source: branches/htmlform/cgi-bin/main.cgi@ 470

Last change on this file since 470 was 470, checked in by Kris Deugau, 14 years ago

/branches/htmlfrom

Block edit page should be complete and even valid.
Still has some slight fishyness with column edges not aligned due
to stupid "can't start a form in between table rows" validation spec
idiocy. (<table><form><tr>...</tr></form><form><tr>...</tr></form></table>
is not valid for strict HTML 4.01.)
See #3.

  • Property svn:executable set to *
  • Property svn:keywords set to Date Rev Author
File size: 43.1 KB
Line 
1#!/usr/bin/perl
2# ipdb/cgi-bin/main.cgi
3###
4# SVN revision info
5# $Date: 2010-08-17 19:32:16 +0000 (Tue, 17 Aug 2010) $
6# SVN revision $Rev: 470 $
7# Last update by $Author: kdeugau $
8###
9# Copyright (C) 2004-2010 - Kris Deugau
10
11use strict;
12use warnings;
13use CGI::Carp qw(fatalsToBrowser);
14use CGI::Simple;
15use HTML::Template;
16use DBI;
17use CommonWeb qw(:ALL);
18use CustIDCK;
19use POSIX qw(ceil);
20use NetAddr::IP;
21
22use Sys::Syslog;
23
24# don't remove! required for GNU/FHS-ish install from tarball
25##uselib##
26
27use MyIPDB;
28
29openlog "IPDB","pid","$IPDB::syslog_facility";
30
31# Collect the username from HTTP auth. If undefined, we're in
32# a test environment, or called without a username.
33my $authuser;
34if (!defined($ENV{'REMOTE_USER'})) {
35 $authuser = '__temptest';
36} else {
37 $authuser = $ENV{'REMOTE_USER'};
38}
39
40syslog "debug", "$authuser active, $ENV{'REMOTE_ADDR'}";
41
42# Why not a global DB handle? (And a global statement handle, as well...)
43# Use the connectDB function, otherwise we end up confusing ourselves
44my $ip_dbh;
45my $sth;
46my $errstr;
47($ip_dbh,$errstr) = connectDB_My;
48if (!$ip_dbh) {
49 exitError("Database error: $errstr\n");
50}
51initIPDBGlobals($ip_dbh);
52
53# Set up some globals
54##fixme - need to autofill this somehow
55$ENV{HTML_TEMPLATE_ROOT} = '/home/kdeugau/dev/ipdb/trunk/templates';
56
57my $header = HTML::Template->new(filename => "header.tmpl");
58my $footer = HTML::Template->new(filename => "footer.tmpl");
59
60$header->param(version => $IPDB::VERSION);
61$header->param(addperm => $IPDBacl{$authuser} =~ /a/);
62print "Content-type: text/html\n\n", $header->output;
63
64# Set up the CGI object...
65my $q = new CGI::Simple;
66# ... and get query-string params as well as POST params if necessary
67$q->parse_query_string;
68
69# Convenience; saves changing all references to %webvar
70##fixme: tweak for handling <select multiple='y' size=3> (list with multiple selection)
71my %webvar = $q->Vars;
72
73
74#main()
75
76if(!defined($webvar{action})) {
77 $webvar{action} = "index"; #shuts up the warnings.
78}
79
80my $page = HTML::Template->new(filename => "$webvar{action}.tmpl");
81
82if($webvar{action} eq 'index') {
83 showSummary();
84} elsif ($webvar{action} eq 'addmaster') {
85 if ($IPDBacl{$authuser} !~ /a/) {
86 printError("You shouldn't have been able to get here. Access denied.");
87 } else {
88 open HTML, "<../addmaster.html";
89 print while <HTML>;
90 }
91} elsif ($webvar{action} eq 'newmaster') {
92
93 if ($IPDBacl{$authuser} !~ /a/) {
94 printError("You shouldn't have been able to get here. Access denied.");
95 } else {
96
97 my $cidr = new NetAddr::IP $webvar{cidr};
98
99 print "<div type=heading align=center>Adding $cidr as master block....</div>\n";
100
101 my ($code,$msg) = addMaster($ip_dbh, $webvar{cidr});
102
103 if ($code eq 'FAIL') {
104 carp "Transaction aborted because $msg";
105 syslog "err", "Could not add master block '$webvar{cidr}' to database: '$msg'";
106 printError("Could not add master block $webvar{cidr} to database: $msg");
107 } else {
108 print "<div type=heading align=center>Success!</div>\n";
109 syslog "info", "$authuser added master block $webvar{cidr}";
110 }
111
112 } # ACL check
113
114} # end add new master
115
116elsif($webvar{action} eq 'showmaster') {
117 showMaster();
118}
119elsif($webvar{action} eq 'showrouted') {
120 showRBlock();
121}
122elsif($webvar{action} eq 'listpool') {
123 listPool();
124}
125
126# Not modified or added; just shuffled
127elsif($webvar{action} eq 'assign') {
128 assignBlock();
129}
130elsif($webvar{action} eq 'confirm') {
131 confirmAssign();
132}
133elsif($webvar{action} eq 'insert') {
134 insertAssign();
135}
136elsif($webvar{action} eq 'edit') {
137 edit();
138}
139elsif($webvar{action} eq 'update') {
140 update();
141}
142elsif($webvar{action} eq 'delete') {
143 remove();
144}
145elsif($webvar{action} eq 'finaldelete') {
146 finalDelete();
147}
148elsif ($webvar{action} eq 'nodesearch') {
149 open HTML, "<../nodesearch.html";
150 my $html = join('',<HTML>);
151 close HTML;
152
153 $sth = $ip_dbh->prepare("SELECT node_id, node_name FROM nodes ORDER BY node_type,node_id");
154 $sth->execute() or print "DEBUG: failed retrieval from nodes: ".$sth->errstr,"<br>\n";
155 my $nodes = '';
156 while (my ($nid,$nname) = $sth->fetchrow_array()) {
157 $nodes .= "<option value='$nid'>$nname</option>\n";
158 }
159 $html =~ s/\$\$NODELIST\$\$/$nodes/;
160
161 print $html;
162}
163
164# Default is an error. It shouldn't be possible to easily get here.
165# The only way I can think of offhand is to just call main.cgi bare-
166# which is not in any way guaranteed to provide anything useful.
167else {
168 my $rnd = rand 500;
169 my $boing = sprintf("%.2f", rand 500);
170 my @excuses = ("Aether cloudy. Ask again later.","The gods are unhappy with your sacrifice.",
171 "Because one of it's legs are both the same", "*wibble*",
172 "Hey! Stop pushing my buttons!", "I ain't done nuttin'", "9",
173 "8", "9", "10", "11", "12", "13", "14", "15", "16", "17");
174 printAndExit("Error $boing: ".$excuses[$rnd/30.0]);
175}
176## Finally! Done with that NASTY "case" emulation!
177
178
179
180# Clean up IPDB globals, DB handle, etc.
181finish($ip_dbh);
182
183#print qq(<div align=right style="position: absolute; right: 30px;">).
