<?

// +--------------------------------------------------------------------+

// | PowerAdmin                                                         |

// +--------------------------------------------------------------------+

// | Copyright (c) 1997-2002 The PowerAdmin Team                        |

// +--------------------------------------------------------------------+

// | This source file is subject to the license carried by the overal   |

// | program PowerAdmin as found on http://poweradmin.sf.net            |

// | The PowerAdmin program falls under the QPL License:                |

// | http://www.trolltech.com/developer/licensing/qpl.html              |

// +--------------------------------------------------------------------+

// | Authors: Roeland Nieuwenhuis <trancer <AT> trancer <DOT> nl>       |

// |          Sjeemz <sjeemz <AT> sjeemz <DOT> nl>                      |

// +--------------------------------------------------------------------+

// Filename: record.inc.php

// Startdate: 26-10-2002

// This file is ought to edit the records in the database.

// Records are domains aswell, they also belong here.

// All database functions are associative.

// use nextID first to get a new id. Then insert it into the database.

// do not rely on auto_increment (see above).

// use dns.inc.php for validation functions.

//

// $Id: record.inc.php,v 1.21 2003/05/10 20:21:01 azurazu Exp $

//

function update_soa_serial($domain_id)

{

    global $db;

	/*

	 * THIS CODE ISNT TESTED THROUGH MUCH YET!

	 * !!!!!!! BETACODE !!!!!!!!!!

	 * Code committed by DeViCeD, Thanks a lot!

	 * Heavily hax0red by Trancer/azurazu

	 *

	 * First we have to check, wheather current searial number 

	 * was already updated on the other nameservers.

	 * If field 'notified_serial' is NULL, then I guess domain is

	 * NATIVE and we don't have any secondary nameservers for this domain.

	 * NOTICE: Serial number *will* be RFC1912 compilant after update 

	 * NOTICE: This function will allow only 100 DNS zone transfers ;-)

	 * YYYYMMDDnn

	 */

	$sqlq = "SELECT `notified_serial` FROM `domains` WHERE `id` = '".$domain_id."'";

	$notified_serial = $db->getOne($sqlq);

	$sqlq = "SELECT `content` FROM `records` WHERE `type` = 'SOA' AND `domain_id` = '".$domain_id."'";

	$content = $db->getOne($sqlq);

    $need_to_update = false;

	// Getting the serial field.

	$soa = explode(" ", $content);

	if(empty($notified_serial))

    {

        // Ok native replication, so we have to update.

        $need_to_update = true;

    }

    elseif($notified_serial >= $soa[2])

    {

        $need_to_update = true;

    }

    elseif(strlen($soa[2]) != 10)

    {

        $need_to_update = true;

    }

    else

    {

        $need_to_update = false;

    }

    if($need_to_update)

    {

        // Ok so we have to update it seems.

        $current_serial = $soa[2];

		/*

		 * What we need here (for RFC1912) is YEAR, MONTH and DAY

		 * so let's get it ...

		 */

		$new_serial = date('Ymd'); // we will add revision number later

		if(strncmp($new_serial, $current_serial, 8) === 0)

		{

            /*

             * Ok, so we already made updates tonight

             * let's just increase the revision number

             */				

            $revision_number = (int) substr($current_serial, -2);

            if ($revision_number == 99) return false; // ok, we cannot update anymore tonight

            ++$revision_number;

            // here it is ... same date, new revision

            $new_serial .= str_pad($revision_number, 2, "0", STR_PAD_LEFT);	

		}

 		else

		{

            /*

			 * Current serial is not RFC1912 compilant, so let's make a new one

			 */

 			$new_serial .= '00';

		}

        $soa[2] = $new_serial; // change serial in SOA array

		$new_soa = "";		

		// build new soa and update SQL after that

		for ($i = 0; $i < count($soa); $i++) 

		{	

			$new_soa .= $soa[$i] . " "; 

		}

		$sqlq = "UPDATE `records` SET `content` = '".$new_soa."' WHERE `domain_id` = '".$domain_id."' AND `type` = 'SOA' LIMIT 1";

