defines an example resource that is wired into the URI /example
 * @uri /site/validate/email
 */
class SiteValidateEmailResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {

        // parse request
        parse_str($this->request->data, $request);

        $email = $request['email'];
        
        $isUserUnique = User::IsLoginUnique($email);
	            
        if($isUserUnique==false){
        
            return new Tonic\Response(Tonic\Response::CONFLICT);
        }
        else{
	        return new Tonic\Response(Tonic\Response::OK);
        }

    }
}


/**
 * A protected API call to retrieve the current site
 * @uri /site/create
 */
class SiteCreateResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {
        
        parse_str($this->request->data, $request); // parse request

        $friendlyId = trim($request['friendlyId']);
        $name = trim($request['name']);
        $s_passcode = $request['passcode'];
        $timeZone = $request['timeZone'];
        $email = '';
        $password = '';
        $language = DEFAULT_LANGUAGE; // language for the app
        $direction = DEFAULT_DIRECTION;
        $userId = -1;
        
        // get first name and lastname
        $firstName = $request['firstName'];
        $lastName = $request['lastName'];
        
        // validate name and friendlyId
        if($friendlyId == '' || $name == ''){
	        return new Tonic\Response(Tonic\Response::BADREQUEST);
        }
        
        $theme = DEFAULT_THEME;
        
        // set theme
        if(isset($request['theme'])){
	        $theme = $request['theme'];
        }
        
        // set language if set
        if(isset($request['language'])){
	        $language = $request['language'];
        }
        
        // set direction if set
        if(isset($request['direction'])){
	        $direction = $request['direction'];
        }
        
        // check for email and password
        if(isset($request['email'])){
        	
        	$userLanguage = 'en-us';
        
       		if(isset($request['userLanguage'])){
		        $userLanguage = $request['userLanguage'];
	        }
	        
	        $email = $request['email'];
	        $password = $request['password'];
	        
	        // valide email and password
	        if($email == '' || $password == ''){
		        return new Tonic\Response(Tonic\Response::BADREQUEST);
	        }
        }
        else{
			// get an authuser
			$authUser = new AuthUser();
			
			if($authUser->UserId && $authUser->IsSuperAdmin==true){ // check if authorized
				$userId = $authUser->UserId;
			}
			else{
				return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
			}
        }
        
        // defaults
        $domain = SITE_URL;
    	
    	$domain = str_replace('{{friendlyId}}', $friendlyId, $domain);
    	
		$logoUrl = 'sample-logo.png';
		$altLogoUrl = '';
		
        if($s_passcode == PASSCODE){
           
            $isFriendlyIdUnique = Site::IsFriendlyIdUnique($friendlyId);
	            
	        // check for reserved names
	        if($friendlyId == 'app' || $friendlyId == 'sites' || $friendlyId == 'api' || $friendlyId == 'triangulate' || $friendlyId == 'developer'){
		        $isFriendlyIdUnique = false;
	        }    
	            
            if($isFriendlyIdUnique==false){
                return new Tonic\Response(Tonic\Response::CONFLICT);
            }
            
            // default is blank
            $welcomeEmail = '';
            $receiptEmail = '';
            
            // files for emails
            $welcome_file = APP_LOCATION.'/site/emails/welcome.html';
            $receipt_file = APP_LOCATION.'/site/emails/receipt.html';
            
            // make sure the welcome email exists
            if(file_exists($welcome_file)){
    			
    			// get default email file
    			$welcomeEmail = file_get_contents($welcome_file);
    			
    		}
    		
    		// make sure the receipt email exists
            if(file_exists($receipt_file)){
    			
    			// get default email file
    			$receiptEmail = file_get_contents($receipt_file);
    			
    		}
    		
    		// create the bucket name
    		$bucket = str_replace('{{site}}', $friendlyId, BUCKET_NAME);
    		
    		// set default URL mode
    		$urlMode = 'static';
    		
            // add the site
    	    $site = Site::Add($domain, $bucket, $name, $friendlyId, $urlMode, $logoUrl, $altLogoUrl, $theme, $email, $timeZone, $language, $direction, $welcomeEmail, $receiptEmail);
    	                
            // add the admin
            if($email != ''){
            	$isActive = 1; // admins by default are active
            
            	$user = User::Add($email, $password, $firstName, $lastName, 'Admin', $userLanguage, $isActive, $site['SiteId']);
            	$userId = $user['UserId'];
            }
           