184# qq(<a href="/ip/cgi-bin/admin.cgi">Admin tools</a></div><br>\n)
185# if $IPDBacl{$authuser} =~ /A/;
186
187## Do all our printing here so we can generate errors and stick them into the slots in the templates.
188
189# can't do this yet, too many blowups
190#print "Content-type: text/html\n\n", $header->output;
191
192print $page->output;
193
194# include the admin tools link in the output?
195$footer->param(adminlink => ($IPDBacl{$authuser} =~ /A/));
196
197print $footer->output;
198
199# Just in case something waaaayyy down isn't in place
200# properly... we exit explicitly.
201exit;
202
203
204
205# args are: a reference to an array with the row to be printed and the
206# class(stylesheet) to use for formatting.
207# if ommitting the class - call the sub as &printRow(\@array)
208sub printRow {
209 my ($rowRef,$class) = @_;
210
211 if (!$class) {
212 print "<tr>\n";
213 } else {
214 print "<tr class=\"$class\">\n";
215 }
216
217ELEMENT: foreach my $element (@$rowRef) {
218 if (!defined($element)) {
219 print "<td></td>\n";
220 next ELEMENT;
221 }
222 $element =~ s|\n|</br>|g;
223 print "<td>$element</td>\n";
224 }
225 print "</tr>";
226} # printRow
227
228
229# Prints table headings. Accepts any number of arguments;
230# each argument is a table heading.
231sub startTable {
232 print qq(<center><table width="98%" cellspacing="0" class="center"><tr>);
233
234 foreach(@_) {
235 print qq(<td class="heading">$_</td>);
236 }
237 print "</tr>\n";
238} # startTable
239
240
241# Initial display: Show master blocks with total allocated subnets, total free subnets
242sub showSummary {
243 my %allocated;
244 my %free;
245 my %routed;
246 my %bigfree;
247
248 # Count the allocations.
249 $sth = $ip_dbh->prepare("select count(*) from allocations where cidr <<= ?");
250 foreach my $master (@masterblocks) {
251 $sth->execute("$master");
252 $sth->bind_columns(\$allocated{"$master"});
253 $sth->fetch();
254 }
255
256 # Count routed blocks
257 $sth = $ip_dbh->prepare("select count(*) from routed where cidr <<= ?");
258 foreach my $master (@masterblocks) {
259 $sth->execute("$master");
260 $sth->bind_columns(\$routed{"$master"});
261 $sth->fetch();
262 }
263
264 # Count the free blocks.
265 $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ? and ".
266 "(routed='y' or routed='n')");
267 foreach my $master (@masterblocks) {
268 $sth->execute("$master");
269 $sth->bind_columns(\$free{"$master"});
270 $sth->fetch();
271 }
272
273 # Find the largest free block in each master
274 $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? and ".
275 "(routed='y' or routed='n') order by maskbits limit 1");
276 foreach my $master (@masterblocks) {
277 $sth->execute("$master");
278 $sth->bind_columns(\$bigfree{"$master"});
279 $sth->fetch();
280 }
281
282 # Assemble the data to stuff into the template.
283 my @masterlist;
284 my $rowclass=0;
285 foreach my $master (@masterblocks) {
286 my %row = (rowclass => "row$rowclass",
287 master => "$master",
288 routed => $routed{"$master"},
289 allocated => $allocated{"$master"},
290 free => $free{"$master"},
291 bigfree => ( ($bigfree{"$master"} eq '') ? ("&lt;NONE&gt;") : ("/".$bigfree{"$master"}) )
292 );
293 push (@masterlist, \%row);
294 $rowclass++; $rowclass = $rowclass % 2;
295 }
296 $page->param(masterlist => \@masterlist);
297
298 $page->param(addmaster => ($IPDBacl{$authuser} =~ /a/) );
299
300} # showSummary
301
302
303# Display detail on master
304# Alrighty then! We're showing routed blocks within a single master this time.
305# We should be able to steal code from showSummary(), and if I'm really smart
306# I'll figger a way to munge the two together. (Once I've done that, everything
307# else should follow. YMMV.)
308sub showMaster {
309
310 $page->param(master => $webvar{block});
311
312 my %allocated;
313 my %free;
314 my %cities;
315 my %bigfree;
316
317 my $master = new NetAddr::IP $webvar{block};
318 my @localmasters;
319
320 # Fetch only the blocks relevant to this master
321 $sth = $ip_dbh->prepare("select cidr,city from routed where cidr <<= '$master' order by cidr");
322 $sth->execute();
323
324 my $i=0;
325 while (my @data = $sth->fetchrow_array()) {
326 my $cidr = new NetAddr::IP $data[0];
327 $localmasters[$i++] = $cidr;
328 $free{"$cidr"} = 0;
329 $allocated{"$cidr"} = 0;
330 $bigfree{"$cidr"} = 128;
331 # Retain the routing destination
332 $cities{"$cidr"} = $data[1];
333 }
334
335 # Check if there were actually any blocks routed from this master
336 if ($i > 0) {
337
338 # Count the allocations
339 $sth = $ip_dbh->prepare("select count(*) from allocations where cidr <<= ?");
340 foreach my $master (@localmasters) {
341 $sth->execute("$master");
342 $sth->bind_columns(\$allocated{"$master"});
343 $sth->fetch();
344 }
345
346 # Count the free blocks.
347 $sth = $ip_dbh->prepare("select count(*) from freeblocks where cidr <<= ? and ".
348 "(routed='y' or routed='n')");
349 foreach my $master (@localmasters) {
350 $sth->execute("$master");
351 $sth->bind_columns(\$free{"$master"});
352 $sth->fetch();
353 }
354
355 # Get the size of the largest free block
356 $sth = $ip_dbh->prepare("select maskbits from freeblocks where cidr <<= ? and ".
357 "(routed='y' or routed='n') order by maskbits limit 1");
358 foreach my $master (@localmasters) {
359 $sth->execute("$master");
360 $sth->bind_columns(\$bigfree{"$master"});
361 $sth->fetch();
362 }
363
364 my @routed;
365 my $rowclass = 0;
366 foreach my $master (@localmasters) {
367 my %row = (
368 rowclass => $rowclass % 2,
369 block => "$master",
370 city => $cities{"$master"},
371 nsubs => $allocated{"$master"},
372 nfree => $free{"$master"},
373 lfree => ( ($bigfree{"$master"} eq 128) ? ("&lt;NONE&gt;") : ("/".$bigfree{"$master"}) )
374 );
375 push @routed, \%row;
376 $rowclass++;
377 }
378 $page->param(routedlist => \@routed);
379
380 } # end check for existence of routed blocks in master
381
382 $page->param(delmaster => ($IPDBacl{$authuser} =~ /d/));
383
384 # Snag the free blocks.
385 my $count = 0;
386 $sth = $ip_dbh->prepare("select cidr from freeblocks where cidr <<='$master' and ".
