<?

// Filename: record.inc.php

// Startdate: 26-10-2002

// This file is ought to edit the records in the database.

// Records are domains aswell, they also belong here.

// All database functions are associative.

// use nextID first to get a new id. Then insert it into the database.

// do not rely on auto_increment (see above).

// use dns.inc.php for validation functions.

//

// $Id: record.inc.php,v 1.21 2003/05/10 20:21:01 azurazu Exp $

//

function update_soa_serial($domain_id)

{

    global $db;

	/*

	 * THIS CODE ISNT TESTED THROUGH MUCH YET!

	 * !!!!!!! BETACODE !!!!!!!!!!

	 * Code committed by DeViCeD, Thanks a lot!

	 * Heavily hax0red by Trancer/azurazu

	 *

	 * First we have to check, wheather current searial number 

	 * was already updated on the other nameservers.

	 * If field 'notified_serial' is NULL, then I guess domain is

	 * NATIVE and we don't have any secondary nameservers for this domain.

	 * NOTICE: Serial number *will* be RFC1912 compilant after update 

	 * NOTICE: This function will allow only 100 DNS zone transfers ;-)

	 * YYYYMMDDnn

	 */

	$sqlq = "SELECT `notified_serial` FROM `domains` WHERE `id` = '".$domain_id."'";

	$notified_serial = $db->queryOne($sqlq);

	$sqlq = "SELECT `content` FROM `records` WHERE `type` = 'SOA' AND `domain_id` = '".$domain_id."'";

	$content = $db->queryOne($sqlq);

    $need_to_update = false;

	// Getting the serial field.

	$soa = explode(" ", $content);

	if(empty($notified_serial))

    {

        // Ok native replication, so we have to update.

        $need_to_update = true;

    }

    elseif($notified_serial >= $soa[2])

    {

        $need_to_update = true;

    }

    elseif(strlen($soa[2]) != 10)

    {

        $need_to_update = true;

    }

    else

    {

        $need_to_update = false;

    }

    if($need_to_update)

    {

        // Ok so we have to update it seems.

        $current_serial = $soa[2];

		/*

		 * What we need here (for RFC1912) is YEAR, MONTH and DAY

		 * so let's get it ...

		 */

		$new_serial = date('Ymd'); // we will add revision number later

		if(strncmp($new_serial, $current_serial, 8) === 0)

		{

            /*

             * Ok, so we already made updates tonight

             * let's just increase the revision number

             */				

            $revision_number = (int) substr($current_serial, -2);

            if ($revision_number == 99) return false; // ok, we cannot update anymore tonight

            ++$revision_number;

            // here it is ... same date, new revision

            $new_serial .= str_pad($revision_number, 2, "0", STR_PAD_LEFT);	

		}

 		else

		{

            /*

			 * Current serial is not RFC1912 compilant, so let's make a new one

			 */

 			$new_serial .= '00';

		}

        $soa[2] = $new_serial; // change serial in SOA array

		$new_soa = "";		

		// build new soa and update SQL after that

		for ($i = 0; $i < count($soa); $i++) 

		{	

			$new_soa .= $soa[$i] . " "; 

		}

		$sqlq = "UPDATE `records` SET `content` = '".$new_soa."' WHERE `domain_id` = '".$domain_id."' AND `type` = 'SOA' LIMIT 1";

		$db->Query($sqlq);

		return true;

	}

}  

/*

 * Edit a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function edit_record($recordid, $zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

  	if($content == "")

  	{

  		error(ERR_RECORD_EMPTY_CONTENT);

  	}

  	// Edits the given record (validates specific stuff first)

	if (!xs(recid_to_domid($recordid)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		validate_input($zoneid, $type, $content, $name, $prio, $ttl);

                $change = time();

                $db->query("UPDATE records set name='$name', type='$type', content='$content', ttl='$ttl', prio='$prio', change_date='$change' WHERE id=$recordid");

		/*

		 * Added by DeViCeD - Update SOA Serial number

		 * There should be more checks

		 */

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "edit_record", "no zoneid given"));

	}

}

/*

 * Adds a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function add_record($zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

	if (!xs($zoneid))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		// Check the user input.

		validate_input($zoneid, $type, $content, $name, $prio, $ttl);

		// Generate new timestamp for the daemon

		$change = time();

		// Execute query.

