2021-02-19 12:23:26 +00:00
|
|
|
<?php
|
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
const SOA_VALUES = [
|
2022-11-20 00:05:03 +00:00
|
|
|
'ttl' => 10800,
|
|
|
|
'email' => CONF['ns']['public_soa_email'],
|
|
|
|
'refresh' => 10800,
|
|
|
|
'retry' => 3600,
|
|
|
|
'expire' => 3628800,
|
|
|
|
'negative' => 10800,
|
2023-05-06 00:39:19 +00:00
|
|
|
];
|
2022-11-20 00:05:03 +00:00
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
const MIN_TTL = 300;
|
|
|
|
const DEFAULT_TTL = 10800;
|
|
|
|
const MAX_TTL = 1728000;
|
2022-11-20 00:05:03 +00:00
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
const ALLOWED_TYPES = ['AAAA', 'A', 'TXT', 'SRV', 'MX', 'SVCB', 'HTTPS', 'NS', 'DS', 'CAA', 'CNAME', 'DNAME', 'LOC', 'SSHFP', 'TLSA'];
|
2022-11-20 00:05:03 +00:00
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
const ZONE_MAX_CHARACTERS = 10000;
|
2021-05-16 14:55:39 +00:00
|
|
|
|
|
|
|
function nsParseCommonRequirements() {
|
2022-04-18 14:05:00 +00:00
|
|
|
nsCheckZonePossession($_POST['zone']);
|
2021-07-15 13:36:34 +00:00
|
|
|
|
2022-11-20 00:05:03 +00:00
|
|
|
if (($_POST['subdomain'] === '') OR ($_POST['subdomain'] === '@'))
|
2022-04-18 14:05:00 +00:00
|
|
|
$values['domain'] = $_POST['zone'];
|
|
|
|
else
|
2022-06-15 13:30:18 +00:00
|
|
|
$values['domain'] = formatAbsoluteDomain(formatEndWithDot($_POST['subdomain']) . $_POST['zone']);
|
2021-05-16 14:55:39 +00:00
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
$values['ttl'] = intval($_POST['ttl-value'] * $_POST['ttl-multiplier']);
|
2021-03-02 21:56:38 +00:00
|
|
|
|
2022-11-20 00:05:03 +00:00
|
|
|
if ($values['ttl'] < MIN_TTL)
|
2023-01-21 00:27:52 +00:00
|
|
|
output(403, sprintf(_('TTLs shorter than %s seconds are forbidden.'), MIN_TTL));
|
2022-11-20 00:05:03 +00:00
|
|
|
if ($values['ttl'] > MAX_TTL)
|
2023-01-21 00:27:52 +00:00
|
|
|
output(403, sprintf(_('TTLs longer than %s seconds are forbidden.'), MAX_TTL));
|
2021-03-02 21:56:38 +00:00
|
|
|
|
2022-04-18 14:05:00 +00:00
|
|
|
return $values;
|
2021-03-02 21:56:38 +00:00
|
|
|
}
|
|
|
|
|
2022-12-20 20:17:03 +00:00
|
|
|
function nsListUserZones() {
|
|
|
|
if (isset($_SESSION['id']))
|
|
|
|
return query('select', 'zones', ['username' => $_SESSION['id']], 'zone');
|
|
|
|
return [];
|
2021-04-14 12:56:02 +00:00
|
|
|
}
|
|
|
|
|
2022-06-15 13:30:18 +00:00
|
|
|
function nsCheckZonePossession($zone) {
|
|
|
|
checkAbsoluteDomainFormat($zone);
|
2021-02-19 12:23:26 +00:00
|
|
|
|
2023-01-21 00:27:52 +00:00
|
|
|
if (!in_array($zone, nsListUserZones(), true))
|
|
|
|
output(403, 'You don\'t own this zone on the name server.');
|
2021-02-19 12:23:26 +00:00
|
|
|
}
|
2022-06-18 02:22:05 +00:00
|
|
|
|
2023-06-08 15:36:44 +00:00
|
|
|
function nsDeleteZone($zone, $user_id) {
|
2023-04-27 20:18:03 +00:00
|
|
|
// Remove from Knot configuration
|
|
|
|
knotcConfExec(["unset 'zone[$zone]'"]);
|
|
|
|
|
2023-05-06 00:39:19 +00:00
|
|
|
// Remove Knot zone file
|
|
|
|
if (unlink(CONF['ns']['knot_zones_path'] . '/' . $zone . 'zone') !== true)
|
|
|
|
output(500, 'Failed to remove Knot zone file.');
|
|
|
|
|
|
|
|
// Remove Knot related data
|
|
|
|
exec(CONF['dns']['knotc_path'] . ' --blocking --timeout 3 --force zone-purge ' . $zone . ' +orphan', result_code: $code);
|
|
|
|
if ($code !== 0)
|
|
|
|
output(500, 'Failed to purge zone data.');
|
|
|
|
|
2022-06-18 02:22:05 +00:00
|
|
|
// Remove from database
|
|
|
|
query('delete', 'zones', [
|
|
|
|
'zone' => $zone,
|
2023-06-08 15:36:44 +00:00
|
|
|
'username' => $user_id,
|
2022-06-18 02:22:05 +00:00
|
|
|
]);
|
|
|
|
}
|