387 "routed='n' order by cidr");
388 $sth->execute();
389 my @unrouted;
390 my $rowclass = 0;
391 while (my @data = $sth->fetchrow_array()) {
392 my $cidr = new NetAddr::IP $data[0];
393 my %row = (
394 rowclass => $rowclass % 2,
395 fblock => "$cidr",
396 frange => $cidr->range
397 );
398 push @unrouted, \%row;
399 $rowclass++;
400 }
401 $page->param(unrouted => \@unrouted);
402
403} # showMaster
404
405
406# Display details of a routed block
407# Alrighty then! We're showing allocations within a routed block this time.
408# We should be able to steal code from showSummary() and showMaster(), and if
409# I'm really smart I'll figger a way to munge all three together. (Once I've
410# done that, everything else should follow. YMMV.
411# This time, we check the database before spewing, because we may
412# not have anything useful to spew.
413sub showRBlock {
414
415 my $master = new NetAddr::IP $webvar{block};
416
417 $sth = $ip_dbh->prepare("select city from routed where cidr='$master'");
418 $sth->execute;
419 my ($rcity) = $sth->fetchrow_array;
420
421 $page->param(master => "$master");
422 $page->param(rcity => $rcity);
423
424 # Snag the allocations for this block
425 $sth = $ip_dbh->prepare("select cidr,city,type,custid,swip,description".
426 " from allocations where cidr <<= '$master' order by cidr");
427 $sth->execute();
428
429 # hack hack hack
430 # set up to flag swip=y records if they don't actually have supporting data in the customers table
431 my $custsth = $ip_dbh->prepare("select count(*) from customers where custid=?");
432
433 my $rowclass = 0;
434 my @blocklist;
435 while (my ($cidr,$city,$type,$custid,$swip,$desc) = $sth->fetchrow_array()) {
436 $custsth->execute($custid);
437 my ($ncust) = $custsth->fetchrow_array();
438
439 my %row = (
440 rowclass => $rowclass++ % 2,
441 block => $cidr,
442 city => $city,
443 type => $disp_alloctypes{$type},
444 custid => $custid,
445 swip => ($swip eq 'y' ? ($ncust == 0 ? 'Yes<small>*</small>' : 'Yes') : 'No'),
446 desc => $desc
447 );
448 $row{subblock} = ($type =~ /^.r$/); # hmf. wonder why these won't work in the hash declaration...
449 $row{listpool} = ($type =~ /^.[pd]$/);
450 push (@blocklist, \%row);
451 }
452 $page->param(blocklist => \@blocklist);
453
454 $page->param(delrouted => $IPDBacl{$authuser} =~ /d/);
455
456 # Snag the free blocks. We don't really *need* to be pedantic about avoiding
457 # unrouted free blocks, but it's better to let the database do the work if we can.
458 $rowclass = 0;
459 my @unassigned;
460 $sth = $ip_dbh->prepare("select cidr,routed from freeblocks where cidr <<= '$master'".
461 " order by cidr");
462 $sth->execute();
463 while (my ($cidr_db,$routed) = $sth->fetchrow_array()) {
464 my $cidr = new NetAddr::IP $cidr_db;
465
466 my %row = (
467 rowclass => $rowclass++ % 2,
468 subblock => ($routed ne 'y' && $routed ne 'n'),
469 fblock => $cidr_db,
470 fbtype => $routed,
471 frange => $cidr->range,
472 );
473 push @unassigned, \%row;
474 }
475 $page->param(unassigned => \@unassigned);
476
477} # showRBlock
478
479
480# List the IPs used in a pool
481sub listPool {
482
483 my $cidr = new NetAddr::IP $webvar{pool};
484
485 my ($pooltype,$poolcity);
486
487 # Snag pool info for heading
488 $sth = $ip_dbh->prepare("select type,city from allocations where cidr='$cidr'");
489 $sth->execute;
490 $sth->bind_columns(\$pooltype, \$poolcity);
491 $sth->fetch() || carp $sth->errstr;
492
493 print qq(<center><div class="heading">Listing pool IPs for $cidr<br>\n).
494 qq(($disp_alloctypes{$pooltype} in $poolcity)</div></center><br>\n);
495 # Only display net/gw/bcast if it's a "real" netblock and not a PPP(oE) lunacy
496 if ($pooltype =~ /^.d$/) {
497 print qq(<div class="indent"><b>Reserved IPs:</b><br>\n);
498 print qq(<div class="indent"><table><tr class=color1><td>Network IP:</td><td>).
499 $cidr->addr."</td></tr>\n";
500 $cidr++;
501 print "<tr class=color2><td>Gateway:</td><td>".$cidr->addr."</td></tr>\n";
502 $cidr--; $cidr--;
503 print "<tr class=color1><td>Broadcast:</td><td>".$cidr->addr."</td></tr>\n".
504 "<tr><td>Netmask:</td><td>".$cidr->mask."</td></tr>\n".
505 "</table></div></div>\n";
506 }
507
508# probably have to add an "edit IP allocation" link here somewhere.
509
510 startTable('IP','Customer ID','Available?','Description','');
511 $sth = $ip_dbh->prepare("select ip,custid,available,description,type".
512 " from poolips where pool='$webvar{pool}' order by ip");
513 $sth->execute;
514 my $count = 0;
515 while (my @data = $sth->fetchrow_array) {
516 # pool,ip,custid,city,ptype,available,notes,description,circuitid
517 # ip,custid,available,description,type
518 # If desc is "null", make it not null. <g>
519 if ($data[3] eq '') {
520 $data[3] = '&nbsp;';
521 }
522 # Some nice hairy Perl to decide whether to allow unassigning each IP
523 # -> if $data[2] (aka poolips.available) == 'n' then we print the unassign link
524 # else we print a blank space
525 my @row = ( qq(<a href="/ip/cgi-bin/main.cgi?action=edit&block=$data[0]">$data[0]</a>),
526 $data[1],$data[2],$data[3],
527 ( (($data[2] eq 'n') && ($IPDBacl{$authuser} =~ /d/)) ?
528 ("<a href=\"/ip/cgi-bin/main.cgi?action=delete&block=$data[0]&".
529 "alloctype=$data[4]\">Unassign this IP</a>") :
530 ("&nbsp;") )
531 );
532 printRow(\@row, 'color1') if($count%2==0);
533 printRow(\@row, 'color2') if($count%2!=0);
534 $count++;
535 }
536 print "</table>\n";
537
538} # end listPool
539
540
541# Show "Add new allocation" page. Note that the actual page may
542# be one of two templates, and the lists come from the database.
543sub assignBlock {
544
545 if ($IPDBacl{$authuser} !~ /a/) {
546 printError("You shouldn't have been able to get here. Access denied.");
547 return;
548 }
549
550 # hack pthbttt eww
551 $webvar{block} = '' if !$webvar{block};
552
553# hmm. TMPL_IF block and TMPL_ELSE block on these instead?