		$db->query("INSERT INTO records (domain_id, name, type, content, ttl, prio, change_date) VALUES ($zoneid, '$name', '$type', '$content', $ttl, '$prio', $change)");

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_record"));

	}

}

function add_supermaster($master_ip, $ns_name, $account)

{

        global $db;

        if (!is_valid_ip($master_ip) && !is_valid_ip6($master_ip))

        {

                error(sprintf(ERR_INV_ARGC, "add_supermaster", "No or no valid ipv4 or ipv6 address given."));

        }

        if (!is_valid_hostname($ns_name))

        {

                error(ERR_DNS_HOSTNAME);

        }

	if (!validate_account($account))

	{

		error(sprintf(ERR_INV_ARGC, "add_supermaster", "given account name is invalid (alpha chars only)"));

	}

        if (supermaster_exists($master_ip))

        {

                error(sprintf(ERR_INV_ARGC, "add_supermaster", "supermaster already exists"));

        }

        else

        {

                $db->query("INSERT INTO supermasters VALUES ('$master_ip', '$ns_name', '$account')");

                return true;

        }

}

function delete_supermaster($master_ip)

{

        global $db;

        if (!level(5))

        {

                error(ERR_LEVEL_5);

        }

        if (is_valid_ip($master_ip) || is_valid_ip6($master_ip))

        {

                $db->query("DELETE FROM supermasters WHERE ip = '$master_ip'");

                return true;

        }

        else

        {

                error(sprintf(ERR_INV_ARGC, "delete_supermaster", "No or no valid ipv4 or ipv6 address given."));

        }

}

function get_supermaster_info_from_ip($master_ip)

{

	global $db;

        if (!level(5))

        {

                error(ERR_LEVEL_5);

        }

        if (is_valid_ip($master_ip) || is_valid_ip6($master_ip))

	{

	        $result = $db->queryRow("SELECT ip,nameserver,account FROM supermasters WHERE ip = '$master_ip'");

		$ret = array(

		"master_ip"	=>              $result["ip"],

		"ns_name"	=>              $result["nameserver"],

		"account"	=>              $result["account"]

		);

		return $ret;	

	}

        else

	{

                error(sprintf(ERR_INV_ARGC, "get_supermaster_info_from_ip", "No or no valid ipv4 or ipv6 address given."));

        }

}

/*

 * Delete a record by a given id.

 * return values: true, this function is always succesful.

 */

function delete_record($id)

{

	global $db;

	// Check if the user has access.

	if (!xs(recid_to_domid($id)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	// Retrieve the type of record to see if we can actually remove it.

	$recordtype = get_recordtype_from_id($id);

	// If the record type is NS and the user tries to delete it while ALLOW_NS_EDIT is set to 0

	// OR

	// check if the name of the record isnt the domain name (if so it should delete all records)

	// OR

	// check if we are dealing with a SOA field (same story as NS)

	if (($recordtype == "NS" && $GLOBALS["ALLOW_NS_EDIT"] != 1 && (get_name_from_record_id($id) == get_domain_name_from_id(recid_to_domid($id)))) || ($recordtype == "SOA" && $GLOBALS["ALLOW_SOA_EDIT"] != 1))

	{

		error(sprintf(ERR_RECORD_DELETE_TYPE_DENIED, $recordtype));

	}

	if (is_numeric($id))

	{

	    $did = recid_to_domid($id);

		$db->query('DELETE FROM records WHERE id=' . $id . ' LIMIT 1');

		if ($type != 'SOA')

		{

			update_soa_serial($did);

		}

        // $id doesnt exist in database anymore so its deleted or just not there which means "true"	

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "delete_record"));

	}

}

/*

 * Add a domain to the database.

