<?php

/**
 * This file is part of the Froxlor project.
 * Copyright (c) 2003-2009 the SysCP Team (see authors).
 * Copyright (c) 2010 the Froxlor Team (see authors).
 *
 * For the full copyright and license information, please view the COPYING
 * file that was distributed with this source code. You can also view the
 * COPYING file online at http://files.froxlor.org/misc/COPYING.txt
 *
 * @copyright  (c) the authors
 * @author     Florian Lippert <flo@syscp.org> (2003-2009)
 * @author     Froxlor team <team@froxlor.org> (2010-)
 * @license    GPLv2 http://files.froxlor.org/misc/COPYING.txt
 * @package    Cron
 *
 */


if(@php_sapi_name() != 'cli'
		&& @php_sapi_name() != 'cgi'
		&& @php_sapi_name() != 'cgi-fcgi')
{
	die('This script only works in the shell.');
}

class bind
{
	public $db = false;
	public $logger = false;
	public $debugHandler = false;
	public $settings = array();
	public $nameservers = array();
	public $mxservers = array();
	public $axfrservers = array();

	public function __construct($db, $logger, $debugHandler, $settings) {

		$this->db = $db;
		$this->logger = $logger;
		$this->debugHandler = $debugHandler;
		$this->settings = $settings;

		if ($this->settings['system']['nameservers'] != '') {
			$nameservers = explode(',', $this->settings['system']['nameservers']);
			foreach ($nameservers as $nameserver) {
				$nameserver_ip = gethostbyname(trim($nameserver));
				if (substr($nameserver, -1, 1) != '.') {
					$nameserver.= '.';
				}
				$this->nameservers[] = array(
						'hostname' => trim($nameserver),
						'ip' => trim($nameserver_ip)
				);
			}
		}

		if ($this->settings['system']['mxservers'] != '') {
			$mxservers = explode(',', $this->settings['system']['mxservers']);
			foreach ($mxservers as $mxserver) {
				if (substr($mxserver, -1, 1) != '.') {
					$mxserver.= '.';
				}
				$this->mxservers[] = $mxserver;
			}
		}

		// AXFR server #100
		if ($this->settings['system']['axfrservers'] != '') {
			$axfrservers = explode(',', $this->settings['system']['axfrservers']);
			foreach ($axfrservers as $axfrserver) {
				$this->axfrservers[] = trim($axfrserver);
			}
		}
	}

	public function writeConfigs()
	{
		fwrite($this->debugHandler, '  cron_tasks: Task4 started - Rebuilding froxlor_bind.conf' . "\n");
		$this->logger->logAction(CRON_ACTION, LOG_INFO, 'Task4 started - Rebuilding froxlor_bind.conf');

		if(!file_exists(makeCorrectDir($this->settings['system']['bindconf_directory'] . '/domains/')))
		{
			$this->logger->logAction(CRON_ACTION, LOG_NOTICE, 'mkdir ' . escapeshellarg(makeCorrectDir($this->settings['system']['bindconf_directory'] . '/domains/')));
			safe_exec('mkdir ' . escapeshellarg(makeCorrectDir($this->settings['system']['bindconf_directory'] . '/domains/')));
		}

		$known_filenames = array();

		$bindconf_file = '# ' . $this->settings['system']['bindconf_directory'] . 'froxlor_bind.conf' . "\n" . '# Created ' . date('d.m.Y H:i') . "\n" . '# Do NOT manually edit this file, all changes will be deleted after the next domain change at the panel.' . "\n" . "\n";
		$result_domains = $this->db->query("SELECT `d`.`id`, `d`.`domain`, `d`.`iswildcarddomain`, `d`.`wwwserveralias`, `d`.`customerid`, `d`.`zonefile`, `d`.`bindserial`, `d`.`dkim`, `d`.`dkim_id`, `d`.`dkim_pubkey`, `c`.`loginname`, `c`.`guid` FROM `" . TABLE_PANEL_DOMAINS . "` `d` LEFT JOIN `" . TABLE_PANEL_CUSTOMERS . "` `c` USING(`customerid`) WHERE `d`.`isbinddomain` = '1' ORDER BY `d`.`domain` ASC");