554 $page->param(rowa => 'row'.($webvar{block} eq '' ? 1 : 0));
555 $page->param(rowb => 'row'.($webvar{block} eq '' ? 0 : 1));
556 $page->param(block => $webvar{block}); # fb-assign flag, if block is set, we're in fb-assign
557 $page->param(iscontained => ($webvar{fbtype} && $webvar{fbtype} ne 'y'));
558
559 # New special case- block to assign is specified
560 if ($webvar{block} ne '') {
561 my $block = new NetAddr::IP $webvar{block};
562
563 # Handle contained freeblock allocation.
564 # This is a little dangerous, as it's *theoretically* possible to
565 # get fbtype='n' (aka a non-routed freeblock). However, should
566 # someone manage to get there, they get what they deserve.
567 if ($webvar{fbtype} ne 'y') {
568 # Snag the type of the container block from the database.
569 $sth = $ip_dbh->prepare("select type from allocations where cidr >>='$block'");
570 $sth->execute;
571 my @data = $sth->fetchrow_array;
572 $data[0] =~ s/c$/r/; # Munge the type into the correct form
573 $page->param(fbdisptype => $list_alloctypes{$data[0]});
574 $page->param(type => $data[0]);
575 } else {
576 $sth = $ip_dbh->prepare("select type,listname from alloctypes where listorder < 500 ".
577 "and type not like '_i' and type not like '_r' order by listorder");
578 $sth->execute;
579 my @data = $sth->fetchrow_array;
580 my @typelist;
581 my $selflag = 0;
582 while (my @data = $sth->fetchrow_array) {
583 my %row = (tval => $data[0],
584 type => $data[1],
585 sel => ($selflag == 0 ? ' selected' : '')
586 );
587 push (@typelist, \%row);
588 $selflag++;
589 }
590 $page->param(typelist => \@typelist);
591 }
592 } else {
593 my @masterlist;
594 foreach my $master (@masterblocks) {
595 my %row = (master => "$master");
596 push (@masterlist, \%row);
597 }
598 $page->param(masterlist => \@masterlist);
599
600 my @pops;
601 foreach my $pop (@poplist) {
602 my %row = (pop => $pop);
603 push (@pops, \%row);
604 }
605 $page->param(pops => \@pops);
606
607 # could arguably include routing (500) in the list, but ATM it doesn't
608 # make sense, and in any case that shouldn't be structurally possible here.
609 $sth = $ip_dbh->prepare("select type,listname from alloctypes where listorder <= 500 order by listorder");
610 $sth->execute;
611 my @typelist;
612 my $selflag = 0;
613 while (my @data = $sth->fetchrow_array) {
614 my %row = (tval => $data[0],
615 type => $data[1],
616 sel => ($selflag == 0 ? ' selected' : '')
617 );
618 push (@typelist, \%row);
619 $selflag++;
620 }
621 $page->param(typelist => \@typelist);
622 }
623
624 my @cities;
625 foreach my $city (@citylist) {
626 my %row = (city => $city);
627 push (@cities, \%row);
628 }
629 $page->param(citylist => \@cities);
630
631## node hack
632 $sth = $ip_dbh->prepare("SELECT node_id, node_name FROM nodes ORDER BY node_type,node_id");
633 $sth->execute() or print "DEBUG: failed retrieval from nodes: ".$sth->errstr,"<br>\n";
634 my @nodes;
635 while (my ($nid,$nname) = $sth->fetchrow_array()) {
636 my %row = (nid => $nid, nname => $nname);
637 push (@nodes, \%row);
638 }
639 $page->param(nodelist => \@nodes);
640## end node hack
641
642 $page->param(privdata => $IPDBacl{$authuser} =~ /s/);
643
644} # assignBlock
645
646
647# Take info on requested IP assignment and see what we can provide.
648sub confirmAssign {
649 if ($IPDBacl{$authuser} !~ /a/) {
650 printError("You shouldn't have been able to get here. Access denied.");
651 return;
652 }
653
654 my $cidr;
655 my $alloc_from;
656
657 # Going to manually validate some items.
658 # custid and city are automagic.
659 return if !validateInput();
660
661# Several different cases here.
662# Static IP vs netblock
663# + Different flavours of static IP
664# + Different flavours of netblock
665
666 if ($webvar{alloctype} =~ /^.i$/) {
667 my ($base,undef) = split //, $webvar{alloctype}; # split into individual chars
668
669# Ewww. But it works.
670 $sth = $ip_dbh->prepare("SELECT (SELECT city FROM allocations WHERE cidr=poolips.pool), ".
671 "poolips.pool, COUNT(*) FROM poolips,allocations WHERE poolips.available='y' AND ".
672 "poolips.pool=allocations.cidr AND allocations.city='$webvar{pop}' AND poolips.type LIKE '".$base."_' ".
673 "GROUP BY pool");
674 $sth->execute;
675 my $optionlist;
676
677 my @poollist;
678 while (my ($poolcit,$poolblock,$poolfree) = $sth->fetchrow_array) {
679 # city,pool cidr,free IP count
680 if ($poolfree > 0) {
681 my %row = (poolcit => $poolcit, poolblock => $poolblock, poolfree => $poolfree);
682 push (@poollist, \%row);
683 }
684 }
685 $page->param(staticip => 1);
686 $page->param(poollist => \@poollist);
687 $cidr = "Single static IP";
688##fixme: need to handle "no available pools"
689
690 } else { # end show pool options
691
692 if ($webvar{fbassign} eq 'y') {
693 $cidr = new NetAddr::IP $webvar{block};
694 $webvar{maskbits} = $cidr->masklen;
695 } else { # done with direct freeblocks assignment
696
697 if (!$webvar{maskbits}) {
698 $page->param(err => "Please specify a CIDR mask length.");
699 return;
700 }
701 my $sql;
702 my $city;
703 my $failmsg;
704 my $extracond = '';
705 if ($webvar{allocfrom} eq '-') {
706 $extracond = ($webvar{allowpriv} eq 'on' ? '' :
707 " and not (cidr <<= '192.168.0.0/16'".
708 " or cidr <<= '10.0.0.0/8'".
709 " or cidr <<= '172.16.0.0/12')");
710 }
711 my $sortorder;
712 if ($webvar{alloctype} eq 'rm') {
713 if ($webvar{allocfrom} ne '-') {
714 $sql = "select * from freeblocks where maskbits<=$webvar{maskbits} and routed='n'".
715 " and cidr <<= '$webvar{allocfrom}'";
716 $sortorder = "maskbits desc";
717 } else {
718 $sql = "select * from freeblocks where maskbits<=$webvar{maskbits} and routed='n'";
719 $sortorder = "maskbits desc";
720 }
721 $failmsg = "No suitable free block found.<br>\nWe do not have a free".
722 " routeable block of that size.<br>\nYou will have to either route".
723 " a set of smaller netblocks or a single smaller netblock.";
724 } else {
725##fixme
726# This section needs serious Pondering.
727 # Pools of most types get assigned to the POP they're "routed from"
728 # This includes WAN blocks and other netblock "containers"
729 # This does NOT include cable pools.
730 if ($webvar{alloctype} =~ /^.[pc]$/) {
731 $city = $webvar{city};
732 $failmsg = "No suitable free block found.<br>\nYou will have to route another".
