<?

/*  PowerAdmin, a friendly web-based admin tool for PowerDNS.

 *  See <https://rejo.zenger.nl/poweradmin> for more details.

 *

 *  Copyright 2007, 2008  Rejo Zenger <rejo@zenger.nl>

 *

 *  This program is free software: you can redistribute it and/or modify

 *  it under the terms of the GNU General Public License as published by

 *  the Free Software Foundation, either version 3 of the License, or

 *  (at your option) any later version.

 *

 *  This program is distributed in the hope that it will be useful,

 *  but WITHOUT ANY WARRANTY; without even the implied warranty of

 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 *  GNU General Public License for more details.

 *

 *  You should have received a copy of the GNU General Public License

 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.

 */

function update_soa_serial($domain_id)

{

    global $db;

	/*

	 * THIS CODE ISNT TESTED THROUGH MUCH YET!

	 * !!!!!!! BETACODE !!!!!!!!!!

	 * Code committed by DeViCeD, Thanks a lot!

	 * Heavily hax0red by Trancer/azurazu

	 *

	 * First we have to check, wheather current searial number 

	 * was already updated on the other nameservers.

	 * If field 'notified_serial' is NULL, then I guess domain is

	 * NATIVE and we don't have any secondary nameservers for this domain.

	 * NOTICE: Serial number *will* be RFC1912 compilant after update 

	 * NOTICE: This function will allow only 100 DNS zone transfers ;-)

	 * YYYYMMDDnn

	 */

	$sqlq = "SELECT notified_serial FROM domains WHERE id = '".$domain_id."'";

	$notified_serial = $db->queryOne($sqlq);

	$sqlq = "SELECT content FROM records WHERE type = 'SOA' AND domain_id = '".$domain_id."'";

	$content = $db->queryOne($sqlq);

    $need_to_update = false;

	// Getting the serial field.

	$soa = explode(" ", $content);

	if(empty($notified_serial))

    {

        // Ok native replication, so we have to update.

        $need_to_update = true;

    }

    elseif($notified_serial >= $soa[2])

    {

        $need_to_update = true;

    }

    elseif(strlen($soa[2]) != 10)

    {

        $need_to_update = true;

    }

    else

    {

        $need_to_update = false;

    }

    if($need_to_update)

    {

        // Ok so we have to update it seems.

        $current_serial = $soa[2];

		/*

		 * What we need here (for RFC1912) is YEAR, MONTH and DAY

		 * so let's get it ...

		 */

		$new_serial = date('Ymd'); // we will add revision number later

		if(strncmp($new_serial, $current_serial, 8) === 0)

		{

            /*

             * Ok, so we already made updates tonight

             * let's just increase the revision number

             */				

            $revision_number = (int) substr($current_serial, -2);

            if ($revision_number == 99) return false; // ok, we cannot update anymore tonight

            ++$revision_number;

            // here it is ... same date, new revision

            $new_serial .= str_pad($revision_number, 2, "0", STR_PAD_LEFT);	

		}

 		else

		{

            /*

			 * Current serial is not RFC1912 compilant, so let's make a new one

			 */

 			$new_serial .= '00';

		}

        $soa[2] = $new_serial; // change serial in SOA array

		$new_soa = "";		

		// build new soa and update SQL after that

		for ($i = 0; $i < count($soa); $i++) 

		{	

			$new_soa .= $soa[$i] . " "; 

		}

		$sqlq = "UPDATE records SET content = '".$new_soa."' WHERE domain_id = '".$domain_id."' AND type = 'SOA'";

		$db->Query($sqlq);

		return true;

	}

}  

/*

 * Edit a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function edit_record($recordid, $zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

  	if($content == "")

  	{

  		error(ERR_RECORD_EMPTY_CONTENT);

  	}

  	// Edits the given record (validates specific stuff first)

	if (!xs(recid_to_domid($recordid)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		validate_input($zoneid, $type, $content, $name, $prio, $ttl);

                $change = time();

                $db->query("UPDATE records set name='$name', type='$type', content='$content', ttl='$ttl', prio='$prio', change_date='$change' WHERE id=$recordid");

		/*

		 * Added by DeViCeD - Update SOA Serial number

		 * There should be more checks

		 */

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARGC, "edit_record", "no zoneid given"));

	}

}

/*

 * Adds a record.

