address view... 3 URL... 3 Method... 3 URL Params... 3 Required... 3 Optional... 3 Data Params... 4 Success Response... 4 Error Response...

Similar documents
jquery Basic HTTP communication

EDA095 HTTP. Pierre Nugues. March 30, Lund University

Composer Help. Web Request Common Block

Security implications of the Cross-Origin Resource Sharing. Gergely Revay

Introduction to HTTP. Jonathan Sillito

CSRF in the Modern Age

NetIQ Access Manager 4.3. REST API Guide

REALIZATION CONCEPT Version: 1.02

Neat tricks to bypass CSRF-protection. Mikhail

Penetration Test Report


NetIQ Access Manager 4.4. REST API Guide

REST Web Services Objektumorientált szoftvertervezés Object-oriented software design

RBS NetGain Enterprise Manager Multiple Vulnerabilities of 11

HTTP Request Handling

Networks and Web for Health Informatics (HINF 6220) Tutorial 13 : PHP 29 Oct 2015

World Wide Web, etc.

KWizCom Corporation. imush. Information Management Utilities for SharePoint. Printing Feature. Application Programming Interface (API)

Controller/server communication

Using OAuth 2.0 to Access ionbiz APIs

Compliance with OWASP ASVS L1:

All requests must be authenticated using the login and password you use to access your account.

CORS. Константин Якушев MoscowJS 14,

TELIA OPERATOR SERVICE PLATFORM

This document is published by Appiyo Technologies Pte., Ltd., without any warranty.


SQL Injection. A tutorial based on XVWA

Use of PHP for DB Connection. Middle and Information Tier

Database Systems Fundamentals

Web Security: Vulnerabilities & Attacks

GMA024F0. GridDB Web API Guide. Toshiba Digital Solutions Corporation 2017 All Rights Reserved.


WEB SECURITY p.1

React Native. HTTP/Fetch Sending data

Detect Users Browser Capabilities with PHP

Mixed Signals Using Fusion s Signals API

Elevate Web Builder Modules Manual

Controller/server communication

NIELSEN API PORTAL USER REGISTRATION GUIDE

CS637 Midterm Review

Cross-Site Request Forgery in Cisco SG220 series

CSE 333 Lecture HTTP

Sophos Mobile Control Network Access Control interface guide. Product version: 7

Alloy Navigator API USER S GUIDE. Integration with External Systems. Product Version: 7.0 Document Revision: 1.0 Date: November 30, 2015

Homework 2 50 points. CSE422 Computer Networking Spring 2018

X-Road Message Protocol for REST

HappyFox API Technical Reference

Dimensioning enterprise cloud platforms for Bring Your Own Devices (BYOD) BYOD Device Emulation and Policy Analysis

Beyond Virtual Machines: Tapping into the AWS Universe from FileMaker

United States Postal Service Web Tool Kit User s Guide

The HTTP protocol. Fulvio Corno, Dario Bonino. 08/10/09 http 1


Oracle Responsys. REST API Developer s Guide. REST API v1.3 for Responsys 18A E February 2018

FiSTB 2017 Tutorial. REST API Testing and Automating Tutorial. Alan Richardson

Changing The User Agent String In Safari User Guide For Web Developers

Samples using API. User Guide

Assignment, part 2. Statement and concepts INFO-0010

LAMP, WEB ARCHITECTURE, AND HTTP

CSE 333 Lecture HTTP

Hypertext Transport Protocol

Data Avenue REST API. Ákos Hajnal, Zoltán Farkas November, 2015

GEOSOLVER From Timestamps to GPS coordinates Quick API Guide

DFP Mobile Ad Network and Rich Media API

Best Practices for developing REST API using PHP

2- Application Level Protocols HTTP 1.0/1.1/2

External HTTPS Trigger AXIS Camera Station 5.06 and above

Incident Response Programming with R. Eric Zielinski Sr. Consultant, Nationwide

Session 15. RESTful Services Part 3. Lecture Objectives

Hoverfly Documentation

Technosoft HR Recruitment Workflow Developers Manual

baasbox Documentation

Creating New Parent and Student Accounts on Parent/Student Information Portal

UNIVERSITY OF TARTU FACULTY OF SCIENCE AND TECHNOLOGY INSTITUTE OF COMPUTER SCIENCE INFORMATICS. CVE Hiie-Helen Raju

White Paper: Next-Gen Network Traffic Analysis (NTA): Log-based NTA vs. Packet-based NTA

File Upload & Download (Tizen Ver. 2.3)

Identifying Operating System Using Flow-based Traffic Fingerprinting

CSCE 548 Building Secure Software SQL Injection Attack

Lab 5: Web Attacks using Burp Suite

CIS 3308 Logon Homework

Accessing the Progress OpenEdge AppServer. From Progress Rollbase. Using Object Script

Configuration Setting

Genesys Mobile Services API Reference. Genesys Mobile Engagement 8.5.1

SANS ICS Europe 2018 Munich, Germany

4D Live Window Addendum 1.1

Vulnerabilities in web applications

Genesys Mobile Services API Reference. Stat Service API

Web Search An Application of Information Retrieval Theory

CS 455/555 Spring 2011 Weigle

Tutorials Php Y Jquery Mysql Database Without Refreshing Code

ClickToCall SkypeTest Documentation

The production version of your service API must be served over HTTPS.