		while($domain = $this->db->fetch_array($result_domains))
		{
			fwrite($this->debugHandler, '  cron_tasks: Task4 - Writing ' . $domain['id'] . '::' . $domain['domain'] . "\n");
			$this->logger->logAction(CRON_ACTION, LOG_INFO, 'Writing ' . $domain['id'] . '::' . $domain['domain']);

			if($domain['zonefile'] == '')
			{
				$zonefile = $this->generateZone($domain);
				$domain['zonefile'] = 'domains/' . $domain['domain'] . '.zone';
				$zonefile_name = makeCorrectFile($this->settings['system']['bindconf_directory'] . '/' . $domain['zonefile']);
				$known_filenames[] = basename($zonefile_name);
				$zonefile_handler = fopen($zonefile_name, 'w');
				fwrite($zonefile_handler, $zonefile);
				fclose($zonefile_handler);
				fwrite($this->debugHandler, '  cron_tasks: Task4 - `' . $zonefile_name . '` zone written' . "\n");
			}

			$bindconf_file.= '# Domain ID: ' . $domain['id'] . ' - CustomerID: ' . $domain['customerid'] . ' - CustomerLogin: ' . $domain['loginname'] . "\n";
			$bindconf_file.= 'zone "' . $domain['domain'] . '" in {' . "\n";
			$bindconf_file.= '	type master;' . "\n";
			$bindconf_file.= '	file "' . makeCorrectFile($this->settings['system']['bindconf_directory'] . '/' . $domain['zonefile']) . '";' . "\n";
			$bindconf_file.= '	allow-query { any; };' . "\n";

			if (count($this->nameservers) > 0
					|| count($this->axfrservers) > 0
			) {
				// open allow-transfer
				$bindconf_file.= '	allow-transfer {' . "\n";
				// put nameservers in allow-transfer
				if (count($this->nameservers) > 0) {
					foreach ($this->nameservers as $ns) {
						$bindconf_file.= '		' . $ns['ip'] . ';' . "\n";
					}
				}
				// AXFR server #100
				if (count($this->axfrservers) > 0) {
					foreach ($this->axfrservers as $axfrserver) {
						if (validate_ip($axfrserver, true) !== false) {
							$bindconf_file.= '		' . $axfrserver . ';' . "\n";
						}
					}
				}
				// close allow-transfer
				$bindconf_file.= '	};' . "\n";
			}

			$bindconf_file.= '};' . "\n";
			$bindconf_file.= "\n";
		}

		$bindconf_file_handler = fopen(makeCorrectFile($this->settings['system']['bindconf_directory'] . '/froxlor_bind.conf'), 'w');
		fwrite($bindconf_file_handler, $bindconf_file);
		fclose($bindconf_file_handler);
		fwrite($this->debugHandler, '  cron_tasks: Task4 - froxlor_bind.conf written' . "\n");
		$this->logger->logAction(CRON_ACTION, LOG_INFO, 'froxlor_bind.conf written');
		safe_exec(escapeshellcmd($this->settings['system']['bindreload_command']));
		fwrite($this->debugHandler, '  cron_tasks: Task4 - Bind9 reloaded' . "\n");
		$this->logger->logAction(CRON_ACTION, LOG_INFO, 'Bind9 reloaded');
		$domains_dir = makeCorrectDir($this->settings['system']['bindconf_directory'] . '/domains/');

		if(file_exists($domains_dir)
				&& is_dir($domains_dir))
		{
			$domain_file_dirhandle = opendir($domains_dir);

			while(false !== ($domain_filename = readdir($domain_file_dirhandle)))
			{
				$full_filename = makeCorrectFile($domains_dir . '/' . $domain_filename);

				if($domain_filename != '.'
						&& $domain_filename != '..'
						&& !in_array($domain_filename, $known_filenames)
						&& is_file($full_filename)
						&& file_exists($full_filename))
				{
					fwrite($this->debugHandler, '  cron_tasks: Task4 - unlinking ' . $domain_filename . "\n");
					$this->logger->logAction(CRON_ACTION, LOG_WARNING, 'Deleting ' . $domain_filename);
					unlink(makeCorrectFile($domains_dir . '/' . $domain_filename));
				}
			}
		}
	}

	protected function generateZone($domain)
	{
		// Array to save all ips needed in the records (already including IN A/AAAA)
		$ip_a_records = array();
		// Array to save DNS records
		$records = array();
		