            // set $siteId
            $siteId = $site['SiteId'];
                        
    		// publishes a theme for a site
    		Publish::PublishTheme($site, $theme);
    		
    		// publish default content for the theme
    		Publish::PublishDefaultContent($site, $theme, $user['UserId']);
    		
    		// publish the site
    		Publish::PublishSite($site['SiteId']);
    		
    		// create a locale directory
			$locales_dir = SITES_LOCATION.'/'.$site['FriendlyId'].'/locales';
			
			// create locales directory if it does not exist
			if(!file_exists($locales_dir)){
				mkdir($locales_dir, 0755, true);	
			}
			
			// set directory for locale
			$locale_dir = $locales_dir.'/'.$site['Language'].'/';
			
			// make the locale dir if it does not exist
			if(!file_exists($locale_dir)){
				mkdir($locale_dir, 0755, true);	
			}
			
			// set filename
			$filename = 'translation.json';
			
			if(!file_exists($locale_dir.$filename)){
				// create a blank translation file
				Utilities::SaveContent($locale_dir, $filename, '{}');
			}
    		
    		// send welcome email
    		if(SEND_WELCOME_EMAIL == true && $email != ''){
    		
	    		$to = $email;
	    		$from = REPLY_TO;
	    		$fromName = REPLY_TO_NAME;
	    		$subject = WELCOME_EMAIL_SUBJECT;
	    		$file = WELCOME_EMAIL_FILE;
	    		
	    		// create strings to replace
	    		$loginUrl = APP_URL.'/login/'.$site['FriendlyId'];
	    		$newSiteUrl = $domain;
	    		
	    		$replace = array(
	    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
	    			'{{brand}}' => BRAND,
	    			'{{reply-to}}' => REPLY_TO,
	    			'{{new-site-url}}' => $newSiteUrl,
	    			'{{login-url}}' => $loginUrl
	    		);
	    		
	    		// send email from file
	    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
	    		
	    	}
	    	
	    	// send new site hook
    		Webhooks::NewSite($site);
    		
    		// send new user hook
    		Webhooks::NewUser($user);
            
            return new Tonic\Response(Tonic\Response::OK);
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        
    }
}

/**
 * A protected API call to retrieve the current site
 * @uri /site/retrieve
 */
class SiteRetrieveResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {
    
        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            $site = Site::GetBySiteId($token->SiteId);
            
            // set images URL
			if(FILES_ON_S3 == true){
				$bucket = $site['Bucket'];
				$imagesURL = str_replace('{{bucket}}', $bucket, S3_URL);
				$imagesURL = str_replace('{{site}}', $site['FriendlyId'], $imagesURL);
			}
			else{
				$imagesURL = $site['Domain'];
			}
			
			// set the ImagesURL
			$site['ImagesUrl'] = $imagesURL.'/';
            
            // determine offset for timezone
            $zone = new DateTimeZone($site['TimeZone']);
			$now = new DateTime("now", $zone);
			
			$offset = $zone->getOffset($now);
			$offset_hours = round(($offset)/3600); 
			
			// set offset for site
			$site['Offset'] = $offset_hours;

            // return a json response
            $response = new Tonic\Response(Tonic\Response::OK);
            $response->contentType = 'application/json';
            $response->body = json_encode($site);

            return $response;
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }
    }
}

/**
 * A protected API call to publish the site
 * @uri /site/publish
 */
class SitePublishResource extends Tonic\Resource {

    /**
     * @method GET
     */
    function get() {
        
        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            Publish::PublishSite($token->SiteId);

            $response = new Tonic\Response(Tonic\Response::OK);
       
            return $response;
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }
    }
}

/**
 * A protected API call to publish the site
 * @uri /site/deploy
 */
class SiteDeployResource extends Tonic\Resource {

    /**
     * @method GET
     */
    function get() {
        
        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            S3::DeploySite($token->SiteId);

            $response = new Tonic\Response(Tonic\Response::OK);
       
            return $response;
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }
    }
}

/**
 * A protected API call to view, edit, and delete a site
 * @uri /site/remove
 */
class SiteRemoveResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function remove() {

        // get an authuser
        $token = Utilities::ValidateJWTToken(apache_request_headers());

        if($token != NULL){  // check if authorized

			 // validate that the user can remove the site
	        $user = User::GetByUserId($token->UserId);
			
			if($user['SiteAdmin'] == 1){
	        
	            parse_str($this->request->data, $request); // parse request
	        
	            $siteId = $request['siteId'];
	            
