Changeset 924 for branches/secondaryzones/dns.cgi

Timestamp:

08/14/25 18:06:51 (10 hours ago)

Author:

Kris Deugau

Message:

/branches/secondaryzones

Complete basic secondary zone add
Fix a minor missing piece filling the newsecondary template
Normalize form field names in the newsecondary template

File:

• branches/secondaryzones/dns.cgi (modified) (1 diff)

branches/secondaryzones/dns.cgi

@@ -649 +649 @@
     $session->clear('errmsg');
     $page->param(zone => $webvar{zone});
+    $page->param(primary => $webvar{primary});
     $page->param(addinactive => $webvar{makeactive} eq 'n');
+  }
+
+} elsif ($webvar{page} eq 'addsecondary') {
+
+  changepage(page => "secondaryzones", errmsg => "You are not permitted to add secondary zones")
+        unless ($permissions{admin} || $permissions{domain_create});
+
+  # security check - does the user have permission to access this entity?
+  if (!check_scope(id => $webvar{group}, type => 'group')) {
+    $session->param('add_failed', 1);
+##fixme:  zone a security risk for XSS?
+    changepage(page => "newsecondary", zone => $webvar{zone},
+        errmsg => "You do not have permission to add a secondary zone to the requested group");
+  }
+
+  $webvar{makeactive} = 0 if !defined($webvar{makeactive});
+
+  my ($code,$msg) = $dnsdb->addSecondary($webvar{zone}, $webvar{group}, $webvar{primary}, ($webvar{makeactive} eq 'on' ? 1 : 0),
+        $webvar{defloc});
+
+  if ($code eq 'OK') {
+    $webvar{zone} = lc($webvar{zone}) if $dnsdb->{lowercase};
+    $dnsdb->mailNotify("New secondary zone created",
+        ($webvar{makeactive} eq 'on' ? 'Active' : 'Inactive').qq( secondary zone "$webvar{zone}" added by ).
+        $session->param("username"));
+    changepage(page => "secondaryzones", id => $msg);
+  } else {
+    $session->param('add_failed', 1);
+##fixme:  zone a security risk for XSS?
+    changepage(page => "newsecondary", errmsg => $msg, zone => $webvar{zone}, primary => $webvar{primary},
+        group => $webvar{group}, makeactive => ($webvar{makeactive} ? 'y' : 'n'), defloc => $webvar{defloc});
   }