		$result_ip = $this->db->query("SELECT `p`.`ip` AS `ip` FROM `".TABLE_PANEL_IPSANDPORTS."` `p`, `".TABLE_DOMAINTOIP."` `di` WHERE `di`.`id_domain` = '$domain[id]' AND `p`.`id` = `di`.`id_ipandports` GROUP BY `p`.`ip`;");
		
		while ($ip = $this->db->fetch_array($result_ip)) {
  
			if (filter_var($ip['ip'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
				$ip_a_records[] = "A\t\t" . $ip['ip'];
			}
			elseif (filter_var($ip['ip'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
				$ip_a_records[] = "AAAA\t\t" . $ip['ip'];
			}
			else {
				return ";Error in at least one IP Adress (".$ip['ip']."), could not create zonefile!";
			}
		}

		$date = date('Ymd');
		$bindserial = (preg_match('/^' . $date . '/', $domain['bindserial']) ? $domain['bindserial'] + 1 : $date . '00');
		$this->db->query("UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `bindserial`='" . $bindserial . "' WHERE `id`='" . $domain['id'] . "'");
		$zonefile = '$TTL ' . (int)$this->settings['system']['defaultttl'] . "\n";

		if(count($this->nameservers) == 0)
		{
			$zonefile.= '@ IN SOA ns ' . str_replace('@', '.', $this->settings['panel']['adminmail']) . '. (' . "\n";
		}
		else
		{
			$zonefile.= '@ IN SOA ' . $this->nameservers[0]['hostname'] . ' ' . str_replace('@', '.', $this->settings['panel']['adminmail']) . '. (' . "\n";
		}

		$zonefile.= '	' . $bindserial . ' ; serial' . "\n" . '	8H ; refresh' . "\n" . '	2H ; retry' . "\n" . '	1W ; expiry' . "\n" . '	11h) ; minimum' . "\n";

		// no nameservers given, use all if the A/AAAA entries
		if (count($this->nameservers) == 0) {
			$zonefile .= '@    IN    NS    ns' . "\n";
			foreach ($ip_a_records as $ip_a_record) {
				$zonefile .= 'ns    IN    ' . $ip_a_record . "\n";
			}
		} else {
			foreach ($this->nameservers as $nameserver) {
				$zonefile.= '@    IN    NS    ' . trim($nameserver['hostname']) . "\n";
			}
		}

		if (count($this->mxservers) == 0) {
			$zonefile.= '@	IN	MX	10 mail' . "\n";
			$records[] = 'mail';
			if ($domain['iswildcarddomain'] != '1') {
				$records[] = 'imap';
				$records[] = 'smtp';
				$records[] = 'pop3';
			}
		} else {
			foreach ($this->mxservers as $mxserver) {
				$zonefile.= '@    IN    MX    ' . trim($mxserver) . "\n";
			}

			if ($this->settings['system']['dns_createmailentry'] == '1') {
				$records[] = 'mail';
				if ($domain['iswildcarddomain'] != '1') {
					$records[] = 'imap';
					$records[] = 'smtp';
					$records[] = 'pop3';
				}
			}
		}

		/*
		 * @TODO domain-based spf-settings
		*/
		if ($this->settings['spf']['use_spf'] == '1'
				/*&& $domain['spf'] == '1' */
		) {
			$zonefile.= $this->settings['spf']['spf_entry'] . "\n";
		}

		/**
		 * generate dkim-zone-entries
		 */
		$zonefile.= $this->generateDkim($domain);

		$nssubdomains = $this->db->query('SELECT `domain` FROM `' . TABLE_PANEL_DOMAINS . '` WHERE `isbinddomain`=\'1\' AND `domain` LIKE \'%.' . $domain['domain'] . '\'');

		while($nssubdomain = $this->db->fetch_array($nssubdomains))
		{
			if(preg_match('/^[^\.]+\.' . preg_quote($domain['domain'], '/') . '/', $nssubdomain['domain']))
			{
				$nssubdomain = str_replace('.' . $domain['domain'], '', $nssubdomain['domain']);

				if(count($this->nameservers) == 0)
				{
					$zonefile.= $nssubdomain . '	IN	NS	ns.' . $nssubdomain . "\n";
				}
				else
				{
					foreach($this->nameservers as $nameserver)
					{
						$zonefile.= $nssubdomain . '	IN	NS	' . trim($nameserver['hostname']) . "\n";
					}
				}
			}
		}