 * This function validates it if correct it inserts it into the database.

 * return values: true if succesful.

 */

function add_record($zoneid, $name, $type, $content, $ttl, $prio)

{

	global $db;

	if (!xs($zoneid))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	if (is_numeric($zoneid))

	{

		// Check the user input.

		validate_input($zoneid, $type, $content, $name, $prio, $ttl);

		// Generate new timestamp for the daemon

		$change = time();

		// Execute query.

		$db->query("INSERT INTO records (domain_id, name, type, content, ttl, prio, change_date) VALUES ($zoneid, '$name', '$type', '$content', $ttl, '$prio', $change)");

		if ($type != 'SOA')

		{

			update_soa_serial($zoneid);

		}

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "add_record"));

	}

}

function add_supermaster($master_ip, $ns_name, $account)

{

        global $db;

        if (!is_valid_ip($master_ip) && !is_valid_ip6($master_ip))

        {

                error(sprintf(ERR_INV_ARGC, "add_supermaster", "No or no valid ipv4 or ipv6 address given."));

        }

        if (!is_valid_hostname($ns_name))

        {

                error(ERR_DNS_HOSTNAME);

        }

	if (!validate_account($account))

	{

		error(sprintf(ERR_INV_ARGC, "add_supermaster", "given account name is invalid (alpha chars only)"));

	}

        if (supermaster_exists($master_ip))

        {

                error(sprintf(ERR_INV_ARGC, "add_supermaster", "supermaster already exists"));

        }

        else

        {

                $db->query("INSERT INTO supermasters VALUES ('$master_ip', '$ns_name', '$account')");

                return true;

        }

}

function delete_supermaster($master_ip)

{

        global $db;

        if (!level(5))

        {

                error(ERR_LEVEL_5);

        }

        if (is_valid_ip($master_ip) || is_valid_ip6($master_ip))

        {

                $db->query("DELETE FROM supermasters WHERE ip = '$master_ip'");

                return true;

        }

        else

        {

                error(sprintf(ERR_INV_ARGC, "delete_supermaster", "No or no valid ipv4 or ipv6 address given."));

        }

}

function get_supermaster_info_from_ip($master_ip)

{

	global $db;

        if (!level(5))

        {

                error(ERR_LEVEL_5);

        }

        if (is_valid_ip($master_ip) || is_valid_ip6($master_ip))

	{

	        $result = $db->queryRow("SELECT ip,nameserver,account FROM supermasters WHERE ip = '$master_ip'");

		$ret = array(

		"master_ip"	=>              $result["ip"],

		"ns_name"	=>              $result["nameserver"],

		"account"	=>              $result["account"]

		);

		return $ret;	

	}

        else

	{

                error(sprintf(ERR_INV_ARGC, "get_supermaster_info_from_ip", "No or no valid ipv4 or ipv6 address given."));

        }

}

/*

 * Delete a record by a given id.

 * return values: true, this function is always succesful.

 */

function delete_record($id)

{

	global $db;

	// Check if the user has access.

	if (!xs(recid_to_domid($id)))

	{

		error(ERR_RECORD_ACCESS_DENIED);

	}

	// Retrieve the type of record to see if we can actually remove it.