733 " superblock from one of the<br>\nmaster blocks or chose a smaller".
734 " block size for the pool.";
735 } else {
736 $city = $webvar{pop};
737 $failmsg = "No suitable free block found.<br>\nYou will have to route another".
738 " superblock to $webvar{pop}<br>\nfrom one of the master blocks or".
739 " chose a smaller blocksize.";
740 }
741 if (defined $webvar{allocfrom} && $webvar{allocfrom} ne '-') {
742 $sql = "select cidr from freeblocks where city='$city' and maskbits<=$webvar{maskbits}".
743 " and cidr <<= '$webvar{allocfrom}' and routed='".
744 (($webvar{alloctype} =~ /^(.)r$/) ? "$1" : 'y')."'";
745 $sortorder = "maskbits desc,cidr";
746 } else {
747 $sql = "select cidr from freeblocks where city='$city' and maskbits<=$webvar{maskbits}".
748 " and routed='".(($webvar{alloctype} =~ /^(.)r$/) ? "$1" : 'y')."'";
749 $sortorder = "maskbits desc,cidr";
750 }
751 }
752 $sql = $sql.$extracond." order by ".$sortorder;
753 $sth = $ip_dbh->prepare($sql);
754 $sth->execute;
755 my @data = $sth->fetchrow_array();
756 if ($data[0] eq "") {
757 $page->param(err => $failmsg);
758 return;
759 }
760 $cidr = new NetAddr::IP $data[0];
761 } # check for freeblocks assignment or IPDB-controlled assignment
762
763 $alloc_from = "$cidr";
764
765 # If the block to be allocated is smaller than the one we found,
766 # figure out the "real" block to be allocated.
767 if ($cidr->masklen() ne $webvar{maskbits}) {
768 my $maskbits = $cidr->masklen();
769 my @subblocks;
770 while ($maskbits++ < $webvar{maskbits}) {
771 @subblocks = $cidr->split($maskbits);
772 }
773 $cidr = $subblocks[0];
774 }
775 } # if ($webvar{alloctype} =~ /^.i$/)
776
777## node hack
778 if ($webvar{node} && $webvar{node} ne '-') {
779 $sth = $ip_dbh->prepare("SELECT node_name FROM nodes WHERE node_id=?");
780 $sth->execute($webvar{node});
781 my ($nodename) = $sth->fetchrow_array();
782 $page->param(nodename => $nodename);
783 $page->param(nodeid => $webvar{node});
784 }
785## end node hack
786
787 # Stick in the allocation data
788 $page->param(alloc_type => $webvar{alloctype});
789 $page->param(typefull => $q->escapeHTML($disp_alloctypes{$webvar{alloctype}}));
790 $page->param(alloc_from => $alloc_from);
791 $page->param(cidr => $cidr);
792 $page->param(city => $q->escapeHTML($webvar{city}));
793 $page->param(custid => $webvar{custid});
794 $page->param(circid => $q->escapeHTML($webvar{circid}));
795 $page->param(desc => $q->escapeHTML($webvar{desc}));
796
797##fixme: find a way to have the displayed copy have <br> substitutions
798# for newlines, and the <input> value have either encoded or bare newlines.
799# Also applies to privdata.
800 $page->param(notes => $q->escapeHTML($webvar{notes},'y'));
801
802 # Check to see if user is allowed to do anything with sensitive data
803 my $privdata = '';
804 $page->param(privdata => $q->escapeHTML($webvar{privdata},'y'))
805 if $IPDBacl{$authuser} =~ /s/;
806
807 # Yay! This now has it's very own little home.
808 $page->param(billinguser => $webvar{userid})
809 if $webvar{userid};
810
811##fixme: this is only needed iff confirm.tmpl/confirm.html and
812# confirmRemove.html/confirmRemove.tmpl are merged (quite possible, just
813# a little tedious)
814 $page->param(action => "insert");
815
816} # end confirmAssign
817
818
819# Do the work of actually inserting a block in the database.
820sub insertAssign {
821 if ($IPDBacl{$authuser} !~ /a/) {
822 printError("You shouldn't have been able to get here. Access denied.");
823 return;
824 }
825 # Some things are done more than once.
826 return if !validateInput();
827
828 if (!defined($webvar{privdata})) {
829 $webvar{privdata} = '';
830 }
831 # $code is "success" vs "failure", $msg contains OK for a
832 # successful netblock allocation, the IP allocated for static
833 # IP, or the error message if an error occurred.
834
835 my ($code,$msg) = allocateBlock($ip_dbh, $webvar{fullcidr}, $webvar{alloc_from},
836 $webvar{custid}, $webvar{alloctype}, $webvar{city}, $webvar{desc}, $webvar{notes},
837 $webvar{circid}, $webvar{privdata}, $webvar{node});
838
839 if ($code eq 'OK') {
840 if ($webvar{alloctype} =~ /^.i$/) {
841 $msg =~ s|/32||;
842 $page->param(staticip => $msg);
843 $page->param(custid => $webvar{custid});
844 $page->param(billinguser => $webvar{billinguser});
845 mailNotify($ip_dbh, "a$webvar{alloctype}", "ADDED: $disp_alloctypes{$webvar{alloctype}} allocation",
846 "$disp_alloctypes{$webvar{alloctype}} $msg allocated to customer $webvar{custid}\n".
847 "Description: $webvar{desc}\n\nAllocated by: $authuser\n");
848 } else {
849 my $netblock = new NetAddr::IP $webvar{fullcidr};
850 $page->param(fullcidr => $webvar{fullcidr});
851 $page->param(alloctype => $disp_alloctypes{$webvar{alloctype}});
852 $page->param(custid => $webvar{custid});
853 if ($webvar{alloctype} eq 'pr' && $webvar{billinguser}) {
854 $page->param(billinguser => $webvar{billinguser});
855 $page->param(custid => $webvar{custid});
856 $page->param(netaddr => $netblock->addr);
857 $page->param(masklen => $netblock->masklen);
858 }
859 mailNotify($ip_dbh, "a$webvar{alloctype}", "ADDED: $disp_alloctypes{$webvar{alloctype}} allocation",
860 "$disp_alloctypes{$webvar{alloctype}} $webvar{fullcidr} allocated to customer $webvar{custid}\n".
861 "Description: $webvar{desc}\n\nAllocated by: $authuser\n");
862 }
863 syslog "notice", "$authuser allocated '$webvar{fullcidr}' to '$webvar{custid}' as ".
864 "'$webvar{alloctype}' ($msg)";
865 } else {
866 syslog "err", "Allocation of '$webvar{fullcidr}' to '$webvar{custid}' as ".
867 "'$webvar{alloctype}' by $authuser failed: '$msg'";
868 $page->param(err => "Allocation of $webvar{fullcidr} as '$disp_alloctypes{$webvar{alloctype}}'".
869 " failed:<br>\n$msg\n");
870 }
871
872} # end insertAssign()
873
874
875# Does some basic checks on common input data to make sure nothing
876# *really* weird gets in to the database through this script.