ONSITE SCALA API. The ScientiaMobile Support Forum is open to all WURFL users, both commercial license holders and evaluation users.

Steps to View Online Lectures

Building Offline Mobile Apps with Oracle JET and MCS

Oracle Transportation Management. REST API Getting Started Guide Release Part No. E

How browsers talk to servers. What does this do?

The SSL/TLS protocol. Myrto Arapinis School of Informatics University of Edinburgh. October 27, 2016

Ajax- XMLHttpResponse. Returns a value such as ArrayBuffer, Blob, Document, JavaScript object, or a DOMString, based on the value of

(12) Patent Application Publication (10) Pub. No.: US 2009/ A1

BaasBox. Open Source Backend as a Service. Otto Hylli

Transcription:

CONTENT address view... 3 URL... 3 Method... 3 URL Params... 3 Required... 3 Optional... 3 Data Params... 4 Success Response... 4 Error Response... 4 Sample Call... 4 JQuery/Ajax... 4 Curl... 5 Notes... 5 address create... 6 URL... 6 Method... 6 URL Params... 6 Data Params... 6 Required... 6 Success Response... 6 Error Response... 6 Sample Call... 7 JQuery/Ajax... 7 Curl... 7 Notes... 8 notes view... 8 URL... 8 Method... 8 URL Params... 8 Required... 8 Optional... 9 Data Params... 9 Success Response... 9 Error Response... 9 Sample Call... 10 1

JQuery/Ajax... 10 Curl... 10 Notes... 10 tasks view... 11 URL... 11 Method... 11 URL Params... 11 Required... 11 Optional... 11 Data Params... 11 Success Response... 12 Error Response... 12 Sample Call... 13 JQuery/Ajax... 13 Curl... 13 Notes... 13 Events view... 14 URL... 14 Method... 14 URL Params... 14 Required... 14 Optional... 14 Data Params... 15 Success Response... 15 Error Response... 15 Sample Call... 15 JQuery/Ajax... 15 Curl... 16 Notes... 16 2

ADDRESS VIEW Fetches address data from the database. Data can be queried, sorted and you can choose the fields you want to get. URL /api_address_view.php METHOD GET URL PARAMS REQUIRED username: USERNAME password: PASSWORD dbname: DBNAME Username, password and dbname for solution and database as provided by INtex Publishing to the customer. Don t pass this credentials on, don t publish them anywhere, keep them safe. OPTIONAL fields: SQL list of fields to show, for example fields: Vorname, Nachname type: predefined lists of fields. If no fields and no type are specified, you get complete address data. Tel gives you address data and telephone and smartphone numbers, Mail gives you address data and email and website address. All combines address data, Tel and Mail. type: Mail where: SQL query condition, for example where: Ort= Eitorf orderby: SQL sort command, for example orderby: Ort DESC 3

DATA PARAMS None. SUCCESS RESPONSE In case of a successful query you get the content of the queried data fields as JSON. Code: 200 Content: "adressen": [ "Firma": "INtex Publishing GmbH & Co. KG", "Abteilung": "Geschäftsführung", "Vorname": "Martin", "Nachname": "Böhmer", "Strasse": "Jakobstraße 9", "PLZ": "53783", "Ort": "Eitorf" ERROR RESPONSE Connection failed: In case the database isn t available or the credentials username and/or password are incorrect. Mysqli error: https://www.w3schools.com/php/func_mysqli_error.asp No resulting data: "adressen": [] SAMPLE CALL JQUERY/AJAX $.ajax( "method": "GET", 4

"url": "https://www.intexpublishing.de/adressenplus/api_address_view.php?username=username&pas sword=password&dbname=dbname ", ); "headers":, "Content-Type": "application/x-www-form-urlencoded" "xhrfields": "withcredentials": true CURL curl -i \ -H "Host: www.intex-publishing.de" \ -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Accept: */*" \ -H "Accept-Encoding: gzip, deflate, br" \ -H "Accept-Language: de-de,de;q=0.9,en-us;q=0.8,en;q=0.7" \ -L -v "https://www.intexpublishing.de/adressenplus/api_address_view.php?username=username&pas sword=password&dbname=dbname" NOTES This API can be used in INtex Hausverwaltung PLUS INtex Adressen PLUS INtex Auftrag PLUS INtex Inventar PLUS INtex Rechnungseingang PLUS INtex Fuhrpark PLUS INtex Gebäude PLUS 5