		$db->Query($sqlq);

		return true;

	}

}  

/*

 * Edit a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function edit_record($recordid, $zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

  	if($content == "")

  	{

  		error(ERR_RECORD_EMPTY_CONTENT);

  	}

  	// Edits the given record (validates specific stuff first)

	if (!xs(recid_to_domid($recordid)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		validate_input($recordid, $zoneid, $type, $content, $name, $prio, $ttl);

                $change = time();

                $db->query("UPDATE records set name='$name', type='$type', content='$content', ttl='$ttl', prio='$prio', change_date='$change' WHERE id=$recordid");

		/*

		 * Added by DeViCeD - Update SOA Serial number

		 * There should be more checks

		 */

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "edit_record", "no zoneid given"));

	}

}

/*

 * Adds a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function add_record($zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

	if (!xs($zoneid))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		// Get the Insert ID, we can not rely on auto_increment

		$idrecords = $db->nextID('records');

		// Check the user input.

		validate_input($idrecords, $zoneid, $type, $content, $name, $prio, $ttl);

		// Generate new timestamp for the Daemon

		$change = time();

		// Execute query.

		$db->query("INSERT INTO records (id, domain_id, name, type, content, ttl, prio, change_date) VALUES ($idrecords, $zoneid, '$name', '$type', '$content', $ttl, '$prio', $change)");

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_record"));

	}

}

/*

 * Delete a record by a given id.

 * return values: true, this function is always succesful.

 */

function delete_record($id)

{

	global $db;

	// Check if the user has access.

	if (!xs(recid_to_domid($id)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	// Retrieve the type of record to see if we can actually remove it.

	$recordtype = get_recordtype_from_id($id);

	// If the record type is NS and the user tries to delete it while ALLOW_NS_EDIT is set to 0

	// OR

	// check if the name of the record isnt the domain name (if so it should delete all records)

	// OR

	// check if we are dealing with a SOA field (same story as NS)

	if (($recordtype == "NS" && $GLOBALS["ALLOW_NS_EDIT"] != 1 && (get_name_from_record_id($id) == get_domain_name_from_id(recid_to_domid($id)))) || ($recordtype == "SOA" && $GLOBALS["ALLOW_SOA_EDIT"] != 1))

	{

		error(sprintf(ERR_RECORD_DELETE_TYPE_DENIED, $recordtype));

	}

	if (is_numeric($id))

	{

	    $did = recid_to_domid($id);

		$db->query('DELETE FROM records WHERE id=' . $id . ' LIMIT 1');

		if ($type != 'SOA')

		{

			update_soa_serial($did);

		}

        // $id doesnt exist in database anymore so its deleted or just not there which means "true"	

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "delete_record"));

	}

}

/*

 * Add a domain to the database.

 * A domain is name obligatory, so is an owner.

 * return values: true when succesful.

 * Empty means templates dont have to be applied.

 * --------------------------------------------------------------------------

 * This functions eats a template and by that it inserts various records.

 * first we start checking if something in an arpa record

 * remember to request nextID's from the database to be able to insert record.

 * if anything is invalid the function will error

 */

function add_domain($domain, $owner, $webip, $mailip, $empty, $type)

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// If domain, owner and mailip are given

	// OR

	// empty is given and owner and domain

	// OR

	// the domain is an arpa record and owner is given

	// THAN

	// Continue this function

	if (($domain && $owner && $webip && $mailip) || ($empty && $owner && $domain) || (eregi('in-addr.arpa', $domain) && $owner))

	{

		// Retrieve next zones id.

		$idzones = $db->nextID('zones');

		$iddomains = $db->nextID('domains');

		$db->query("INSERT INTO zones (id, domain_id, owner) VALUES ('$idzones', '$iddomains', $owner)");

		/*

		 * TODO : NATIVE OPERATION ONLY FOR NOW

		 */

		$db->query("INSERT INTO domains (id, name, type) VALUES ('$iddomains', '$domain', '$type')");

		// Generate new timestamp. We need this one anyhow.

