<?php
if(is_admin()) {
	if((filter("alphanum", $_POST['name'], "no")) &&
	   (filter("num", $_POST['refresh'], "no")) &&
	   (filter("num", $_POST['retry'], "no")) &&
	   (filter("num", $_POST['expire'], "no")) &&
	   (filter("num", $_POST['ttl'], "no")) &&
	   (filter("alphanum", $_POST['pri_dns'])) &&
	   (filter("alphanum", $_POST['sec_dns'])) &&
	   (filter("num", $_POST['www'])) &&
	   (filter("num", $_POST['mail'])) &&
	   (filter("num", $_POST['ftp']))) {
		$res = $dbconnect->query("SELECT id " .
					 "FROM zones " .
					 "WHERE name = '" . $_POST['name'] . "'"
				   );
		is_error($res);
		if($res->numRows() == 0) {
			$res = $dbconnect->query("INSERT INTO zones " .
							"(name, pri_dns, sec_dns, " .
							"serial, refresh, retry, " .
							"expire, ttl, owner, " .
							"updated) " .
						 "VALUES (" .
							"'" . $_POST['name'] . "', " .
							"'" . $_POST['pri_dns'] . "', " .
							"'" . $_POST['sec_dns'] . "', " .
							date("Ymd") . "00, " .
							$_POST['refresh'] . ", " .
							$_POST['retry'] . ", " .
							$_POST['expire'] . ", " .
							$_POST['ttl'] . ", " .
							$_POST['owner'] . ", " .
							"'yes')"
					   );
			is_error($res);

			// Handle default records: Get new zone id
			if(isset($_POST['www']) || isset($_POST['mail']) || isset($_POST['ftp'])) {
				$id = $dbconnect->getone("SELECT id " .
	 						 "FROM zones " .
					 		 "WHERE name = '" . $_POST['name'] . "'"
							 );
				is_error($res);
			
				// Handle default records: www
				if($_POST['www'] != '') {
					$res = $dbconnect->query("INSERT INTO records " .
		 				   		 "(zone, host, type, " .
						  		 "pri, destination) " .
						  		 "VALUES (" .
						  		 $id . ", " .
						  		 "'@', " .
						  		 "'A', " .
						 		 "0, " .
						  		 "'" . $_POST['www'] . "')"
								);
					is_error($res);
					$res = $dbconnect->query("INSERT INTO records " .
								 "(zone, host, type, " .
								 "pri, destination) " .
								 "VALUES (" .
								 $id . ", " .
								 "'www', " .
								 "'CNAME', " .
								 "0, " .
								 "'@')"
								);
					is_error($res);
				}

				// Handle default records: mail
				if($_POST['mail'] != '') {
					$res = $dbconnect->query("INSERT INTO records " .
								 "(zone, host, type, " .
								 "pri, destination) " .
								 "VALUES (" .
								 $id . ", " .
								 "'mail', " .
								 "'A', " .
								 "0, " .
								 "'" . $_POST['mail'] . "')"
								);
					is_error($res);
					$res = $dbconnect->query("INSERT INTO records " .
								 "(zone, host, type, " .
								 "pri, destination) " .
								 "VALUES (" .
								 $id . ", " .
								 "'@', " .
								 "'MX', " .
								 "10, " .
								 "'mail." . $_POST['name'] . "')"
								);
					is_error($res);
				}

				// Handle default records: ftp
				if($_POST['ftp'] != '') {
					$res = $dbconnect->query("INSERT INTO records " .
								 "(zone, host, type, " .
								 "pri, destination) " .
								 "VALUES (" .
								 $id . ", " .
								 "'ftp', " .
								 "'A', " .
								 "0, " .
								 "'" . $_POST['ftp'] . "')"
								);
					is_error($res);
				}
			}
		}
		else {  // The zone exists in the db.
			$smarty->assign("pagetitle", "Ooops!");
			$smarty->assign("reason", reason("existzone"));
			$smarty->assign("template", "accessdenied.tpl");
			$smarty->assign("help", help("accessdenied"));
			$smarty->assign("menu_button", menu_buttons());
			$smarty->display("main.tpl");
			die();
		}
	}
	else {  // Bad input from user.
		if(! $_POST['name']) {
			$smarty->assign("reason", reason("nozonename"));
		}
		$smarty->assign("pagetitle", "Ooops!");
		$smarty->assign("template", "accessdenied.tpl");
		$smarty->assign("help", help("accessdenied"));
		$smarty->assign("menu_button", menu_buttons());
		$smarty->display("main.tpl");
		die();
	}
}
else {
	// The user is not an administrator.
	notadmin($smarty);
}

?>