formulaire ++, debug MX, securité concernant les entrées
Philippe Pittoli
parent
b556491b72
commit
529130953b
|
|
@ -77,6 +77,7 @@ sub update {
|
|||
sub update_raw {
|
||||
my ($self, $zonetext) = @_;
|
||||
|
||||
my $zonefile;
|
||||
my $file = '/tmp/'.$self->zname;
|
||||
|
||||
# write the updated zone file to disk
|
||||
|
|
@ -85,10 +86,17 @@ sub update_raw {
|
|||
print $newzone $zonetext;
|
||||
close $newzone;
|
||||
|
||||
my $zonefile = DNS::ZoneParse->new($file, $self->zname);
|
||||
eval { $zonefile = DNS::ZoneParse->new($file, $self->zname); };
|
||||
|
||||
if( $@ ) {
|
||||
unlink($file);
|
||||
0;
|
||||
}
|
||||
|
||||
unlink($file);
|
||||
|
||||
$self->update($zonefile);
|
||||
1;
|
||||
}
|
||||
|
||||
# sera utile plus tard, pour l'interface
|
||||
|
|
|
|||
|
|
@ -136,14 +136,14 @@ prefix '/domain' => sub {
|
|||
my ($auth_ok, $user, $isadmin) = $app->auth(param('login'),
|
||||
param('password') );
|
||||
|
||||
$app->update_domain_raw(session('login')
|
||||
my $success = $app->update_domain_raw(session('login')
|
||||
, param('zoneupdated')
|
||||
, param('domain'));
|
||||
|
||||
redirect '/domain/details/' . param('domain');
|
||||
}
|
||||
}
|
||||
|
||||
};
|
||||
};
|
||||
|
||||
any ['post', 'get'] => '/update/:domain' => sub {
|
||||
unless( session('login') && param('domain') )
|
||||
|
|
@ -152,75 +152,87 @@ prefix '/domain' => sub {
|
|||
}
|
||||
else
|
||||
{
|
||||
my $type = param('type');
|
||||
my $name = param('name');
|
||||
my $value = param('value');
|
||||
my $ttl = param('ttl');
|
||||
my $type = param('type');
|
||||
my $name = param('name');
|
||||
my $value = param('value');
|
||||
my $ttl = param('ttl');
|
||||
my $priority = param('priority');
|
||||
|
||||
my $app = initco();
|
||||
my ($auth_ok, $user, $isadmin) = $app->auth(param('login'),
|
||||
param('password') );
|
||||
my $zone = $app->get_domain( session('login') , param('domain') );
|
||||
given( $type )
|
||||
{
|
||||
my $app = initco();
|
||||
my ($auth_ok, $user, $isadmin) = $app->auth(param('login'),
|
||||
param('password') );
|
||||
my $zone = $app->get_domain( session('login') , param('domain') );
|
||||
given( $type )
|
||||
{
|
||||
|
||||
when ('A') { my $a=$zone->a();
|
||||
push( @$a, {name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('A') {
|
||||
my $a = $zone->a();
|
||||
push( @$a, {name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
when ('AAAA') { my $aaaa=$zone->aaaa;
|
||||
push(@$aaaa, {name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('AAAA') {
|
||||
my $aaaa = $zone->aaaa;
|
||||
push(@$aaaa, {name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
when ('CNAME') { my $cname=$zone->cname;
|
||||
push(@$cname,
|
||||
{name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('CNAME') {
|
||||
my $cname = $zone->cname;
|
||||
push(@$cname,
|
||||
{name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
when ('MX') { my $ptr=$zone->ptr;
|
||||
push(@$ptr, {name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('MX') {
|
||||
my $mx = $zone->mx;
|
||||
push(@$mx, { name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, priority => $priority
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
when ('PTR') { my $ptr=$zone->ptr;
|
||||
push(@$ptr, {name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('PTR') {
|
||||
my $ptr = $zone->ptr;
|
||||
push(@$ptr, {name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
when ('NS') { my $ns=$zone->ns;
|
||||
push(@$ns, {name => $name,
|
||||
class => "IN",
|
||||
host => $value,
|
||||
ttl => $ttl,
|
||||
ORIGIN => $zone->origin} );
|
||||
}
|
||||
when ('NS') {
|
||||
my $ns = $zone->ns;
|
||||
push(@$ns, {name => $name
|
||||
, class => "IN"
|
||||
, host => $value
|
||||
, ttl => $ttl
