diff --git a/post/user/domain.php b/post/user/domain.php
index 518edf5d..eebd2b0e 100644
--- a/post/user/domain.php
+++ b/post/user/domain.php
@@ -51,7 +51,7 @@ if (isset($_POST['add_domain'])) {
}
// Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Create', log_description = '$session_name created domain $name$extended_log_description', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
+ logAction("Domain", "Create", "$session_name created domain $name$extended_log_description", $client_id, $domain_id);
$_SESSION['alert_message'] = "Domain $name created";
@@ -97,10 +97,10 @@ if (isset($_POST['edit_domain'])) {
mysqli_query($mysqli,"UPDATE domains SET domain_name = '$name', domain_description = '$description', domain_registrar = $registrar, domain_webhost = $webhost, domain_dnshost = $dnshost, domain_mailhost = $mailhost, domain_expire = $expire, domain_ip = '$a', domain_name_servers = '$ns', domain_mail_servers = '$mx', domain_txt = '$txt', domain_raw_whois = '$whois', domain_notes = '$notes' WHERE domain_id = $domain_id");
- //Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Modify', log_description = '$session_name modified domain $name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
+ // Logging
+ logAction("Domain", "Edit", "$session_name edited domain $name", $client_id, $domain_id);
- $_SESSION['alert_message'] = "Domain $name updated";
+ $_SESSION['alert_message'] = "Domain $name edited";
header("Location: " . $_SERVER["HTTP_REFERER"]);
@@ -120,8 +120,8 @@ if (isset($_GET['archive_domain'])) {
mysqli_query($mysqli,"UPDATE domains SET domain_archived_at = NOW() WHERE domain_id = $domain_id");
- //Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Archive', log_description = '$session_name archived domain $domain_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+ // Logging
+ logAction("Domain", "Archive", "$session_name archived domain $domain_name", $client_id, $domain_id);
$_SESSION['alert_type'] = "error";
$_SESSION['alert_message'] = "Domain $domain_name archived";
@@ -143,8 +143,8 @@ if(isset($_GET['unarchive_domain'])){
mysqli_query($mysqli,"UPDATE domains SET domain_archived_at = NULL WHERE domain_id = $domain_id");
- //Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'domain', log_action = 'Unarchive', log_description = '$session_name restored domain $domain_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
+ // Logging
+ logAction("Domain", "Unarchive", "$session_name unarchived domain $domain_name", $client_id, $domain_id);
$_SESSION['alert_message'] = "Domain $domain_name restored";
@@ -165,8 +165,8 @@ if (isset($_GET['delete_domain'])) {
mysqli_query($mysqli,"DELETE FROM domains WHERE domain_id = $domain_id");
- //Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Delete', log_description = '$session_name deleted domain $domain_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
+ // Logging
+ logAction("Domain", "Delete", "$session_name deleted domain $domain_name", $client_id);
$_SESSION['alert_type'] = "error";
$_SESSION['alert_message'] = "Domain $domain_name deleted";
@@ -179,10 +179,10 @@ if (isset($_POST['bulk_archive_domains'])) {
enforceUserPermission('module_support', 3);
validateCSRFToken($_POST['csrf_token']);
- $count = 0; // Default 0
- $domain_ids = $_POST['domain_ids']; // Get array of IDs to be deleted
+ if ($_POST['domain_ids']) {
- if (!empty($domain_ids)) {
+ // Get Selected Count
+ $count = count($_POST['domain_ids']);
// Cycle through array and archive each record
foreach ($domain_ids as $domain_id) {
@@ -198,15 +198,14 @@ if (isset($_POST['bulk_archive_domains'])) {
mysqli_query($mysqli,"UPDATE domains SET domain_archived_at = NOW() WHERE domain_id = $domain_id");
// Individual Contact logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Archive', log_description = '$session_name archived domain $domain_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
- $count++;
+ logAction("Domain", "Archive", "$session_name archived domain $domain_name", $client_id, $domain_id);
}
// Bulk Logging
- mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Domain', log_action = 'Archive', log_description = '$session_name archived $count domains', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+ logAction("Domain", "Bulk Archive", "$session_name archived $count domain(s)", $client_id);
$_SESSION['alert_type'] = "error";
- $_SESSION['alert_message'] = "Archived $count domain(s)";
+ $_SESSION['alert_message'] = "Archived $count domain(s)";
}
@@ -217,10 +216,10 @@ if (isset($_POST['bulk_unarchive_domains'])) {
enforceUserPermission('module_support', 3);
validateCSRFToken($_POST['csrf_token']);
- $count = 0; // Default 0
- $domain_ids = $_POST['domain_ids']; // Get array of IDs
+ if ($_POST['domain_ids']) {
- if (!empty($domain_ids)) {
+ // Get Selected Count
+ $count = count($_POST['domain_ids']);
// Cycle through array and unarchive
foreach ($domain_ids as $domain_id) {
@@ -236,16 +235,14 @@ if (isset($_POST['bulk_unarchive_domains'])) {
mysqli_query($mysqli,"UPDATE domains SET domain_archived_at = NULL WHERE domain_id = $domain_id");
// Individual logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Unarchive', log_description = '$session_name Unarchived domain $domains_name', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
+ logAction("Domain", "Unarchive", "$session_name unarchived domain $domain_name", $client_id, $domain_id);
-
- $count++;
}
// Bulk Logging
- mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Domain', log_action = 'Unarchive', log_description = '$session_name Unarchived $count domains', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+ logAction("Domain", "Bulk Unarchive", "$session_name unarchived $count domain(s)", $client_id);
- $_SESSION['alert_message'] = "Unarchived $count domain(s)";
+ $_SESSION['alert_message'] = "Unarchived $count domain(s)";
}
@@ -256,26 +253,33 @@ if (isset($_POST['bulk_delete_domains'])) {
enforceUserPermission('module_support', 3);
validateCSRFToken($_POST['csrf_token']);
- $count = 0; // Default 0
- $domain_ids = $_POST['domain_ids']; // Get array of domain IDs to be deleted
- $client_id = intval($_POST['client_id']);
+ if ($_POST['domain_ids']) {
- if (!empty($domain_ids)) {
+ // Get Selected Count
+ $count = count($_POST['domain_ids']);
// Cycle through array and delete each domain
foreach ($domain_ids as $domain_id) {
$domain_id = intval($domain_id);
- mysqli_query($mysqli, "DELETE FROM domains WHERE domain_id = $domain_id AND domain_client_id = $client_id");
- mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Domain', log_action = 'Delete', log_description = '$session_name deleted a domain (bulk)', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $domain_id");
- $count++;
+ // Get Name and Client ID for logging and alert message
+ $sql = mysqli_query($mysqli,"SELECT domain_name, domain_client_id FROM domains WHERE domain_id = $domain_id");
+ $row = mysqli_fetch_array($sql);
+ $domain_name = sanitizeInput($row['domain_name']);
+ $client_id = intval($row['domain_client_id']);
+
+ mysqli_query($mysqli, "DELETE FROM domains WHERE domain_id = $domain_id AND domain_client_id = $client_id");
+
+ // Logging
+ logAction("Domain", "Delete", "$session_name deleted domain $domain_name", $client_id);
}
// Logging
- mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Domain', log_action = 'Delete', log_description = '$session_name bulk deleted $count domains', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+ logAction("Domain", "Bulk Delete", "$session_name deleted $count domain(s)", $client_id);
- $_SESSION['alert_message'] = "Deleted $count domain(s)";
+ $_SESSION['alert_type'] = "error";
+ $_SESSION['alert_message'] = "Deleted $count domain(s)";
}
@@ -327,7 +331,7 @@ if (isset($_POST['export_client_domains_csv'])) {
}
// Logging
- mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Domain', log_action = 'Export', log_description = '$session_name exported $num_rows domain(s) to a CSV file', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id");
+ logAction("Domain", "Export", "$session_name exported $num_rows domain(s)", $client_id);
exit;