877# Does NOT do complete input validation!!!
878sub validateInput {
879 if ($webvar{city} eq '-') {
880 printError("Please choose a city.");
881 return;
882 }
883
884 # Alloctype check.
885 chomp $webvar{alloctype};
886 if (!grep /$webvar{alloctype}/, keys %disp_alloctypes) {
887 # Danger! Danger! alloctype should ALWAYS be set by a dropdown. Anyone
888 # managing to call things in such a way as to cause this deserves a cryptic error.
889 printError("Invalid alloctype");
890 return;
891 }
892
893 # CustID check
894 # We have different handling for customer allocations and "internal" or "our" allocations
895 if ($def_custids{$webvar{alloctype}} eq '') {
896 if (!$webvar{custid}) {
897 printError("Please enter a customer ID.");
898 return;
899 }
900 if ($webvar{custid} !~ /^(?:\d{10}|\d{7}|STAFF)(?:-\d\d?)?$/) {
901 # Force uppercase for now...
902 $webvar{custid} =~ tr/a-z/A-Z/;
903 # Crosscheck with billing.
904 my $status = CustIDCK->custid_exist($webvar{custid});
905 if ($CustIDCK::Error) {
906 printError("Error verifying customer ID: ".$CustIDCK::ErrMsg);
907 return;
908 }
909 if (!$status) {
910 printError("Customer ID not valid. Make sure the Customer ID ".
911 "is correct.<br>\nUse STAFF for staff static IPs, and $IPDB::defcustid for any other ".
912 "non-customer assignments.");
913 return;
914 }
915 }
916# print "<!-- [ In validateInput(). Insert customer ID cross-check here. ] -->\n";
917 } else {
918 # New! Improved! And now Loaded From The Database!!
919 if ((!$webvar{custid}) || ($webvar{custid} ne 'STAFF')) {
920 $webvar{custid} = $def_custids{$webvar{alloctype}};
921 }
922 }
923
924 # Check POP location
925 my $flag;
926 if ($webvar{alloctype} eq 'rm') {
927 $flag = 'for a routed netblock';
928 foreach (@poplist) {
929 if (/^$webvar{city}$/) {
930 $flag = 'n';
931 last;
932 }
933 }
934 } else {
935 $flag = 'n';
936##fixme: hook to force-set POP or city on certain alloctypes
937# if ($webvar{alloctype =~ /foo,bar,bz/ { $webvar{pop} = 'blah'; }
938 if ($webvar{pop} =~ /^-$/) {
939 $flag = 'to route the block from/through';
940 }
941 }
942 if ($flag ne 'n') {
943 printError("Please choose a valid POP location $flag. Valid ".
944 "POP locations are currently:<br>\n".join (" - ", @poplist));
945 return;
946 }
947
948 return 'OK';
949} # end validateInput
950
951
952# Displays details of a specific allocation in a form
953# Allows update/delete
954# action=edit
955sub edit {
956
957 my $sql;
958
959 # Two cases: block is a netblock, or block is a static IP from a pool
960 # because I'm lazy, we'll try to make the SELECT's bring out identical)ish) data
961##fixme: allow "SWIP" (publication to rWHOIS) of static IP data
962 if ($webvar{block} =~ /\/32$/) {
963 $sql = "select ip,custid,type,city,circuitid,description,notes,modifystamp,privdata from poolips where ip='$webvar{block}'";
964 } else {
965 $sql = "select cidr,custid,type,city,circuitid,description,notes,modifystamp,privdata,swip from allocations where cidr='$webvar{block}'"
966 }
967
968 # gotta snag block info from db
969 $sth = $ip_dbh->prepare($sql);
970 $sth->execute;
971 my @data = $sth->fetchrow_array;
972
973 # Clean up extra whitespace on alloc type
974 $data[2] =~ s/\s//;
975
976 # We can't let the city be changed here; this block is a part of
977 # a larger routed allocation and therefore by definition can't be moved.
978 # block and city are static.
979##fixme
980# Needs thinking. Have to allow changes to city to correct errors, no?
981# Also have areas where a routed block at a POP serves "many" cities/towns/named crossroads
982
983# @data: cidr,custid,type,city,circuitid,description,notes,modifystamp,privdata,swip
984
985 $page->param(block => $webvar{block});
986
987 $page->param(custid => $data[1]);
988 $page->param(city => $data[3]);
989 $page->param(circid => $data[4]);
990 $page->param(desc => $data[5]);
991 $page->param(notes => $data[6]);
992
993##fixme The check here should be built from the database
994# Need to expand to support pool types too
995 if ($data[2] =~ /^.[ne]$/ && $IPDBacl{$authuser} =~ /c/) {
996 $page->param(changetype => 1);
997 $page->param(alloctype => [
998 { selme => ($data[2] eq 'me'), type => "me", disptype => "Dialup netblock" },
999 { selme => ($data[2] eq 'de'), type => "de", disptype => "Dynamic DSL netblock" },
1000 { selme => ($data[2] eq 'ce'), type => "ce", disptype => "Dynamic cable netblock" },
1001 { selme => ($data[2] eq 'we'), type => "we", disptype => "Dynamic wireless netblock" },
1002 { selme => ($data[2] eq 'cn'), type => "cn", disptype => "Customer netblock" },
1003 { selme => ($data[2] eq 'en'), type => "en", disptype => "End-use netblock" },
1004 { selme => ($data[2] eq 'in'), type => "in", disptype => "Internal netblock" },
1005 ]
1006 );
1007 } else {
1008 $page->param(disptype => $disp_alloctypes{$data[2]});
1009 $page->param(type => $data[2]);
1010 }
1011
1012## node hack
1013 $sth = $ip_dbh->prepare("SELECT nodes.node_id,node_name FROM nodes INNER JOIN noderef".
1014 " ON nodes.node_id=noderef.node_id WHERE noderef.block='$webvar{block}'");
1015 $sth->execute;
1016 my ($nodeid,$nodename) = $sth->fetchrow_array();
1017 $page->param(havenodeid => $nodeid);
1018
1019 if ($data[2] eq 'fr' || $data[2] eq 'bi') {
1020 $page->param(typesupportsnodes => 1);
1021 $page->param(nodename => $nodename);
1022
1023##fixme: this whole hack needs cleanup and generalization for all alloctypes
1024##fixme: arguably a bug that presence of a nodeid implies it can be changed..
1025# but except for manual database changes, only the two types fr and bi can
1026# (currently) have a nodeid set in the first place.
1027 if ($IPDBacl{$authuser} =~ /c/) {
1028 $sth = $ip_dbh->prepare("SELECT node_id, node_name FROM nodes ORDER BY node_type,node_id");
1029 $sth->execute;
1030 my @nodelist;
1031 while (my ($nid,$nname) = $sth->fetchrow_array()) {
1032 my %row = (
1033 selme => ($nodeid == $nid),
1034 nodeid => $nid,
1035 nodename => $nname,
1036 );
1037 push (@nodelist, \%row);
1038 }
1039 $page->param(nodelist => \@nodelist);
1040 }
1041 }
1042## end node hack
1043
1044 my ($lastmod,undef) = split /\s+/, $data[7];
1045 $page->param(lastmod => $lastmod);
1046
1047 # not happy with the upside-down logic, but...
