servnest/inc/ns.inc.php

<?php
if (strpos($_SERVER['PHP_SELF'], "inc.php") !== false)
  exit("This file is meant to be included.");

function nsCheckZonePossession($zone) {
  checkAbsoluteDomainFormat($zone);

  $db = new PDO('sqlite:' . DB_PATH);
  $username[0] = $_SESSION['username'];

  $op = $db->prepare('SELECT zone FROM zones WHERE username = ?');
  $op->execute($username);

  $domain = $op->fetch()['zone'];

  while ($domain != NULL) {
    if ($domain === $zone) {
      $owned = true;
      break;
    }
    $domain = $op->fetch()['zone'];
  }

  if (!($owned === true))
    exit("Erreur : Vous ne possédez pas ce domaine sur le serveur de noms !");
}