	            $site = Site::GetBySiteId($siteId);
	            
	            $directory = SITES_LOCATION.'/'.$site['FriendlyId'];
	            
	            // Get the directory name
				$oldname = SITES_LOCATION.'/'.$site['FriendlyId'];
				
				// Set the directory to be removed
				$newname = SITES_LOCATION.'/removed-'.$site['FriendlyId'];
				
				if(file_exists($oldname)){
					// Renames the directory
					rename($oldname, $newname);
				}
				
				// remove site from Amazon S3
				if(FILES_ON_S3 == true){
					
					// get site
					$site = Site::GetBySiteId($siteId);
					
					// remove site
					S3::RemoveSite($site);
				}
				
				// remove site from DB
				Site::Remove($siteId);
	
	            return new Tonic\Response(Tonic\Response::OK);
            }
            else{ // unauthorized access
	            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
            }
        
        } 
        else{ // unauthorized access
			return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        return new Tonic\Response(Tonic\Response::NOTIMPLEMENTED);
    }

}


/**
 * A protected API call to view, edit, and delete a site
 * @uri /site/save
 */
class SiteSaveResource extends Tonic\Resource {


    /**
     * @method POST
     */
    function post() {

        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            parse_str($this->request->data, $request); // parse request

            $name = $request['name'];
            $domain = $request['domain'];
            $primaryEmail = $request['primaryEmail'];
            $timeZone = $request['timeZone'];
            $language = $request['language'];
            $direction = $request['direction'];
            
            $currency = $request['currency'];
            $showCart = $request['showCart'];
            
            $showSettings = $request['showSettings'];
            $showLanguages = $request['showLanguages'];
            $showLogin = $request['showLogin'];
            $showSearch = $request['showSearch'];
            
            $urlMode = $request['urlMode'];
            
            $weightUnit = $request['weightUnit'];
            $shippingCalculation = $request['shippingCalculation'];
            $shippingRate = $request['shippingRate'];
            $shippingTiers = $request['shippingTiers'];
            $taxRate = $request['taxRate'];
            $payPalId = $request['payPalId'];
            $payPalUseSandbox = $request['payPalUseSandbox'];
            
            $welcomeEmail = $request['welcomeEmail']; 
            $receiptEmail = $request['receiptEmail'];
			$isSMTP = $request['isSMTP']; 
			$SMTPHost = $request['SMTPHost'];
			$SMTPAuth = $request['SMTPAuth'];
			$SMTPUsername = $request['SMTPUsername'];
			$SMTPPassword = $request['SMTPPassword']; 
			$SMTPSecure = $request['SMTPSecure'];
            
            $formPublicId = $request['formPublicId'];
            $formPrivateId = $request['formPrivateId'];
            
            $SMTPPasswordIV = '';
            
            // encyrpt password, #ref: http://stackoverflow.com/questions/10916284/how-to-encrypt-decrypt-data-in-php
            if($SMTPPassword != '' && $SMTPPassword != 'temppassword'){
	            
	            // encrypt password
				$key_size = mcrypt_get_key_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CFB);
				$encryption_key = SMTPENC_KEY;
				
				// create iv
				$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CFB);
				$iv = mcrypt_create_iv($iv_size, MCRYPT_DEV_URANDOM); // 16 bytes output
				
				// encrypt password
				$encrypted = mcrypt_encrypt(MCRYPT_RIJNDAEL_128, $encryption_key, $SMTPPassword, MCRYPT_MODE_CFB, $iv);
	            
	            // set password to encrypted password
	            $SMTPPasswordIV = base64_encode($iv);
	            $SMTPPassword = base64_encode($encrypted);
	            
	            // edit SMTP password
	            Site::EditSMTPPassword($token->SiteId, $SMTPPassword, $SMTPPasswordIV);
            }

			// edit site
            Site::Edit($token->SiteId, $name, $domain, $primaryEmail, $timeZone, $language, $direction, 
            	$showCart, $showSettings, $showLanguages, $showLogin, $showSearch, $urlMode,
            	$currency, $weightUnit, $shippingCalculation, $shippingRate, $shippingTiers, 
            	$taxRate, $payPalId, $payPalUseSandbox, 
            	$welcomeEmail, $receiptEmail,
				$isSMTP, $SMTPHost, $SMTPAuth, $SMTPUsername, $SMTPSecure,
            	$formPublicId, $formPrivateId);
            