1048 $page->param(swipable => $data[2] !~ /.i/);
1049 $page->param(swip => $data[10] ne 'n');
1050
1051 # Check to see if we can display sensitive data
1052 $page->param(nocling => $IPDBacl{$authuser} =~ /s/);
1053 $page->param(privdata => $data[8]);
1054
1055 # ACL trickery - these two template booleans control the presence of all form/input tags
1056 $page->param(maychange => $IPDBacl{$authuser} =~ /c/);
1057 $page->param(maydel => $IPDBacl{$authuser} =~ /d/);
1058
1059} # edit()
1060
1061
1062# Stuff new info about a block into the db
1063# action=update
1064sub update {
1065 if ($IPDBacl{$authuser} !~ /c/) {
1066 printError("You shouldn't have been able to get here. Access denied.");
1067 return;
1068 }
1069
1070 # Check to see if we can update restricted data
1071 my $privdata = '';
1072 if ($IPDBacl{$authuser} =~ /s/) {
1073 $privdata = ",privdata='$webvar{privdata}'";
1074 }
1075
1076 # Make sure incoming data is in correct format - custID among other things.
1077 return if !validateInput;
1078
1079 # SQL transaction wrapper
1080 eval {
1081 # Relatively simple SQL transaction here.
1082 my $sql;
1083 if (my $pooltype = ($webvar{alloctype} =~ /^(.)i$/) ) {
1084 $sql = "update poolips set custid='$webvar{custid}',notes='$webvar{notes}',".
1085 "circuitid='$webvar{circid}',description='$webvar{desc}',city='$webvar{city}'".
1086 "$privdata where ip='$webvar{block}'";
1087 } else {
1088 $sql = "update allocations set custid='$webvar{custid}',".
1089 "description='$webvar{desc}',notes='$webvar{notes}',city='$webvar{city}',".
1090 "type='$webvar{alloctype}',circuitid='$webvar{circid}'$privdata,".
1091 "swip='".($webvar{swip} eq 'on' ? 'y' : 'n')."' ".
1092 "where cidr='$webvar{block}'";
1093 }
1094 # Log the details of the change.
1095 syslog "debug", $sql;
1096 $sth = $ip_dbh->prepare($sql);
1097 $sth->execute;
1098## node hack
1099 if ($webvar{node}) {
1100 $ip_dbh->do("DELETE FROM noderef WHERE block='$webvar{block}'");
1101 $sth = $ip_dbh->prepare("INSERT INTO noderef (block,node_id) VALUES (?,?)");
1102 $sth->execute($webvar{block},$webvar{node});
1103 }
1104## end node hack
1105 $ip_dbh->commit;
1106 };
1107 if ($@) {
1108 my $msg = $@;
1109 carp "Transaction aborted because $msg";
1110 eval { $ip_dbh->rollback; };
1111 syslog "err", "$authuser could not update block/IP '$webvar{block}': '$msg'";
1112 printError("Could not update block/IP $webvar{block}: $msg");
1113 return;
1114 }
1115
1116 # If we get here, the operation succeeded.
1117 syslog "notice", "$authuser updated $webvar{block}";
1118##fixme: need to wedge something in to allow "update:field" notifications
1119## hmm. how to tell what changed? O_o
1120mailNotify($ip_dbh, 's:swi', "SWIPed: $disp_alloctypes{$webvar{alloctype}} $webvar{block}",
1121 "$webvar{block} had SWIP status changed to \"Yes\" by $authuser") if $webvar{swip} eq 'on';
1122 open (HTML, "../updated.html")
1123 or croak "Could not open updated.html :$!";
1124 my $html = join('', <HTML>);
1125
1126 # Link back to browse-routed or list-pool page on "Update complete" page.
1127 my $backlink = "/ip/cgi-bin/main.cgi?action=";
1128 my $cblock; # to contain the CIDR of the container block we're retrieving.
1129 my $sql;
1130 if (my $pooltype = ($webvar{alloctype} =~ /^(.)i$/) ) {
1131 $sql = "select pool from poolips where ip='$webvar{block}'";
1132 $backlink .= "listpool&pool=";
1133 } else {
1134 $sql = "select cidr from routed where cidr >>= '$webvar{block}'";
1135 $backlink .= "showrouted&block=";
1136 }
1137 # I define there to be no errors on this operation... so we don't need to check for them.
1138 $sth = $ip_dbh->prepare($sql);
1139 $sth->execute;
1140 $sth->bind_columns(\$cblock);
1141 $sth->fetch();
1142 $sth->finish;
1143 $backlink .= $cblock;
1144
1145my $swiptmp = ($webvar{swip} eq 'on' ? 'Yes' : 'No');
1146 $html =~ s/\$\$BLOCK\$\$/$webvar{block}/g;
1147 $webvar{city} = $q->escapeHTML($webvar{city});
1148 $html =~ s/\$\$CITY\$\$/$webvar{city}/g;
1149 $html =~ s/\$\$ALLOCTYPE\$\$/$webvar{alloctype}/g;
1150 $html =~ s/\$\$TYPEFULL\$\$/$disp_alloctypes{$webvar{alloctype}}/g;
1151 $html =~ s/\$\$CUSTID\$\$/$webvar{custid}/g;
1152 $html =~ s/\$\$SWIP\$\$/$swiptmp/g;
1153 $webvar{circid} = $q->escapeHTML($webvar{circid});
1154 $html =~ s/\$\$CIRCID\$\$/$webvar{circid}/g;
1155 $webvar{desc} = $q->escapeHTML($webvar{desc});
1156 $html =~ s/\$\$DESC\$\$/$webvar{desc}/g;
1157 $webvar{notes} = $q->escapeHTML($webvar{notes});
1158 $html =~ s/\$\$NOTES\$\$/$webvar{notes}/g;
1159 $html =~ s/\$\$BACKLINK\$\$/$backlink/g;
1160 $html =~ s/\$\$BACKBLOCK\$\$/$cblock/g;
1161
1162 if ($IPDBacl{$authuser} =~ /s/) {
1163 $privdata = qq(<tr class="color2"><td valign="top">Restricted data:</td>).
1164 qq(<td class="regular">).$q->escapeHTML($webvar{privdata}).qq(</td></tr>\n);
1165 }
1166 $html =~ s/\$\$PRIVDATA\$\$/$privdata/g;
1167
1168 print $html;
1169
1170} # update()
1171
1172
1173# Delete an allocation.
1174sub remove {
1175 if ($IPDBacl{$authuser} !~ /d/) {
1176 printError("You shouldn't have been able to get here. Access denied.");
1177 return;
1178 }
1179
1180 #show confirm screen.
1181 open HTML, "../confirmRemove.html"
1182 or croak "Could not open confirmRemove.html :$!";
1183 my $html = join('', <HTML>);
1184 close HTML;
1185
1186 # Serves'em right for getting here...