		$records[] = '@';
		$records[] = 'www';
 

		if($domain['iswildcarddomain'] == '1')
		{
			$records[] = '*';
		}

		$subdomains = $this->db->query("SELECT `domain` FROM `".TABLE_PANEL_DOMAINS."` WHERE `parentdomainid` = '$domain[id]';");

		while($subdomain = $this->db->fetch_array($subdomains))
		{
			// Listing domains is enough as there currently is no support for choosing 
			// different ips for a subdomain => use same IPs as toplevel
			$records[] = str_replace('.' . $domain['domain'], '', $subdomain['domain']);
			
			// Check whether to add a www.-prefix 
			if ($domain['wwwserveralias'] == '1') {
				$records[] = str_replace('.' . $domain['domain'], '', $subdomain['domain']);
			}
		}

		// Create DNS-Records for every name we have saved
		foreach ($records as $record) {
			// we create an entry for every ip we have saved
			foreach ($ip_a_records as $ip_a_record) {
				$zonefile.= $record . "\tIN\t" . $ip_a_record . "\n";
			}
		}

		return $zonefile;
	}

	private function generateDkim($domain)
	{
		$zone_dkim = '';

		if($this->settings['dkim']['use_dkim'] == '1'
				&& $domain['dkim'] == '1'
				&& $domain['dkim_pubkey'] != '')
		{
			// start
			$dkim_txt = 'v=DKIM1;';

			// algorithm
			$algorithm = explode(',', $this->settings['dkim']['dkim_algorithm']);
			$alg = '';
			foreach($algorithm as $a)
			{
				if($a == 'all')
				{
					break;
				}
				else
				{
					$alg.=$a.':';
				}
			}
			if($alg != '')
			{
				$alg = substr($alg, 0, -1);
				$dkim_txt.= 'h='.$alg.';';
			}

			// notes
			if(trim($this->settings['dkim']['dkim_notes'] != ''))
			{
				$dkim_txt.= 'n='.trim($this->settings['dkim']['dkim_notes']).';';
			}

			// key
			$dkim_txt.= 'k=rsa;p='.trim(preg_replace('/-----BEGIN PUBLIC KEY-----(.+)-----END PUBLIC KEY-----/s', '$1', str_replace("\n", '', $domain['dkim_pubkey']))).';';

			// service-type
			if($this->settings['dkim']['dkim_servicetype'] == '1')
			{
				$dkim_txt.=	's=email;';
			}

			// end-part
			$dkim_txt.='t=s';

			// split if necessary
			$txt_record_split='';
			$lbr=50;
			for($pos=0; $pos<=strlen($dkim_txt)-1; $pos+=$lbr)
			{
				$txt_record_split.= (($pos==0) ? '("' : "\t\t\t\t\t \"") . substr($dkim_txt, $pos, $lbr) . (($pos>=strlen($dkim_txt)-$lbr) ? '")' : '"' ) ."\n";
			}

			// dkim-entry
			$zone_dkim .= 'dkim_' . $domain['dkim_id'] . '._domainkey IN TXT ' . $txt_record_split;

			// adsp-entry
			if($this->settings['dkim']['dkim_add_adsp'] == "1")
			{
				$zone_dkim .= '_adsp._domainkey IN TXT "dkim=';
				switch((int)$this->settings['dkim']['dkim_add_adsppolicy'])
				{
					case 0:
						$zone_dkim .= 'unknown"'. "\n";
						break;
					case 1:
						$zone_dkim .= 'all"'. "\n";
						break;
					case 2:
						$zone_dkim .= 'discardable"'. "\n";
						break;
				}
			}
		}

		return $zone_dkim;
	}

	public function writeDKIMconfigs()
	{
		if($this->settings['dkim']['use_dkim'] == '1')
		{
			if(!file_exists(makeCorrectDir($this->settings['dkim']['dkim_prefix'])))
			{
				$this->logger->logAction(CRON_ACTION, LOG_NOTICE, 'mkdir -p ' . escapeshellarg(makeCorrectDir($this->settings['dkim']['dkim_prefix'])));
				safe_exec('mkdir -p ' . escapeshellarg(makeCorrectDir($this->settings['dkim']['dkim_prefix'])));
			}