       
            Publish::PublishContent($token->SiteId);
            	
            return new Tonic\Response(Tonic\Response::OK);
        
        } else{ // unauthorized access

            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        return new Tonic\Response(Tonic\Response::NOTIMPLEMENTED);
    }

}

/**
 * A protected API call to view, edit, and delete a site
 * @uri /site/edit/admin
 */
class SiteEditAdminResource extends Tonic\Resource {


    /**
     * @method POST
     */
    function post() {

        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 
        
        	$user = User::GetByUserId($token->UserId);
        	
        	if($user['SiteAdmin'] == 1){

	            parse_str($this->request->data, $request); // parse request
	
	            $siteId = $request['siteId'];
	            $domain = $request['domain'];
	            $bucket = $request['bucket'];
	            $status = $request['status'];
	            $fileLimit = $request['fileLimit'];
	            $userLimit = $request['userLimit'];
	            
	            // edit site
	            Site::EditAdmin($siteId, $domain, $bucket, $status, $fileLimit, $userLimit);
	            
	            return new Tonic\Response(Tonic\Response::OK);
			
			} else{ // unauthorized access

            	return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
			}
        
        } else{ // unauthorized access

            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        return new Tonic\Response(Tonic\Response::NOTIMPLEMENTED);
    }

}

/**
 * A protected API call to view, edit, and delete a site
 * @uri /site/branding/image
 */
class SiteBrandingResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function update() {

        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            parse_str($this->request->data, $request); // parse request

            $url = $request['url'];
            $type = $request['type'];
            
            $site = Site::GetBySiteId($token->SiteId);

			if($type == 'logo'){
            	Site::EditLogo($token->SiteId, $url);
            }
            else if($type == 'alt'){
            	Site::EditAltLogo($token->SiteId, $url);
            }
            else if($type == 'paypal'){
            	Site::EditPayPalLogo($token->SiteId, $url);
            }
            else if($type == 'icon'){
	            Site::EditIcon($token->SiteId, $url);
	            
	            if(FILES_ON_S3 == true){
					$bucket = $site['Bucket'];
					$imagesURL = str_replace('{{bucket}}', $bucket, S3_URL);
					$imagesURL = str_replace('{{site}}', $site['FriendlyId'], $imagesURL);
					
					$source = $imagesURL.'/files/'.$url;
				}
				else{
					$source = SITES_LOCATION.'/'.$site['FriendlyId'].'/files/'.$url;
				}
				
	            // create the icon
	            $destination = SITES_LOCATION.'/'.$site['FriendlyId'].'/favicon.ico';
				
				$ico_lib = new PHP_ICO($source, array( array( 32, 32 ), array( 64, 64 ) ) );
				$ico_lib->save_ico( $destination );
				
            }
            
            // publish site content
            Publish::PublishContent($token->SiteId);

            return new Tonic\Response(Tonic\Response::OK);
        
        } else{ // unauthorized access

            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        return new Tonic\Response(Tonic\Response::NOTIMPLEMENTED);
    }

}

/**
 * A protected API call to view, edit, and delete a site
 * @uri /site/branding/icon/background
 */
class SiteBrandingIconBackgroundResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function update() {

        // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

            parse_str($this->request->data, $request); // parse request

            $color = $request['color'];

			Site::EditIconBg($token->SiteId, $color);
			
			 // republish site
            Publish::PublishContent($token->SiteId);
                        
            return new Tonic\Response(Tonic\Response::OK);
        
        } else{ // unauthorized access

            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

        return new Tonic\Response(Tonic\Response::NOTIMPLEMENTED);
    }

}

/**
 * List all sites
 * @uri /site/list/all
 */
class SiteListAllResource extends Tonic\Resource {

    /**
     * @method GET
     */
    function get() {

         // get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 
        
        	$user = User::GetByUserId($token->UserId);
        	
        	if($user['SiteAdmin'] == 1){

	            // get sites
	            $list = Site::GetSites();
	
	            // return a json response
	            $response = new Tonic\Response(Tonic\Response::OK);
	            $response->contentType = 'application/json';
	            $response->body = json_encode($list);
	
	            return $response;
            }
            else{ // unauthorized access
	
	            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
	        }

        }
        else{ // unauthorized access

            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }

    }

}

/**
 * API call to pay for a subscription
 * @uri /site/subscribe/stripe
 */
class SiteSubscribeStripeResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {
    