	$recordtype = get_recordtype_from_id($id);

	// If the record type is NS and the user tries to delete it while ALLOW_NS_EDIT is set to 0

	// OR

	// check if the name of the record isnt the domain name (if so it should delete all records)

	// OR

	// check if we are dealing with a SOA field (same story as NS)

	if (($recordtype == "NS" && $GLOBALS["ALLOW_NS_EDIT"] != 1 && (get_name_from_record_id($id) == get_domain_name_from_id(recid_to_domid($id)))) || ($recordtype == "SOA" && $GLOBALS["ALLOW_SOA_EDIT"] != 1))

	{

		error(sprintf(ERR_RECORD_DELETE_TYPE_DENIED, $recordtype));

	}

	if (is_numeric($id))

	{

	    $did = recid_to_domid($id);

		$db->query('DELETE FROM records WHERE id=' . $id );

		if ($type != 'SOA')

		{

			update_soa_serial($did);

		}

        // $id doesnt exist in database anymore so its deleted or just not there which means "true"	

		return true;

	}

	else

	{

		error(sprintf(ERR_INV_ARG, "delete_record"));

	}

}

/*

 * Add a domain to the database.

 * A domain is name obligatory, so is an owner.

 * return values: true when succesful.

 * Empty means templates dont have to be applied.

 * --------------------------------------------------------------------------

 * This functions eats a template and by that it inserts various records.

 * first we start checking if something in an arpa record

 * remember to request nextID's from the database to be able to insert record.

 * if anything is invalid the function will error

 */

function add_domain($domain, $owner, $webip, $mailip, $empty, $type, $slave_master)

{

	global $db;

	if (!level(5))

	{

		error(ERR_LEVEL_5);

	}

	// If domain, owner and mailip are given

	// OR

	// empty is given and owner and domain

	// OR

	// the domain is an arpa record and owner is given

	// OR

	// the type is slave, domain, owner and slave_master are given

	// THAN

	// Continue this function

	if (($domain && $owner && $webip && $mailip) || ($empty && $owner && $domain) || (eregi('in-addr.arpa', $domain) && $owner) || $type=="SLAVE" && $domain && $owner && $slave_master)

	{

                // First insert zone into domain table

                $db->query("INSERT INTO domains (name, type) VALUES ('$domain', '$type')");

                // Determine id of insert zone (in other words, find domain_id)

                $iddomain = $db->lastInsertId('domains', 'id');

                if (PEAR::isError($iddomain)) {

                        die($id->getMessage());

                }

                // Second, insert into zones tables

                $db->query("INSERT INTO zones (domain_id, owner) VALUES ('$iddomain', $owner)");

		if ($type == "SLAVE")

		{

			$db->query("UPDATE domains SET master = '$slave_master' WHERE id = '$iddomain';");

			// Done

			return true;

		}

		else

		{

			// Generate new timestamp. We need this one anyhow.

			$now = time();

			if ($empty && $iddomain)

			{

				// If we come into this if statement we dont want to apply templates.

				// Retrieve configuration settings.

				$ns1 = $GLOBALS["NS1"];

				$hm  = $GLOBALS["HOSTMASTER"];

				$ttl = $GLOBALS["DEFAULT_TTL"];

				// Build and execute query

				$sql = "INSERT INTO records (domain_id, name, content, type, ttl, prio, change_date) VALUES ('$iddomain', '$domain', '$ns1 $hm 1', 'SOA', $ttl, 0, '$now')";

				$db->query($sql);

				// Done

				return true;

			}

			elseif ($iddomain)

			{

				// If we are here we want to apply templates.

				global $template;

				// Iterate over the template and apply it for each field.

				foreach ($template as $r)

				{

					// Same type of if statement as previous.

					if ((eregi('in-addr.arpa', $domain) && ($r["type"] == "NS" || $r["type"] == "SOA")) || (!eregi('in-addr.arpa', $domain)))

					{

						// Parse the template.

						$name     = parse_template_value($r["name"], $domain, $webip, $mailip);

						$type     = $r["type"];

						$content  = parse_template_value($r["content"], $domain, $webip, $mailip);

						$ttl      = $r["ttl"];

						$prio     = intval($r["prio"]);

						// If no ttl is given, use the default.

						if (!$ttl)

						{

							$ttl = $GLOBALS["DEFAULT_TTL"];

						}

						$sql = "INSERT INTO records (domain_id, name, content, type, ttl, prio, change_date) VALUES ('$iddomain', '$name','$content','$type','$ttl','$prio','$now')";

						$db->query($sql);

					}

				}

				// All done.

				return true;