Disallow server changes for existing records in mail_domain_edit.php

tbrehm

2008-12-12 ec09b18c9c44f85ceb6d9e7588a03a221cd1193f

 server/plugins-available/mail_plugin.inc.php

@@ -33,6 +33,19 @@
   var $plugin_name = 'mail_plugin';
   var $class_name  = 'mail_plugin';
   
   //* This function is called during ispconfig installation to determine
   //  if a symlink shall be created for this plugin.
   function onInstall() {
      global $conf;
		
      if($conf['services']['mail'] == true) {
         return true;
      } else {
         return false;
      }
		
   }
	
      
   /*
       This function is called when the plugin is loaded
@@ -53,7 +66,7 @@
      //* Mail Domains
      //$app->plugins->registerEvent('mail_domain_insert',$this->plugin_name,'domain_insert');
      //$app->plugins->registerEvent('mail_domain_update',$this->plugin_name,'domain_update');
      //$app->plugins->registerEvent('mail_domain_delete',$this->plugin_name,'domain_delete');
      $app->plugins->registerEvent('mail_domain_delete',$this->plugin_name,'domain_delete');
      
   }
   
@@ -66,7 +79,7 @@
      $mail_config = $app->getconf->get_server_config($conf["server_id"], 'mail');
      
      // Create the maildir, if it does not exist
      if(!is_dir($data['new']['maildir'])) {
      if(!empty($data['new']['maildir']) && !is_dir($data['new']['maildir'])) {
         $tmp_path = $data['new']['maildir'];
         $tmp_path_parts = explode('/',$tmp_path);
         unset($tmp_path_parts[count($tmp_path_parts)-2]);
@@ -81,6 +94,10 @@
         exec('chown -R '.$mail_config['mailuser_name'].':'.$mail_config['mailuser_group'].' '.escapeshellcmd($data['new']['maildir']));
         $app->log('Created Maildir: '.$data['new']['maildir'],LOGLEVEL_DEBUG);
      }
      //This is to fix the maildrop quota not being rebuilt after the quota is changed.
      exec("su -c 'maildirmake -q ".$data['new']['quota']."S ".escapeshellcmd($data['new']['maildir'])."' ".$mail_config['mailuser_name']);
      $app->log('Created Maildir: '."su -c 'maildirmake -q ".$data['new']['quota']."S ".escapeshellcmd($data['new']['maildir'])."' ".$mail_config['mailuser_name'],LOGLEVEL_DEBUG);
		
   }
   
   function user_update($event_name,$data) {
@@ -104,6 +121,9 @@
         rmdir($data['old']['maildir']);
         $app->log('Moved Maildir from: '.$data['old']['maildir'].' to '.$data['new']['maildir'],LOGLEVEL_DEBUG);
      }
      //This is to fix the maildrop quota not being rebuilt after the quota is changed.
      exec("su -c 'maildirmake -q ".$data['new']['quota']."S ".escapeshellcmd($data['new']['maildir'])."' ".$mail_config['mailuser_name']);
      $app->log('Created Maildir: '."su -c 'maildirmake -q ".$data['new']['quota']."S ".escapeshellcmd($data['new']['maildir'])."' ".$mail_config['mailuser_name'],LOGLEVEL_DEBUG);
   }
   
   function user_delete($event_name,$data) {
@@ -118,6 +138,22 @@
      }
   }
   
   function domain_delete($event_name,$data) {
      global $app, $conf;
		
      // get the config
      $app->uses("getconf");
      $mail_config = $app->getconf->get_server_config($conf["server_id"], 'mail');
		
      $old_maildomain_path = escapeshellcmd($mail_config['homedir_path'].'/'.$data['old']['domain']);
      if(!stristr($old_maildomain_path,'..') && !stristr($old_maildomain_path,'*') && strlen($old_maildomain_path) >= 10) {
         exec('rm -rf '.escapeshellcmd($old_maildomain_path));
         $app->log('Deleted the mail domain directory: '.$old_maildomain_path,LOGLEVEL_DEBUG);
      } else {
         $app->log('Possible security violation when deleting the mail domain directory: '.$old_maildomain_path,LOGLEVEL_ERROR);
      }
   }