    	// get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

        	// parse request
        	parse_str($this->request->data, $request);
        	
        	$site = Site::GetBySiteId($token->SiteId);

			$siteId = $site['SiteId'];
			$email = $site['PrimaryEmail'];
			$status = 'Active';
        	$stripe_token = $request['token'];
			$plan = $request['plan'];
        	$domain = $request['domain'];
			$provider = 'Stripe';
    
			// set API key
			Stripe::setApiKey(STRIPE_SECRET_KEY);

            // create a new customer and subscribe them to the plan
            $customer = Stripe_Customer::create(
            	array(
					"card" => $stripe_token,
					"plan" => $plan,
					"email" => $email)
            );

			// get back the id and the end period for the plan
            $customerId = $customer->id;
            
            // get subscription information
            $subscription = $customer->subscriptions->data[0];
			
			$subscriptionId = $subscription->id;			
			$stripe_status = $subscription->status;
			$stripe_plan = $subscription->plan->id;
			$stripe_planname  = $subscription->plan->name;
			
			// subscribe to a plan
			Site::Subscribe($siteId, $status, $plan, $provider, $subscriptionId, $customerId);
			
			// send email to user
			if(NEW_SUBSCRIPTION_EMAIL == true){
			
				// send success email to user
				$to = $site['PrimaryEmail'];
	    		$from = REPLY_TO;
	    		$fromName = REPLY_TO_NAME;
	    		$subject = NEW_SUBSCRIPTION_EMAIL_SUBJECT;
	    		$file = NEW_SUBSCRIPTION_EMAIL_FILE;
	 
	    		$replace = array(
	    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
	    			'{{brand}}' => BRAND,
	    			'{{reply-to}}' => REPLY_TO
	    		);
	    		
	    		// send 
	    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
    		}
    		
    		// send email to admin
			if(NEW_SUBSCRIBER_EMAIL == true){
			
	    		// send details email to admin
				$to = REPLY_TO;
	    		$from = REPLY_TO;
	    		$fromName = REPLY_TO_NAME;
	    		$subject = NEW_SUBSCRIBER_EMAIL_SUBJECT;
	    		$file = NEW_SUBSCRIBER_EMAIL_FILE;
	 
	    		$replace = array(
	    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
	    			'{{brand}}' => BRAND,
	    			'{{reply-to}}' => REPLY_TO,
	    			'{{domain}}' => $domain,
	    			'{{siteid}}' => $site['SiteId'],
	    			'{{friendlyid}}' => $site['FriendlyId'],
	    			'{{provider}}' => $provider,
	    			'{{customerid}}' => $customerId
	    		);
	    		
	    		// send email from file
	    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
    		}
    		    		
    		// send email from file
    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
        
            // return a json response
            return new Tonic\Response(Tonic\Response::OK); 
                
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }
    }
}

/**
 * API call to pay for a subscription
 * @uri /site/unsubscribe/stripe
 */
class SiteUnsubscribeStripeResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {
    
    	// get token
		$token = Utilities::ValidateJWTToken(apache_request_headers());

		// check if token is not null
        if($token != NULL){ 

        	// parse request
        	parse_str($this->request->data, $request);
        	
        	$site = Site::GetBySiteId($token->SiteId);

			$siteId = $site['SiteId'];
			$email = $site['PrimaryEmail'];
			$status = 'Unsubscribed';
			$plan = '';
        	$provider = '';
        	$subscriptionId = '';
        	$customerId = $site['CustomerId'];
    
			// set API key
			Stripe::setApiKey(STRIPE_SECRET_KEY);

            // retrieve customer
            $customer = Stripe_Customer::retrieve($site['CustomerId']);
			
			// unsubscribe
			$cu->subscriptions->retrieve($site['SubscriptionId'])->cancel();
            			
			// unsubscribe to a plan
			Site::Subscribe($siteId, $status, $plan, $provider, $subscriptionId, $customerId);
			
			// send success email to user
			$to = $site['PrimaryEmail'];
    		$from = REPLY_TO;
    		$fromName = REPLY_TO_NAME;
    		$subject = BRAND.': You have successfully unsubscribed to '.BRAND;
    		$file = APP_LOCATION.'/emails/unsubscribe-success.html';
 
