opensmtpdadmin/admin/delete.php

<?php
// 
// OpenSMTPD Admin 
// by Mischa Peters <mischa at high5 dot nl>
// Copyright (c) 2022 High5!
// License Info: LICENSE.TXT
//
// File: delete.php
//
// Template File: message.tpl
//
// Template Variables:
//
// message
//
// Form POST \ GET Variables:
//
// table
// where
// delete
// domain
//
require_once '../functions.inc.php';
include '../languages/' . check_language() . '.lang';

$list_domains = list_domains();
$admin = $SESSID_USERNAME ?? ADMIN_EMAIL;

if ($_SERVER['REQUEST_METHOD'] == "GET") {
        $table = strtolower(filter_input(INPUT_GET, 'table', FILTER_DEFAULT));
        $delete = filter_input(INPUT_GET, 'delete', FILTER_DEFAULT);
        $domain = filter_input(INPUT_GET, 'domain', FILTER_VALIDATE_DOMAIN);
	$domain_key = array_search($domain, array_column($list_domains, 'domain'));

	if ($table == "domain") {
		try {
			$dbh = connect_db();
			$dbh->beginTransaction();

			$sth = $dbh->prepare("SELECT COUNT(*) FROM log WHERE domain=?");
			$sth->execute(array($domain));
			$count_log = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM log WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_log) {
				throw new RuntimeException('Unable to delete entries from the logs table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM vacation WHERE domain=?");
			$sth->execute(array($domain));
			$count_vacation = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM vacation WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_vacation) {
				throw new RuntimeException('Unable to delete entries from the vacation table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM alias WHERE domain=?");
			$sth->execute(array($domain));
			$count_alias = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM alias WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_alias) {
				throw new RuntimeException('Unable to delete entries from the alias table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM mailbox WHERE domain=?");
			$sth->execute(array($domain));
			$count_mailbox = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM mailbox WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_mailbox) {
				throw new RuntimeException('Unable to delete entries from the mailbox table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM domain_admins WHERE domain=?");
			$sth->execute(array($domain));
			$count_domain_admins = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM domain_admins WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_domain_admins) {
				throw new RuntimeException('Unable to delete entries from the domain_admins table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM domain WHERE domain=?");
			$sth->execute(array($domain));
			$count_domain = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM domain WHERE domain=?");
			$sth->execute(array($domain));
			if ($sth->rowCount() != $count_domain) {
				throw new RuntimeException('Unable to delete entry from the domain table.');
			}

			$dbh->commit();
			header("Location: list-domain.php");
			exit;
		} catch (RuntimeException $e) {
			$message =  $e->getMessage();
			$dbh->rollBack();
		} catch (PDOException $e) {
			$message = $e->getMessage();
		}
	}
	
	if ($table == "admin") {
		try {
			$dbh = connect_db();
			$dbh->beginTransaction();

			$sth = $dbh->prepare("SELECT COUNT(*) FROM admin WHERE username=?");
			$sth->execute(array($delete));
			$count_admin = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM admin WHERE username=?");
			$sth->execute(array($delete));
			if ($sth->rowCount() != $count_admin) {
				throw new RuntimeException('Unable to delete entry from the admin table.');
			}

			$sth = $dbh->prepare("SELECT COUNT(*) FROM domain_admins WHERE username=?");
			$sth->execute(array($delete));
			$count_domain_admins = $sth->fetchColumn();

			$sth = $dbh->prepare("DELETE FROM domain_admins WHERE username=?");
			$sth->execute(array($delete));
			if ($sth->rowCount() != $count_domain_admins) {
				throw new RuntimeException('Unable to delete entries from the domain_admins table.');
			}

			$dbh->commit();
			header("Location: list-admin.php");
			exit;
		} catch (RuntimeException $e) {
			$message =  $e->getMessage();
			$dbh->rollBack();
		} catch (PDOException $e) {
			$message = $e->getMessage();
			$dbh->rollBack();
		}
	}

	if (($table == 'alias' || $table == 'mailbox') && in_array($domain, array_column($list_domains, 'domain'))) {
		try {
			$dbh = connect_db();
			$sth = $dbh->prepare("DELETE FROM alias WHERE address=? AND domain=?");
			$sth->bindParam(1, $delete, PDO::PARAM_STR);
			$sth->bindParam(2, $domain, PDO::PARAM_STR);
			$sth->execute();
			if ($sth->rowCount() != 1) {
				throw new RuntimeException('alias');
			}
			logging($admin, $domain, "delete alias", $delete);

			header("Location: list-virtual.php?domain=$domain");
			exit;
		} catch (RuntimeException $e) {
			$message = $LANG['Delete_delete_error'] . "<b>$delete</b> (" . $e->getMessage() . ")!</span>";
		} catch (PDOException $e) {
			$message = $LANG['Delete_delete_error'] . "<b>$delete</b> (alias)!</span> " . $e-getMessage();
		}

		try {
			$dbh = connect_db();
			$sth = $dbh->prepare("DELETE FROM mailbox WHERE username=? AND domain=?");
			$sth->bindParam(1, $delete, PDO::PARAM_STR);
			$sth->bindParam(2, $domain, PDO::PARAM_STR);
			$sth->execute();
			if ($sth->rowCount() != 1) {
				throw new RuntimeException('mailbox');
			}
			logging($admin, $domain, "delete mailbox", $delete);

			$sth = $dbh->prepare("DELETE FROM vacation WHERE email=? AND domain=?");
			$sth->bindParam(1, $delete, PDO::PARAM_STR);
			$sth->bindParam(2, $domain, PDO::PARAM_STR);
			$sth->execute();

			header("Location: list-virtual.php?domain=$domain");
			exit;
		} catch (RuntimeException $e) {
			$message = $LANG['Delete_delete_error'] . "<b>$delete</b> (" . $e->getMessage() . ")!</span>";
		} catch (PDOException $e) {
			$message = $LANG['Delete_delete_error'] . "<b>$delete</b> (mailbox)!</span>";
		}
	}
}
include '../templates/header.tpl';
include '../templates/admin_menu.tpl';
include '../templates/message.tpl';
include '../templates/footer.tpl';
?>