ADDRESS CREATE Creates new addresses with the data provided. All fields are accessible be careful, since the API itself doesn t check the validity of any given input. Kurzname field should always be provided. URL /api_address_create.php METHOD POST URL PARAMS None. DATA PARAMS REQUIRED username: USERNAME password: PASSWORD dbname: DBNAME Username, password and dbname for solution and database as provided by INtex Publishing to the customer. Don t pass this credentials on, don t publish them anywhere, keep them safe. Example: fields: list of db-fields values: list of new values for new record fields: Kurzname, Vorname, Nachname values: INtex, Martin, Böhmer SUCCESS RESPONSE Code: 200 ERROR RESPONSE Connection failed: In case the database isn t available or the credentials username and/or password are incorrect. Mysqli error: https://www.w3schools.com/php/func_mysqli_error.asp 6

SAMPLE CALL JQUERY/AJAX var formdata = new FormData(); formdata.append("username", "USERNAME"); formdata.append("password", "PASSWORD"); formdata.append("dbname", "DBNAME"); formdata.append("fields", "Kurzname, Vorname,Nachname"); formdata.append("values", "\"INtex\",\"Martin\", \"Böhmer\""); $.ajax( "method": "POST", "url": "https://www.intexpublishing.de/adressenplus/api_address_create.php", ); "xhrfields":, "withcredentials": true "data": formdata, "processdata": false, "contenttype": false CURL curl -i -X POST \ -H "Host: www.intex-publishing.de" \ -H "Origin: chrome-extension://mmdjghedkfbdhbjhmefbbgjaihmmhkeg" \ -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" \ -H "Content-Type: multipart/form-data; boundary=---- WebKitFormBoundaryyOi2BvXQZ4FZpX3Z" \ -H "Accept: */*" \ -H "Accept-Encoding: gzip, deflate, br" \ 7

-H "Accept-Language: de-de,de;q=0.9,en-us;q=0.8,en;q=0.7" \ -F "username=username" \ -F "password=password" \ -F "dbname=dbname" \ -F "fields=kurzname, Vorname,Nachname" \ -F "values=\"intex\",\"martin\", \"Böhmer\"" \ -L -v "https://www.intexpublishing.de/adressenplus/api_address_create.php" NOTES This API can be used in INtex Hausverwaltung PLUS INtex Adressen PLUS INtex Auftrag PLUS INtex Inventar PLUS INtex Rechnungseingang PLUS INtex Fuhrpark PLUS INtex Gebäude PLUS NOTES VIEW Fetches notes data from the database. Data can be queried, sorted and you can choose the fields you want to get. URL /api_notes_view.php METHOD GET URL PARAMS REQUIRED username: USERNAME password: PASSWORD dbname: DBNAME Username, password and dbname for solution and database as provided by INtex Publishing to the customer. Don t pass this credentials on, don t publish them anywhere, keep them safe. 8

OPTIONAL fields: SQL list of fields to show, for example fields: Titel, Zustaendigkeit where: SQL query condition, for example where: Titel= Besuch orderby: SQL sort command, for example orderby: Titel DESC DATA PARAMS None. SUCCESS RESPONSE In case of a successful query you get the content of the queried data fields as JSON. Code: 200 Content: "notizen": [ ] "Titel": "Besuch", "Projekt": "2", "Datum": "2017-09-27", "Bearbeitungsstatus": "Erledigt" ERROR RESPONSE Connection failed: In case the database isn t available or the credentials username and/or password are incorrect. Mysqli error: https://www.w3schools.com/php/func_mysqli_error.asp No resulting data: "notizen": [] 9

SAMPLE CALL JQUERY/AJAX $.ajax( "method": "GET", "url": "https://www.intexpublishing.de/adressenplus/api_notes_view.php?username=username&passw ord=password&dbname=dbname ", ); "headers":, "Content-Type": "application/x-www-form-urlencoded" "xhrfields": "withcredentials": true CURL curl -i \ -H "Host: www.intex-publishing.de" \ -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Accept: */*" \ -H "Accept-Encoding: gzip, deflate, br" \ -H "Accept-Language: de-de,de;q=0.9,en-us;q=0.8,en;q=0.7" \ -L -v "https://www.intexpublishing.de/adressenplus/api_notes_view.php?username=username&passw ord=password&dbname=dbname" NOTES This API can be used in INtex Hausverwaltung PLUS INtex Adressen PLUS 10