    		$replace = array(
    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
    			'{{brand}}' => BRAND,
    			'{{reply-to}}' => REPLY_TO
    		);
    		
    		// send 
    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
    		
    		// send details email to admin
			$to = REPLY_TO;
    		$from = REPLY_TO;
    		$fromName = REPLY_TO_NAME;
    		$subject = BRAND.': Unsubscribed';
    		$file = APP_LOCATION.'/emails/unsubscribe-details.html';
 
    		$replace = array(
    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
    			'{{brand}}' => BRAND,
    			'{{reply-to}}' => REPLY_TO,
    			'{{domain}}' => $domain,
    			'{{siteid}}' => $site['SiteId'],
    			'{{friendlyid}}' => $site['FriendlyId'],
    			'{{provider}}' => $site['Provider'],
    			'{{customerid}}' => $site['CustomerId']
    		);
    		
    		// send email from file
    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
        
            // return a json response
            return new Tonic\Response(Tonic\Response::OK); 
                
        }
        else{
            return new Tonic\Response(Tonic\Response::UNAUTHORIZED);
        }
    }
}

/**
 * This class defines an example resource that is wired into the URI /example
 * @uri /site/subscribe/paypal
 */
class SiteSubscribePaypalResource extends Tonic\Resource {

    /**
     * @method POST
     */
    function post() {
    
    	parse_str($this->request->data, $request);
    	
    	$txn_type = $request['txn_type'];
    	$status = $request['payer_status'];
    	
    	$email = $request['payer_email'];
		$payerId = $request['payer_id'];
		$item_name = $request['item_name'];
		
		// explode custom (siteId-plan)
		$custom = explode('//', $request['custom']);
		
		// get site and plan
		$siteId = $custom[0];
		$plan = $custom[1];
		
		// parse domain
		preg_match('#\((.*?)\)#', $item_name, $match);
		$domain = $match[1];
				
	    // get reference to site
	    $site = Site::GetBySiteId($siteId);

		// response was "VERIFIED"
		if($status == 'verified' && $txn_type == 'subscr_signup'){
			
		    $provider = 'PayPal';
		    $status = 'Active';
		    $subscriptionId = $payerId;
		    $customerId = $email;
		    
		    // subscribe to a plan
			Site::Subscribe($siteId, $status, $plan, $provider, $subscriptionId, $customerId);
			
			// send email to user
			if(NEW_SUBSCRIPTION_EMAIL == true){
			
				// send success email to user
				$to = $site['PrimaryEmail'];
	    		$from = REPLY_TO;
	    		$fromName = REPLY_TO_NAME;
	    		$subject = NEW_SUBSCRIPTION_EMAIL_SUBJECT;
	    		$file = NEW_SUBSCRIPTION_EMAIL_FILE;
	 
	    		$replace = array(
	    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
	    			'{{brand}}' => BRAND,
	    			'{{reply-to}}' => REPLY_TO
	    		);
	    		
	    		// send 
	    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
    		}
    		
    		// send email to admin
			if(NEW_SUBSCRIBER_EMAIL == true){
			
	    		// send details email to admin
				$to = REPLY_TO;
	    		$from = REPLY_TO;
	    		$fromName = REPLY_TO_NAME;
	    		$subject = NEW_SUBSCRIBER_EMAIL_SUBJECT;
	    		$file = NEW_SUBSCRIBER_EMAIL_FILE;
	 
	    		$replace = array(
	    			'{{brand-logo}}' => '<img src="'.BRAND_LOGO.'" style="max-height:50px">',
	    			'{{brand}}' => BRAND,
	    			'{{reply-to}}' => REPLY_TO,
	    			'{{domain}}' => $domain,
	    			'{{siteid}}' => $site['SiteId'],
	    			'{{friendlyid}}' => $site['FriendlyId'],
	    			'{{provider}}' => $provider,
	    			'{{customerid}}' => $customerId
	    		);
	    		
	    		// send email from file
	    		Utilities::SendEmailFromFile($to, $from, $fromName, $subject, $replace, $file);
    		}
    		
  
		} else {
		    // IPN response was "INVALID"\
		}

        $response = new Tonic\Response(Tonic\Response::OK);
        $response->contentType = 'text/HTML';
        $response->body = 'Yah!!!';

        return $response;
    }
}



?>