<%
	include_once( "modules/utils.inc.php" );

	$pass = $PHP_AUTH_PW ? $PHP_AUTH_PW : $password;
	$u    = $PHP_AUTH_USER ? $PHP_AUTH_USER : ( $user ? $user : $_COOKIE["c_uid"] );
	$tok =  $authenticated = $_COOKIE["c_pass_token"];

	Header( "Content-type: text/xml");

if( $u && ($pass && $pass == getPasswdForUser( $u ) || ($tok && $tok == md5( getPasswdForUser( $u ))))) {

# cant trust the cache because they will likely be hitting this from cookieless environments 
$peeps = get_xml_cachelist( get_contacts_file( $u ));

echo "<?xml version='1.0' standalone='yes'?>\n";
%>
<peeps>
<%
		$mode = "xml";
		if( sizeof( $peeps )) {
			foreach( $peeps as $user ) {
%>
  <peep><%= $user %></peep>
<%
			}
		}

%>
</peeps>
<%
} else {
	header('WWW-Authenticate: Basic realm="Feed Me Links XML API"');
	header('HTTP/1.0 401 Unauthorized');
	echo "<response>login first, please.</response>";
}
%>