<?

// +--------------------------------------------------------------------+

// | PowerAdmin                                                         |

// +--------------------------------------------------------------------+

// | Copyright (c) 1997-2002 The PowerAdmin Team                        |

// +--------------------------------------------------------------------+

// | This source file is subject to the license carried by the overal   |

// | program PowerAdmin as found on http://poweradmin.sf.net            |

// | The PowerAdmin program falls under the QPL License:                |

// | http://www.trolltech.com/developer/licensing/qpl.html              |

// +--------------------------------------------------------------------+

// | Authors: Roeland Nieuwenhuis <trancer <AT> trancer <DOT> nl>       |

// |          Sjeemz <sjeemz <AT> sjeemz <DOT> nl>                      |

// +--------------------------------------------------------------------+

// Filename: record.inc.php

// Startdate: 26-10-2002

// This file is ought to edit the records in the database.

// Records are domains aswell, they also belong here.

// All database functions are associative.

// use nextID first to get a new id. Then insert it into the database.

// do not rely on auto_increment (see above).

// use dns.inc.php for validation functions.

//

// $Id: record.inc.php,v 1.21 2003/05/10 20:21:01 azurazu Exp $

//

function update_soa_serial($domain_id)

{

    global $db;

	/*

	 * THIS CODE ISNT TESTED THROUGH MUCH YET!

	 * !!!!!!! BETACODE !!!!!!!!!!

	 * Code committed by DeViCeD, Thanks a lot!

	 * Heavily hax0red by Trancer/azurazu

	 *

	 * First we have to check, wheather current searial number 

	 * was already updated on the other nameservers.

	 * If field 'notified_serial' is NULL, then I guess domain is

	 * NATIVE and we don't have any secondary nameservers for this domain.

	 * NOTICE: Serial number *will* be RFC1912 compilant after update 

	 * NOTICE: This function will allow only 100 DNS zone transfers ;-)

	 * YYYYMMDDnn

	 */

	$sqlq = "SELECT `notified_serial` FROM `domains` WHERE `id` = '".$domain_id."'";

	$notified_serial = $db->queryOne($sqlq);

	$sqlq = "SELECT `content` FROM `records` WHERE `type` = 'SOA' AND `domain_id` = '".$domain_id."'";

	$content = $db->queryOne($sqlq);

    $need_to_update = false;

	// Getting the serial field.

	$soa = explode(" ", $content);

	if(empty($notified_serial))

    {

        // Ok native replication, so we have to update.

        $need_to_update = true;

    }

    elseif($notified_serial >= $soa[2])

    {

        $need_to_update = true;

    }

    elseif(strlen($soa[2]) != 10)

    {

        $need_to_update = true;

    }

    else

    {

        $need_to_update = false;

    }

    if($need_to_update)

    {

        // Ok so we have to update it seems.

        $current_serial = $soa[2];

		/*

		 * What we need here (for RFC1912) is YEAR, MONTH and DAY

		 * so let's get it ...

		 */

		$new_serial = date('Ymd'); // we will add revision number later

		if(strncmp($new_serial, $current_serial, 8) === 0)

		{

            /*

             * Ok, so we already made updates tonight

             * let's just increase the revision number

             */				

            $revision_number = (int) substr($current_serial, -2);

            if ($revision_number == 99) return false; // ok, we cannot update anymore tonight

            ++$revision_number;

            // here it is ... same date, new revision

            $new_serial .= str_pad($revision_number, 2, "0", STR_PAD_LEFT);	

		}

 		else

		{

            /*

			 * Current serial is not RFC1912 compilant, so let's make a new one

			 */

 			$new_serial .= '00';

		}

        $soa[2] = $new_serial; // change serial in SOA array

		$new_soa = "";		

		// build new soa and update SQL after that

		for ($i = 0; $i < count($soa); $i++) 

		{	

			$new_soa .= $soa[$i] . " "; 