INtex Auftrag PLUS INtex Inventar PLUS INtex Rechnungseingang PLUS INtex Fuhrpark PLUS INtex Gebäude PLUS TASKS VIEW Fetches tasks data from the database. Data can be queried, sorted and you can choose the fields you want to get. URL /api_tasks_view.php METHOD GET URL PARAMS REQUIRED username: USERNAME password: PASSWORD dbname: DBNAME Username, password and dbname for solution and database as provided by INtex Publishing to the customer. Don t pass this credentials on, don t publish them anywhere, keep them safe. OPTIONAL fields: SQL list of fields to show, for example fields: Titel, Zustaendigkeit where: SQL query condition, for example where: Titel= Aufgabe orderby: SQL sort command, for example orderby: Titel DESC DATA PARAMS None. 11

SUCCESS RESPONSE In case of a successful query you get the content of the queried data fields as JSON. Code: 200 Content: "aufgaben": [ ], "Titel": "Test", "Projekt": "1", "Prioritaet": "8", "Datum": null, "Bearbeitungstatus": "In Arbeit", "Frist": null "Titel": "Test", "Projekt": "1", "Prioritaet": "8", "Datum": null, "Bearbeitungstatus": "In Arbeit", "Frist": "2017-04-28" ERROR RESPONSE Connection failed: In case the database isn t available or the credentials username and/or password are incorrect. Mysqli error: https://www.w3schools.com/php/func_mysqli_error.asp No resulting data: 12

"aufgaben": [] SAMPLE CALL JQUERY/AJAX $.ajax( "method": "GET", "url": "https://www.intexpublishing.de/adressenplus/api_tasks_view.php?username=username&passw ord=password&dbname=dbname ", ); "headers":, "Content-Type": "application/x-www-form-urlencoded" "xhrfields": "withcredentials": true CURL curl -i \ -H "Host: www.intex-publishing.de" \ -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Accept: */*" \ -H "Accept-Encoding: gzip, deflate, br" \ -H "Accept-Language: de-de,de;q=0.9,en-us;q=0.8,en;q=0.7" \ -L -v "https://www.intexpublishing.de/adressenplus/api_tasks_view.php?username=username&passw ord=password&dbname=dbname" NOTES This API can be used in 13

INtex Hausverwaltung PLUS INtex Adressen PLUS INtex Auftrag PLUS INtex Inventar PLUS INtex Rechnungseingang PLUS INtex Fuhrpark PLUS INtex Gebäude PLUS EVENTS VIEW Fetches events data from the database. Data can be queried, sorted and you can choose the fields you want to get. URL /api_events_view.php METHOD GET URL PARAMS REQUIRED username: USERNAME password: PASSWORD dbname: DBNAME Username, password and dbname for solution and database as provided by INtex Publishing to the customer. Don t pass this credentials on, don t publish them anywhere, keep them safe. OPTIONAL fields: SQL list of fields to show, for example fields: Titel, Zustaendigkeit where: SQL query condition, for example where: Titel= Weihnachten orderby: SQL sort command, for example orderby: Titel DESC 14

DATA PARAMS None. SUCCESS RESPONSE In case of a successful query you get the content of the queried data fields as JSON. Code: 200 Content: "termine": [, "Titel": "Pfingstmontag", "Kalender": "Feiertag", "Datum": "2019-06-10", "Uhrzeit": "00:00:00" ERROR RESPONSE Connection failed: In case the database isn t available or the credentials username and/or password are incorrect. Mysqli error: https://www.w3schools.com/php/func_mysqli_error.asp No resulting data: "aufgaben": [] SAMPLE CALL JQUERY/AJAX $.ajax( "method": "GET", "url": "https://www.intexpublishing.de/adressenplus/api_events_view.php?username=username&pass word=password&dbname=dbname ", "headers": 15

"Content-Type": "application/x-www-form-urlencoded", "xhrfields": "withcredentials": true ); CURL curl -i \ -H "Host: www.intex-publishing.de" \ -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" \ -H "Content-Type: application/x-www-form-urlencoded" \ -H "Accept: */*" \ -H "Accept-Encoding: gzip, deflate, br" \ -H "Accept-Language: de-de,de;q=0.9,en-us;q=0.8,en;q=0.7" \ -L -v "https://www.intexpublishing.de/adressenplus/api_events_view.php?username=username&pass word=password&dbname=dbname" NOTES This API can be used in INtex Hausverwaltung PLUS INtex Adressen PLUS INtex Auftrag PLUS INtex Inventar PLUS INtex Rechnungseingang PLUS INtex Fuhrpark PLUS INtex Gebäude PLUS 16