52 lines
1.8 KiB
PHP
52 lines
1.8 KiB
PHP
<?php
|
|
|
|
$_POST['domain'] = formatAbsoluteDomain($_POST['domain']);
|
|
|
|
if (query('select', 'zones', ['zone' => $_POST['domain']], 'zone') !== [])
|
|
output(403, _('This zone already exists on the service.'));
|
|
|
|
exec(CONF['dns']['kdig_path'] . ' ' . ltrim(strstr($_POST['domain'], '.'), '.') . ' NS +short', $parentAuthoritatives);
|
|
if ($parentAuthoritatives === [])
|
|
output(403, _('Parent zone\'s name servers not found.'));
|
|
foreach ($parentAuthoritatives as $parentAuthoritative)
|
|
checkAbsoluteDomainFormat($parentAuthoritative);
|
|
|
|
exec(CONF['dns']['kdig_path'] . ' ' . $_POST['domain'] . ' NS @' . $parentAuthoritatives[0] . ' +noidn', $results);
|
|
if (preg_match('/^' . preg_quote($_POST['domain'], '/') . '[\t ]+[0-9]{1,8}[\t ]+IN[\t ]+NS[\t ]+(?<salt>[0-9a-f]{8})-(?<hash>[0-9a-f]{32})\._domain-verification\.' . preg_quote(SERVER_NAME, '/') . '\.$/Dm', implode(LF, $results), $matches) !== 1)
|
|
output(403, _('NS authentication record not found.'));
|
|
|
|
checkAuthToken($matches['salt'], $matches['hash']);
|
|
|
|
rateLimit();
|
|
|
|
insert('zones', [
|
|
'zone' => $_POST['domain'],
|
|
'username' => $_SESSION['id'],
|
|
]);
|
|
|
|
$knotZonePath = CONF['ns']['knot_zones_path'] . '/' . $_POST['domain'] . 'zone';
|
|
$knotZone = implode(' ', [
|
|
$_POST['domain'],
|
|
SOA_VALUES['ttl'],
|
|
'SOA',
|
|
CONF['ns']['servers'][0],
|
|
SOA_VALUES['email'],
|
|
1,
|
|
SOA_VALUES['refresh'],
|
|
SOA_VALUES['retry'],
|
|
SOA_VALUES['expire'],
|
|
SOA_VALUES['negative'],
|
|
]) . LF;
|
|
foreach (CONF['ns']['servers'] as $server)
|
|
$knotZone .= $_POST['domain'] . ' 86400 NS ' . $server . LF;
|
|
if (is_int(file_put_contents($knotZonePath, $knotZone)) !== true)
|
|
output(500, 'Failed to write new zone file.');
|
|
if (chmod($knotZonePath, 0660) !== true)
|
|
output(500, 'Failed to chmod new zone file.');
|
|
|
|
knotcConfExec([
|
|
"set 'zone[" . $_POST['domain'] . "]'",
|
|
"set 'zone[" . $_POST['domain'] . "].template' 'servnest'",
|
|
]);
|
|
|
|
output(200, _('Zone created.'));
|