		}

		$sqlq = "UPDATE `records` SET `content` = '".$new_soa."' WHERE `domain_id` = '".$domain_id."' AND `type` = 'SOA' LIMIT 1";

		$db->Query($sqlq);

		return true;

	}

}  

/*

 * Edit a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function edit_record($recordid, $zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

  	if($content == "")

  	{

  		error(ERR_RECORD_EMPTY_CONTENT);

  	}

  	// Edits the given record (validates specific stuff first)

	if (!xs(recid_to_domid($recordid)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		validate_input($recordid, $zoneid, $type, $content, $name, $prio, $ttl);

                $change = time();

                $db->query("UPDATE records set name='$name', type='$type', content='$content', ttl='$ttl', prio='$prio', change_date='$change' WHERE id=$recordid");

		/*

		 * Added by DeViCeD - Update SOA Serial number

		 * There should be more checks

		 */

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "edit_record", "no zoneid given"));

	}

}

/*

 * Adds a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function add_record($zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

	if (!xs($zoneid))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		// Check the user input.

		validate_input($zoneid, $type, $content, $name, $prio, $ttl);

		// Generate new timestamp for the daemon

		$change = time();

		// Execute query.

		$db->query("INSERT INTO records (domain_id, name, type, content, ttl, prio, change_date) VALUES ($zoneid, '$name', '$type', '$content', $ttl, '$prio', $change)");

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_record"));

	}

}

/*

 * Delete a record by a given id.

 * return values: true, this function is always succesful.

 */

function delete_record($id)

{

	global $db;

	// Check if the user has access.

	if (!xs(recid_to_domid($id)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	// Retrieve the type of record to see if we can actually remove it.

	$recordtype = get_recordtype_from_id($id);

	// If the record type is NS and the user tries to delete it while ALLOW_NS_EDIT is set to 0

	// OR

	// check if the name of the record isnt the domain name (if so it should delete all records)

	// OR

	// check if we are dealing with a SOA field (same story as NS)

	if (($recordtype == "NS" && $GLOBALS["ALLOW_NS_EDIT"] != 1 && (get_name_from_record_id($id) == get_domain_name_from_id(recid_to_domid($id)))) || ($recordtype == "SOA" && $GLOBALS["ALLOW_SOA_EDIT"] != 1))

	{

		error(sprintf(ERR_RECORD_DELETE_TYPE_DENIED, $recordtype));

	}

	if (is_numeric($id))

	{

	    $did = recid_to_domid($id);

		$db->query('DELETE FROM records WHERE id=' . $id . ' LIMIT 1');

		if ($type != 'SOA')

		{

			update_soa_serial($did);

		}

        // $id doesnt exist in database anymore so its deleted or just not there which means "true"	

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "delete_record"));

	}

}

/*

 * Add a domain to the database.

 * A domain is name obligatory, so is an owner.

 * return values: true when succesful.

 * Empty means templates dont have to be applied.

 * --------------------------------------------------------------------------

 * This functions eats a template and by that it inserts various records.

 * first we start checking if something in an arpa record

 * remember to request nextID's from the database to be able to insert record.

 * if anything is invalid the function will error

 */

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// If domain, owner and mailip are given

	// OR

	// empty is given and owner and domain

	// OR

	// the domain is an arpa record and owner is given

	// THAN

	// Continue this function

	{

                // First insert zone into domain table

                $db->query("INSERT INTO domains (name, type) VALUES ('$domain', '$type')");

                // Determine id of insert zone (in other words, find domain_id)

                $iddomain = $db->lastInsertId('domains', 'id');

                if (PEAR::isError($iddomain)) {

                        die($id->getMessage());

                }

                // Second, insert into zones tables

                $db->query("INSERT INTO zones (domain_id, owner) VALUES ('$iddomain', $owner)");

		{

			{

				{

					{

				}

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_domain"));

	}

}

/*

 * Deletes a domain by a given id.

 * Function always succeeds. If the field is not found in the database, thats what we want anyway.