“`
ini_set(‘display_errors’,1);
error_reporting(E_ALL);
session_start();
function getFullHost($s){
$ssl = (!empty($s[‘HTTPS’]) && $s[‘HTTPS’] == ‘on’) ? true:false;
$sp = strtolower($s[‘SERVER_PROTOCOL’]);
$protocol = substr($sp, 0, strpos($sp, ‘/’)) . (($ssl) ? ‘s’ : ”);
$port = $s[‘SERVER_PORT’];
$port = ((!$ssl && $port==’80’) || ($ssl && $port==’443′)) ? ” : ‘:’.$port;
$host = isset($s[‘HTTP_X_FORWARDED_HOST’]) ? $s[‘HTTP_X_FORWARDED_HOST’] : isset($s[‘HTTP_HOST’]) ? $s[‘HTTP_HOST’] : $s[‘SERVER_NAME’];
return $protocol . ‘://’ . $host . $port . $s[‘REQUEST_URI’];
}

define(“BASE_URL”, ‘https://api.appfigures.com/v2/’);
define(“CLIENT_KEY”,’YOUR CLIENT KEY’);
define(“CLIENT_SECRET”,’YOUR CLIENT SECRET’);

if(isset($_REQUEST[‘oauth_token’]) && isset($_REQUEST[‘oauth_verifier’])){ //we’ve got a token back
$oauth_sig = “OAuth oauth_signature_method=PLAINTEXT”
. ‘, oauth_verifier=’ . $_REQUEST[‘oauth_verifier’]
. ‘, oauth_token=’ . $_REQUEST[‘oauth_token’]
. “, oauth_consumer_key=” . CLIENT_KEY
. “, oauth_signature=” . CLIENT_SECRET . ‘&’ . $_SESSION[‘request_secret’];
$ch = curl_init(BASE_URL . ‘oauth/access_token’);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
‘Authorization: ‘ . $oauth_sig
));
$response = curl_exec($ch);
parse_str($response, $result);
var_dump($result);
die();
}else{ //we need to redirect the user to the auth dialog
$oauth_sig = “OAuth oauth_signature_method=PLAINTEXT”
. “, oauth_consumer_key=” . CLIENT_KEY
. “, oauth_callback=” . getFullHost($_SERVER)
. “, oauth_signature=” . CLIENT_SECRET . ‘&’;
$ch = curl_init(BASE_URL . ‘oauth/request_token’);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
‘Authorization: ‘ . $oauth_sig
));
$response = curl_exec($ch);
parse_str($response, $result);
if(!isset($result[‘oauth_token’])){
var_dump($response);
throw new Exception(‘Error, did not receive an oauth request token.’, 1);
}
$request_token = $result[‘oauth_token’];
$_SESSION[‘request_secret’] = $result[‘oauth_token_secret’];

header('Location: ' . BASE_URL . '/oauth/authorize/?oauth_token=' . $request_token);

}
“`

$ch = curl_init();

    curl_setopt($ch, CURLOPT_URL, "https://api.appfigures.com/v2/");
    curl_setopt($ch, CURLOPT_TIMEOUT, 200);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
    //might help if running on localhost 
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
     curl_setopt($ch, CURLOPT_HTTPHEADER, array(
          "X-Client-Key:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
      ));

    curl_setopt($ch, CURLOPT_USERPWD, "USERNAME:PASSWORD");
    $response = curl_exec($ch);
    curl_close($ch);

   echo $response;