		$now = time();

		if ($empty && $iddomains)

		{

			// If we come into this if statement we dont want to apply templates.

			// Retrieve configuration settings.

			$ns1 = $GLOBALS["NS1"];

			$hm  = $GLOBALS["HOSTMASTER"];

			$ttl = $GLOBALS["DEFAULT_TTL"];

			// Retrieve next records id

			$idrecords = $db->nextID('records');

			// Build and execute query

			$sql = "INSERT INTO records (id, domain_id, name, content, type, ttl, prio, change_date) VALUES ('$idrecords', '$iddomains', '$domain', '$ns1 $hm 1', 'SOA', $ttl, '', '$now')";

			$db->query($sql);

			// Done

			return true;

		}

		elseif ($iddomains)

		{

			// If we are here we want to apply templates.

			global $template;

			// Iterate over the template and apply it for each field.

			foreach ($template as $r)

			{

				// Same type of if statement as previous.

				if ((eregi('in-addr.arpa', $domain) && ($r["type"] == "NS" || $r["type"] == "SOA")) || (!eregi('in-addr.arpa', $domain)))

				{

					// Parse the template.

					$name     = parse_template_value($r["name"], $domain, $webip, $mailip);

					$type     = $r["type"];

					$content  = parse_template_value($r["content"], $domain, $webip, $mailip);

					$ttl      = $r["ttl"];

					$prio     = $r["prio"];

					// If no ttl is given, use the default.

					if (!$ttl)

					{

						$ttl = $GLOBALS["DEFAULT_TTL"];

					}

					// Retrieve new record id;

					$idrecords = $db->nextID('records');

					$sql = "INSERT INTO records (id, domain_id, name, content, type, ttl, prio, change_date) VALUES ('$idrecords', '$iddomains', '$name','$content','$type','$ttl','$prio','$now')";

					$db->query($sql);

				}

			}

			// All done.

			return true;

                 }

                 else

                 {

			error(sprintf(ERR_INV_ARGC, "add_domain", "could not create zone"));

                 }

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_domain"));

	}

}

/*

 * Deletes a domain by a given id.

 * Function always succeeds. If the field is not found in the database, thats what we want anyway.

 */

function delete_domain($id)

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// See if the ID is numeric.

	if (is_numeric($id))

	{

		$db->query("DELETE FROM zones WHERE domain_id=$id");

		$db->query("DELETE FROM domains WHERE id=$id");

		$db->query("DELETE FROM records WHERE domain_id=$id");

		// Nothing in the database. If the delete deleted 0 records it means the id is just not there.

		// therefore the is no need to check the affectedRows values.

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "delete_domain", "id must be a number"));

	}

}

/*

 * Gets the id of the domain by a given record id.

 * return values: the domain id that was requested.

 */

function recid_to_domid($id)

{

	global $db;

	if (is_numeric($id))

	{

		$result = $db->query("SELECT domain_id FROM records WHERE id=$id");

		$r = $result->fetchRow();

		return $r["domain_id"];

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "recid_to_domid", "id must be a number"));

	}

}

/*

 * Sorts a zone by records.

 * return values: the sorted zone.

 */

function sort_zone($records)

{

	$ar_so = array();

	$ar_ns = array();

	$ar_mx = array();

	$ar_mb = array();

	$ar_ur = array();

	$ar_ov = array();

	foreach ($records as $c)

	{

		switch(strtoupper($c['type']))

		{

			case "SOA":

				$ar_so[] = $c;

				break;

			case "NS":

				$ar_ns[] = $c;

				break;

			case "MX":

				$ar_mx[] = $c;

				break;

			case "MBOXFW":

				$ar_mb[] = $c;

				break;

			case "URL":

				$ar_ur[] = $c;

				break;

			default:

				$ar_ov[] = $c;

				break;

		}

	}

	$res = array_merge($ar_so, $ar_ns, $ar_mx, $ar_mb, $ar_ur, $ar_ov);

	if (count($records) == count($res))