 * A domain is name obligatory, so is an owner.

 * return values: true when succesful.

 * Empty means templates dont have to be applied.

 * --------------------------------------------------------------------------

 * This functions eats a template and by that it inserts various records.

 * first we start checking if something in an arpa record

 * remember to request nextID's from the database to be able to insert record.

 * if anything is invalid the function will error

 */

function add_domain($domain, $owner, $webip, $mailip, $empty, $type, $slave_master)

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// If domain, owner and mailip are given

	// OR

	// empty is given and owner and domain

	// OR

	// the domain is an arpa record and owner is given

	// OR

	// the type is slave, domain, owner and slave_master are given

	// THAN

	// Continue this function

	if (($domain && $owner && $webip && $mailip) || ($empty && $owner && $domain) || (eregi('in-addr.arpa', $domain) && $owner) || $type=="SLAVE" && $domain && $owner && $slave_master)

	{

                // First insert zone into domain table

                $db->query("INSERT INTO domains (name, type) VALUES ('$domain', '$type')");

                // Determine id of insert zone (in other words, find domain_id)

                $iddomain = $db->lastInsertId('domains', 'id');

                if (PEAR::isError($iddomain)) {

                        die($id->getMessage());

                }

                // Second, insert into zones tables

                $db->query("INSERT INTO zones (domain_id, owner) VALUES ('$iddomain', $owner)");

		if ($type == "SLAVE")

		{

			$db->query("UPDATE domains SET master = '$slave_master' WHERE id = '$iddomain';");

			// Done

			return true;

		}

		else

		{

			// Generate new timestamp. We need this one anyhow.

			$now = time();

			if ($empty && $iddomain)

			{

				// If we come into this if statement we dont want to apply templates.

				// Retrieve configuration settings.

				$ns1 = $GLOBALS["NS1"];

				$hm  = $GLOBALS["HOSTMASTER"];

				$ttl = $GLOBALS["DEFAULT_TTL"];

				// Build and execute query

				$sql = "INSERT INTO records (domain_id, name, content, type, ttl, prio, change_date) VALUES ('$iddomain', '$domain', '$ns1 $hm 1', 'SOA', $ttl, '', '$now')";

				$db->query($sql);

				// Done

				return true;

			}

			elseif ($iddomain)

			{

				// If we are here we want to apply templates.

				global $template;

				// Iterate over the template and apply it for each field.

				foreach ($template as $r)

				{

					// Same type of if statement as previous.

					if ((eregi('in-addr.arpa', $domain) && ($r["type"] == "NS" || $r["type"] == "SOA")) || (!eregi('in-addr.arpa', $domain)))

					{

						// Parse the template.

						$name     = parse_template_value($r["name"], $domain, $webip, $mailip);

						$type     = $r["type"];

						$content  = parse_template_value($r["content"], $domain, $webip, $mailip);

						$ttl      = $r["ttl"];

						$prio     = $r["prio"];

						// If no ttl is given, use the default.

						if (!$ttl)

						{

							$ttl = $GLOBALS["DEFAULT_TTL"];

						}

						$sql = "INSERT INTO records (domain_id, name, content, type, ttl, prio, change_date) VALUES ('$iddomain', '$name','$content','$type','$ttl','$prio','$now')";

						$db->query($sql);

					}

				}

				// All done.

				return true;

			 }

			 else

			 {

				error(sprintf(ERR_INV_ARGC, "add_domain", "could not create zone"));

			 }

		}

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_domain"));

	}

}

/*

 * Deletes a domain by a given id.

 * Function always succeeds. If the field is not found in the database, thats what we want anyway.

 */

function delete_domain($id)

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// See if the ID is numeric.

	if (is_numeric($id))