1187 if (!defined($webvar{block})) {
1188 printError("Error 332");
1189 return;
1190 }
1191
1192 my ($cidr, $custid, $type, $city, $circid, $desc, $notes, $alloctype, $privdata);
1193
1194 if ($webvar{alloctype} eq 'rm') {
1195 $sth = $ip_dbh->prepare("select cidr,city from routed where cidr='$webvar{block}'");
1196 $sth->execute();
1197
1198# This feels... extreme.
1199 croak $sth->errstr() if($sth->errstr());
1200
1201 $sth->bind_columns(\$cidr,\$city);
1202 $sth->execute();
1203 $sth->fetch || croak $sth->errstr();
1204 $custid = "N/A";
1205 $alloctype = $webvar{alloctype};
1206 $circid = "N/A";
1207 $desc = "N/A";
1208 $notes = "N/A";
1209
1210 } elsif ($webvar{alloctype} eq 'mm') {
1211 $cidr = $webvar{block};
1212 $city = "N/A";
1213 $custid = "N/A";
1214 $alloctype = $webvar{alloctype};
1215 $circid = "N/A";
1216 $desc = "N/A";
1217 $notes = "N/A";
1218 } elsif ($webvar{alloctype} =~ /^.i$/) { # done with alloctype=[rm]m
1219
1220 # Unassigning a static IP
1221 my $sth = $ip_dbh->prepare("select ip,custid,city,type,notes,circuitid,privdata".
1222 " from poolips where ip='$webvar{block}'");
1223 $sth->execute();
1224# croak $sth->errstr() if($sth->errstr());
1225
1226 $sth->bind_columns(\$cidr, \$custid, \$city, \$alloctype, \$notes, \$circid,
1227 \$privdata);
1228 $sth->fetch() || croak $sth->errstr;
1229
1230 } else { # done with alloctype=~ /^.i$/
1231
1232 my $sth = $ip_dbh->prepare("select cidr,custid,type,city,circuitid,description,notes,privdata".
1233 " from allocations where cidr='$webvar{block}'");
1234 $sth->execute();
1235# croak $sth->errstr() if($sth->errstr());
1236
1237 $sth->bind_columns(\$cidr, \$custid, \$alloctype, \$city, \$circid, \$desc,
1238 \$notes, \$privdata);
1239 $sth->fetch() || carp $sth->errstr;
1240 } # end cases for different alloctypes
1241
1242 # Munge everything into HTML
1243 $html =~ s|Please confirm|Please confirm <b>removal</b> of|;
1244 $html =~ s|\$\$BLOCK\$\$|$cidr|g;
1245 $html =~ s|\$\$TYPEFULL\$\$|$disp_alloctypes{$alloctype}|g;
1246 $html =~ s|\$\$ALLOCTYPE\$\$|$alloctype|g;
1247 $html =~ s|\$\$CITY\$\$|$city|g;
1248 $html =~ s|\$\$CUSTID\$\$|$custid|g;
1249 $html =~ s|\$\$CIRCID\$\$|$circid|g;
1250 $html =~ s|\$\$DESC\$\$|$desc|g;
1251 $html =~ s|\$\$NOTES\$\$|$notes|g;
1252
1253 $html =~ s|\$\$ACTION\$\$|finaldelete|g;
1254
1255 # Set the warning text.
1256 if ($alloctype =~ /^.[pd]$/) {
1257 $html =~ s|<!--warn-->|<tr bgcolor="black"><td colspan="2"><div class="red">Warning: clicking confirm will remove this record entirely.<br>Any IPs allocated from this pool will also be removed!</div></td></tr>|;
1258 } else {
1259 $html =~ s|<!--warn-->|<tr bgcolor="black"><td colspan="2"><div class="red">Warning: clicking confirm will remove this record entirely.</div></td></tr>|;
1260 }
1261
1262 my $i = 1;
1263 # Check to see if user is allowed to do anything with sensitive data
1264 if ($IPDBacl{$authuser} =~ /s/) {
1265 $privdata = qq(<tr class="color).($i%2).qq("><td>Restricted data:</td>).
1266 qq(<td class=regular>$privdata</td></tr>\n);
1267 $i++;
1268 }
1269 $html =~ s/\$\$PRIVDATA\$\$/$privdata/g;
1270
1271 $i = ++$i % 2;
1272 $html =~ s/\$\$BUTTONROWCOLOUR\$\$/color$i/;
1273
1274 print $html;
1275} # end edit()
1276
1277
1278# Delete an allocation. Return it to the freeblocks table; munge
1279# data as necessary to keep as few records as possible in freeblocks
1280# to prevent weirdness when allocating blocks later.
1281# Remove IPs from pool listing if necessary
1282sub finalDelete {
1283 if ($IPDBacl{$authuser} !~ /d/) {
1284 printError("You shouldn't have been able to get here. Access denied.");
1285 return;
1286 }
1287
1288 # need to retrieve block data before deleting so we can notify on that
1289 my ($cidr,$custid,$type,$city,$description) = getBlockData($ip_dbh, $webvar{block});
1290
1291 my ($code,$msg) = deleteBlock($ip_dbh, $webvar{block}, $webvar{alloctype});
1292
1293 if ($code eq 'OK') {
1294 print "<div class=heading align=center>Success! $webvar{block} deallocated.</div>\n";
1295 syslog "notice", "$authuser deallocated '$webvar{alloctype}'-type netblock $webvar{block}".
1296 " $custid, $city, desc='$description'";
1297 mailNotify($ip_dbh, 'da', "REMOVED: $disp_alloctypes{$webvar{alloctype}} $webvar{block}",
1298 "$disp_alloctypes{$webvar{alloctype}} $webvar{block} deallocated by $authuser\n".
1299 "CustID: $custid\nCity: $city\nDescription: $description\n");
1300 } else {
1301 if ($webvar{alloctype} =~ /^.i$/) {
1302 syslog "err", "$authuser could not deallocate static IP '$webvar{block}': '$msg'";
1303 printError("Could not deallocate static IP $webvar{block}: $msg");
1304 } else {
1305 syslog "err", "$authuser could not deallocate netblock '$webvar{block}': '$msg'";
1306 printError("Could not deallocate netblock $webvar{block}: $msg");
1307 }
1308 }
1309
1310} # finalDelete
1311
1312
1313# going, going, gone... this sub to be removed Any Day Real Soon Now(TM)
1314sub exitError {
1315 my $errStr = $_[0];
1316 printHeader('','');
1317 print qq(<center><p class="regular"> $errStr </p>
1318<input type="button" value="Back" onclick="history.go(-1)">
1319</center>
1320);
1321
1322 # We print the footer here, so we don't have to do it elsewhere.
1323 # include the admin tools link in the output?
1324 $footer->param(adminlink => ($IPDBacl{$authuser} =~ /A/));
1325
1326 print $footer->output;
1327
1328 exit;
1329} # errorExit
1330
1331
1332# Just in case we manage to get here.
1333exit 0;
Note: See TracBrowser for help on using the repository browser.