- Added security check script. - Create md5 sums of all files at install an...

Till Brehm

2014-08-14 1ed92e187ae2dfb51f5f2d62c290a85f93b6dc21

 interface/web/sites/web_aliasdomain_edit.php

@@ -123,7 +123,18 @@

   function onSubmit() {
      global $app, $conf;
		
      // Get the record of the parent domain
      if(!@$this->dataRecord["parent_domain_id"] && $this->id) {
         $tmp = $app->db->queryOneRecord("SELECT parent_domain_id FROM web_domain WHERE domain_id = ".$app->functions->intval($this->id));
         if($tmp) $this->dataRecord["parent_domain_id"] = $tmp['parent_domain_id'];
         unset($tmp);
      }

      // Get the record of the parent domain
      $parent_domain = $app->db->queryOneRecord("SELECT * FROM web_domain WHERE domain_id = ".$app->functions->intval(@$this->dataRecord["parent_domain_id"]) . " AND ".$app->tform->getAuthSQL('r'));
		
      if(!$parent_domain || $parent_domain['domain_id'] != @$this->dataRecord['parent_domain_id']) $app->tform->errorMessage .= $app->tform->lng("no_domain_perm");
      /* check if the domain module is used - and check if the selected domain can be used! */
      $app->uses('ini_parser,getconf');
      $settings = $app->getconf->get_global_config('domains');
@@ -142,20 +153,15 @@
         $app->tform->errorMessage .= $app->tform->lng("error_proxy_requires_url")."<br />";
      }

      // Get the record of the parent domain
      $parent_domain = $app->db->queryOneRecord("select * FROM web_domain WHERE domain_id = ".$app->functions->intval(@$this->dataRecord["parent_domain_id"]) . " AND ".$app->tform->getAuthSQL('r'));
      if(!$parent_domain || $parent_domain['domain_id'] != @$this->dataRecord['parent_domain_id']) $app->tform->errorMessage .= $app->tform->lng("no_domain_perm");

      // Set a few fixed values
      $this->dataRecord["type"] = 'alias';
      $this->dataRecord["server_id"] = $parent_domain["server_id"];
      //$this->dataRecord["domain"] = $this->dataRecord["domain"].'.'.$parent_domain["domain"];

      $this->parent_domain_record = $parent_domain;

      //* make sure that the domain is lowercase
      if(isset($this->dataRecord["domain"])) $this->dataRecord["domain"] = strtolower($this->dataRecord["domain"]);

		
      parent::onSubmit();
   }

@@ -178,7 +184,7 @@
         //* Update the old website, so that the vhost alias gets removed
         //* We force the update by inserting a transaction record without changes manually.
         $old_website = $app->db->queryOneRecord('SELECT * FROM web_domain WHERE domain_id = '.$app->functions->intval($this->oldDataRecord['domain_id']));
         $app->db->datalogSave('web_domain', 'UPDATE', 'domain_id', $this->oldDataRecord['parent_domain_id'], $old_website, $old_website, true);
         $app->db->datalogSave('web_domain', 'UPDATE', 'domain_id', $app->functions->intval($this->oldDataRecord['parent_domain_id']), $old_website, $old_website, true);
      }

   }