			$dkimdomains = '';
			$dkimkeys = '';
			$result_domains = $this->db->query("SELECT `id`, `domain`, `dkim`, `dkim_id`, `dkim_pubkey`, `dkim_privkey` FROM `" . TABLE_PANEL_DOMAINS . "` WHERE `dkim` = '1' ORDER BY `id` ASC");

			while($domain = $this->db->fetch_array($result_domains))
			{
				$privkey_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/dkim_' . $domain['dkim_id']);
				$pubkey_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/dkim_' . $domain['dkim_id'] . '.public');

				if($domain['dkim_privkey'] == ''
						|| $domain['dkim_pubkey'] == '')
				{
					$max_dkim_id = $this->db->query_first("SELECT MAX(`dkim_id`) as `max_dkim_id` FROM `" . TABLE_PANEL_DOMAINS . "`");
					$domain['dkim_id'] = (int)$max_dkim_id['max_dkim_id'] + 1;
					$privkey_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/dkim_' . $domain['dkim_id']);
					safe_exec('openssl genrsa -out ' . escapeshellarg($privkey_filename) . ' ' . $this->settings['dkim']['dkim_keylength']);
					$domain['dkim_privkey'] = file_get_contents($privkey_filename);
					safe_exec("chmod 0640 " . escapeshellarg($privkey_filename));
					$pubkey_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/dkim_' . $domain['dkim_id'] . '.public');
					safe_exec('openssl rsa -in ' . escapeshellarg($privkey_filename) . ' -pubout -outform pem -out ' . escapeshellarg($pubkey_filename));
					$domain['dkim_pubkey'] = file_get_contents($pubkey_filename);
					safe_exec("chmod 0664 " . escapeshellarg($pubkey_filename));
					$this->db->query("UPDATE `" . TABLE_PANEL_DOMAINS . "` SET `dkim_id` = '" . $domain['dkim_id'] . "', `dkim_privkey` = '" . $domain['dkim_privkey'] . "', `dkim_pubkey` = '" . $domain['dkim_pubkey'] . "' WHERE `id` = '" . $domain['id'] . "'");
				}

				if(!file_exists($privkey_filename)
						&& $domain['dkim_privkey'] != '')
				{
					$privkey_file_handler = fopen($privkey_filename, "w");
					fwrite($privkey_file_handler, $domain['dkim_privkey']);
					fclose($privkey_file_handler);
					safe_exec("chmod 0640 " . escapeshellarg($privkey_filename));
				}

				if(!file_exists($pubkey_filename)
						&& $domain['dkim_pubkey'] != '')
				{
					$pubkey_file_handler = fopen($pubkey_filename, "w");
					fwrite($pubkey_file_handler, $domain['dkim_pubkey']);
					fclose($pubkey_file_handler);
					safe_exec("chmod 0664 " . escapeshellarg($pubkey_filename));
				}

				$dkimdomains.= $domain['domain'] . "\n";
				$dkimkeys.= "*@" . $domain['domain'] . ":" . $domain['domain'] . ":" . $privkey_filename . "\n";
			}

			$dkimdomains_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/' . $this->settings['dkim']['dkim_domains']);
			$dkimdomains_file_handler = fopen($dkimdomains_filename, "w");
			fwrite($dkimdomains_file_handler, $dkimdomains);
			fclose($dkimdomains_file_handler);
			$dkimkeys_filename = makeCorrectFile($this->settings['dkim']['dkim_prefix'] . '/' . $this->settings['dkim']['dkim_dkimkeys']);
			$dkimkeys_file_handler = fopen($dkimkeys_filename, "w");
			fwrite($dkimkeys_file_handler, $dkimkeys);
			fclose($dkimkeys_file_handler);

			safe_exec(escapeshellcmd($this->settings['dkim']['dkimrestart_command']));
			fwrite($this->debugHandler, '  cron_tasks: Task4 - Dkim-milter reloaded' . "\n");
			$this->logger->logAction(CRON_ACTION, LOG_INFO, 'Dkim-milter reloaded');
		}
	}
}

?>