1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
|
<!DOCTYPE html>
<html>
<head>
<title>BlaDNS</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<?php
ini_set("display_errors", 1);
ini_set("display_startup_errors", 1);
error_reporting(E_ALL);
define("ZONEROOT", "/var/bind/pri/");
define("ZONESUFFIX", ".zone");
function incrementserial($zonetext) {
$serial = array("");
$newserial = "";
// See if we can detect a serial number
if (preg_match("/\(($|^|[[:space:]])*[0-9]{10}([[:space:]]|;|$|^)+/", $zonetext, $matches)) {;
// Only bother with the first match
preg_match("/[0-9]{10}/", $matches[0], $serial);
$today = date("Ymd00");
if ($serial[0] < $today) {
$newserial = $today;
} else {
$newserial = $serial[0] + 1;
}
// The effort below is gone to to avoid replacing more than one match with our *one* new serial number
// Prepare a string to replace the string we found the serial in
$rebuiltstring = str_replace($serial[0], $newserial, $matches[0]);
// Escape special regex characters since we need to use preg_replace below to limit to one replacement
$escapedmatch = preg_quote($matches[0]);
$zonetext = preg_replace("/" . $escapedmatch . "/", $rebuiltstring, $zonetext, 1);
}
return array($zonetext, $serial[0], $newserial);
}
function sshrun($command) {
$host = "misc.tghost.co.uk";
$user = "bladns.net";
$keypub = "/home/bladns.net/.ssh/id_rsa.pub";
$keypriv = "/home/bladns.net/.ssh/id_rsa";
$connection = ssh2_connect($host, 22, array("hostkey" => "ssh-rsa"));
ssh2_auth_pubkey_file($connection, $user, $keypub, $keypriv);
$stream = ssh2_exec($connection, $command);
stream_set_blocking($stream, true);
$stream_out = ssh2_fetch_stream($stream, SSH2_STREAM_STDIO);
return stream_get_contents($stream_out);
}
function getzone($domain, $password) {
if (!preg_match('/^[0-9A-Za-z\.\-]*$/', $_POST['domain'])) {
die("invalid domain");
}
$string = sshrun("cat " . ZONEROOT . $domain . ZONESUFFIX);
$zonelines = explode("\n", $string);
$zonehash = explode(" ", $zonelines[0]);
if (strtolower($zonehash[sizeof($zonehash) - 1]) == strtolower($password)) {
return $string;
} else {
return;
}
}
function writezone($domain, $password, $zonetext) {
if (!preg_match('/^[0-9A-Za-z\.\-]*$/', $_POST['domain'])) {
die("invalid domain");
}
if (!getzone($domain, $password)) {
die("somehow the password went bad");
}
if (isset($_POST['increment'])) {
$zonetext = incrementserial($zonetext)[0];
}
$zonetext = str_replace('$', '\$', $zonetext);
sshrun("echo -en \"$zonetext\" > " . ZONEROOT . "$domain" . ZONESUFFIX);
sshrun("rndc reload $domain");
}
// Main entry point
if (isset($_POST['domain']) && isset($_POST['password']) && !isset($_POST['zonetext'])) {
if (!preg_match('/^[0-9A-Za-z\.\-]*$/', $_POST['domain'])) {
die("invalid domain");
}
$password = hash("sha256", $_POST['password']);
if ($zonefile = getzone($_POST['domain'], $password)) {
?>
<form action="dns.php" method="post">
<textarea rows="24" cols="80" name="zonetext" autofocus><?php echo $zonefile; ?></textarea><br>
<?php
$arrincrement = incrementserial($zonefile);
if ($arrincrement[0] != $zonefile) {
?>
<input type="checkbox" name="increment" checked>Automatically increment serial number from <?php echo $arrincrement[1] . " to " . $arrincrement[2]; ?>?</input><br>
<?php
}
?>
<input type="hidden" name="domain" value="<?php echo $_POST['domain']; ?>">
<input type="hidden" name="password" value="<?php echo $password; ?>">
<input type="submit" value="Update zonefile"><br>
</form>
<?php
} else {
echo "<p>sorry, the domain or password is wrong :(</p>";
}
} else if (isset($_POST['domain']) && isset($_POST['password']) && isset($_POST['zonetext'])) {
$zonetext = str_replace("\r", '', $_POST['zonetext']);
writezone($_POST['domain'], $_POST['password'], $zonetext);
echo "<p>all done :)</p>";
} else {
?>
<form name="login" action="dns.php" method="post">
Domain name: <input type="text" name="domain" autofocus><br>
Password: <input type="password" name="password"><br>
<input type="submit" value="Login">
</form>
<?php
}
?>
</body>
</html>
|