|
||||
, ORIGIN => $zone->origin} );
|
||||
}
|
||||
|
||||
}
|
||||
$zone->new_serial();
|
||||
my $cfg = new Config::Simple(dirname(__FILE__).'/../conf/config.ini');
|
||||
my $ed = app::zone::edit->new(zdir=>$cfg->param('zones_path'), zname => param('domain'));
|
||||
$ed->update($zone);
|
||||
redirect '/domain/details/'.param('domain');
|
||||
}
|
||||
};
|
||||
}
|
||||
|
||||
$zone->new_serial();
|
||||
my $cfg = new Config::Simple(dirname(__FILE__).'/../conf/config.ini');
|
||||
my $ed = app::zone::edit->new(zdir=>$cfg->param('zones_path')
|
||||
, zname => param('domain'));
|
||||
|
||||
$ed->update($zone);
|
||||
redirect '/domain/details/'.param('domain');
|
||||
|
||||
}
|
||||
};
|
||||
|
||||
get '/details/:domain' => sub {
|
||||
|
||||
|
|
|
|||
|
|
@ -87,25 +87,65 @@
|
|||
</table>
|
||||
<a href='/domain/details/<% domain %>?expert=1'><button type="button" class="btn btn-primary">Visualisation en mode expert</button></a>
|
||||
|
||||
<br /><br />
|
||||
|
||||
Ajouter un enregistrement : <br />
|
||||
<form action='/domain/update/<% domain %>' method='post' >
|
||||
<hr />
|
||||
<form class="form-horizontal" role="form" action='/domain/update/<% domain %>' method='post' >
|
||||
|
||||
<label for="name">Nom : </label><input type="text" name="name" />
|
||||
<label for="type">Type : </label><select name="type" id="type" >
|
||||
<option value="A">A</option>
|
||||
<option value="AAAA">AAAA</option>
|
||||
<option value="CNAME">CNAME</option>
|
||||
<option value="MX">MX</option>
|
||||
<option value="NS">NS</option>
|
||||
<option value="PTR">PTR</option>
|
||||
</select>
|
||||
<fieldset>
|
||||
<legend>Ajout d'un enregistrement</legend>
|
||||
|
||||
<div class="form-group">
|
||||
<label for="name" class="col-sm-2 control-label">Nom</label>
|
||||
<div class="col-sm-3">
|
||||
<input type="text" id="name" name="name" class="form-control" placeholder="www">
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<label for="type" class="col-sm-2 control-label">Type</label>
|
||||
<div class="col-sm-3">
|
||||
<select class="form-control" name="type" id="type" >
|
||||
<option value="A">A</option>
|
||||
<option value="AAAA">AAAA</option>
|
||||
<option value="CNAME">CNAME</option>
|
||||
<option value="MX">MX</option>
|
||||
<option value="NS">NS</option>
|
||||
<option value="PTR">PTR</option>
|
||||
</select>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<label for="priority" class="col-sm-2 control-label">Priorité (MX)</label>
|
||||
<div class="col-sm-3">
|
||||
<input type="text" id="priority" name="priority" class="form-control" value="10" >
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<label for="value" class="col-sm-2 control-label">Valeur</label>
|
||||
<div class="col-sm-3">
|
||||
<input type="text" id="value" name="value" class="form-control" placeholder="IP ou ndd" >
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="form-group">
|
||||
<label for="input_ttl" class="col-sm-2 control-label">TTL</label>
|
||||
<div class="col-sm-3">
|
||||
<input type="number" id="input_ttl" name="ttl" class="form-control" value="3600" placeholder="3600" >
|
||||
</div>
|
||||
</div>
|
||||
</fieldset>
|
||||
|
||||
<div class="form-group">
|
||||
<div class="col-sm-offset-2 col-sm-3">
|
||||
<button type="submit" class="btn btn-primary">Ajouter</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
</form>
|
||||
|
||||
<label for="value">Valeur : </label><input type="text" id="value" name="value" />
|
||||
<label for="input_ttl">TTL</label><input type="number" id="input_ttl" name="ttl" min='1' value="3600"/>
|
||||
<button type="submit" class="btn btn-sm btn-primary">Valider</button>
|
||||
</form>
|
||||
|
||||
<% END %>
|
||||
|
||||
|
|
|
|||
Reference in New Issue