Commit graph

40 commits

Author SHA1 Message Date
Stefan Bühler
e8f071f67c Rework session handling; add CSRF tokens and autologin 2014-10-06 21:40:11 +02:00
Stefan Bühler
54fb62b471 Rewrite/Refactoring
- add a lot of permission checks:
  zone edits were completely unchecked (after login); only list and creation were
  protected.
- reduce regular expression usage
- don't use user provided names/ids/urls for requests; instead use them
  to search for the zone in the list of all zones.
- rename 'label' to 'name' in template records ('name' is used in all
  other places)
- make 'localhost' default $apisid
- add 'soa_edit' default
- remove gen_pw/pwgen caller; use openssl instead for random password
- fix a lot of bugs (editrecord, TXT quoting, name checking, ...)
- improve record sorting
2014-10-05 13:08:23 +02:00
Mark Schouten
c5ae169b2d Fix zoneadd logic 2014-10-01 11:38:40 +02:00
Mark Schouten
00c40c047e Create option to not allow a normal user to add zones 2014-10-01 09:46:44 +02:00
Mark Schouten
4881858d68 This should save us another Notice 2014-09-26 14:23:39 +02:00
Mark Schouten
db85fc2dcd Fix typo 2014-09-26 14:22:00 +02:00
Mark Schouten
c4085c6099 Add an empty name-field if none is entered 2014-09-26 14:21:07 +02:00
Mark Schouten
2837657d53 Check some vars before using them 2014-09-26 14:14:30 +02:00
Mark Schouten
7f35f25869 If we login via the apikey, show it in the session
If we add a zone via the api, and the owner doesn't exist yet, create it.
2014-09-26 14:02:22 +02:00
Mark Schouten
6f16859a8e Implement zone-import in NSedit 2014-07-21 15:50:29 +02:00
Mark Schouten
adef2938d6 Delete the zone from the database if it is deleted 2014-07-10 15:11:31 +02:00
Mark Schouten
b746978478 Although PHP doesn't complain about that extra parameter, it does have effect on the sorting algorithm 2014-07-04 15:14:53 +02:00
Mark Schouten
53f7bad16d No, strnatcmp 2014-07-04 15:11:14 +02:00
Mark Schouten
119baad99b Switch to strncmp 2014-07-04 14:43:16 +02:00
Mark Schouten
72d6f5782e Fix sorting of records? 2014-07-04 14:38:50 +02:00
Mark Schouten
6f9f7b3982 Fix typo 2014-07-04 12:50:45 +02:00
Mark Schouten
340d297f71 Aaaaaaaaaaaaaaand fix it 2014-07-04 11:26:05 +02:00
Mark Schouten
65dc663195 Fix typo 2014-07-04 11:16:54 +02:00
Mark Schouten
98dd2695fa Switch from 'querySingle' to 'prepare and bindValue' 2014-07-04 11:14:34 +02:00
Mark Schouten
57a3929f10 Add search field, this may make things easier to find! 2014-07-03 16:05:01 +02:00
Mark Schouten
816790ce4e Fix splicing the right way 2014-06-30 15:17:08 +02:00
Mark Schouten
fa3681cbdb Fix paging 2014-06-30 15:12:03 +02:00
Mark Schouten
33faa1d7a2 An asterisk is allowed 2014-06-30 15:00:19 +02:00
Mark Schouten
e04ca87744 Prepend dstxt with DNSKEY info 2014-06-30 13:20:53 +02:00
Mark Schouten
5009bf8993 Perlism 2014-06-30 13:15:24 +02:00
Mark Schouten
a87e23947e Remove any slashed at the start of the method 2014-06-30 13:12:42 +02:00
Mark Schouten
aa37139301 Fix some inputvalidation and functionnames 2014-06-23 09:55:52 +02:00
Mark Schouten
0d88619edb Also check if the domain has non-ascii-characters 2014-06-12 15:53:16 +02:00
Mark Schouten
06c39599bf Fix the setting for soa-edit 2014-06-10 21:15:47 +02:00
Mark Schouten
f8e7493925 Also fix new index.php and zones.php ... 2014-06-10 11:27:12 +02:00
Mark Schouten
64508a7a51 Import dnssec settings if they exist 2014-06-06 14:46:24 +02:00
Mark Schouten
9854630f68 If the name starts with a ., strip it 2014-06-03 09:27:54 +02:00
Mark Schouten
32e49eae99 Label can be empty 2014-06-03 09:25:08 +02:00
Mark Schouten
a73e3fd1d3 Send soa_edit_api so we don't need to worry about serials anymore. Also, add it as a default to the dist config 2014-05-26 14:15:55 +02:00
Mark Schouten
2eed9b39c0 Fix escaping. Jtable shows (javascript-escaped) content. No other escaping is done on the content-field
For txt-records. First strip quotes surrounding the content and strip from slashes. Then, add slashes and quotes again. This maybe sub-optimal, but works for now.
2014-05-26 13:45:03 +02:00
Mark Schouten
2a6fd69192 Make content safe too 2014-05-26 12:28:16 +02:00
Mark Schouten
a0df8f8413 Fix the validationfunction 2014-05-26 12:20:41 +02:00
Mark Schouten
b457495426 Add validation and 'htmlspecialchars' to keep Teun from breaking stuff 2014-05-26 12:04:24 +02:00
Mark Schouten
858830915f Older PHP breaks on [] 2014-05-26 11:46:41 +02:00
Henjo Hoeksma
296e83fb88 Refactoring 2014-05-23 11:48:19 +02:00
Renamed from htdocs/zones.php (Browse further)