hestiacp/web/bulk/dns/index.php

<?php
use function Hestiacp\quoteshellarg\quoteshellarg;

ob_start();

include $_SERVER["DOCUMENT_ROOT"] . "/inc/main.php";

// Check token
verify_csrf($_POST);

$domain = $_POST["domain"];
$record = $_POST["record"];
$action = $_POST["action"];

if ($_SESSION["userContext"] === "admin") {
	if (empty($record)) {
		switch ($action) {
			case "rebuild":
				$cmd = "v-rebuild-dns-domain";
				break;
			case "delete":
				$cmd = "v-delete-dns-domain";
				break;
			case "suspend":
				$cmd = "v-suspend-dns-domain";
				break;
			case "unsuspend":
				$cmd = "v-unsuspend-dns-domain";
				break;
			default:
				header("Location: /list/dns/");
				exit();
		}
	} else {
		switch ($action) {
			case "delete":
				$cmd = "v-delete-dns-record";
				break;
			case "suspend":
				$cmd = "v-suspend-dns-record";
				break;
			case "unsuspend":
				$cmd = "v-unsuspend-dns-record";
				break;
			default:
				header("Location: /list/dns/?domain=" . $domain);
				exit();
		}
	}
} else {
	if (empty($record)) {
		switch ($action) {
			case "delete":
				$cmd = "v-delete-dns-domain";
				break;
			default:
				header("Location: /list/dns/");
				exit();
		}
	} else {
		switch ($action) {
			case "delete":
				$cmd = "v-delete-dns-record";
				break;
			default:
				header("Location: /list/dns/?domain=" . $domain);
				exit();
		}
	}
}

if (empty($record)) {
	foreach ($domain as $value) {
		// DNS
		$value = quoteshellarg($value);
		exec(HESTIA_CMD . $cmd . " " . $user . " " . $value . " no", $output, $return_var);
		$restart = "yes";
	}
} else {
	foreach ($record as $value) {
		// DNS Record
		$value = quoteshellarg($value);
		$dom = quoteshellarg($domain);
		exec(
			HESTIA_CMD . $cmd . " " . $user . " " . $dom . " " . $value . " no",
			$output,
			$return_var,
		);
		$restart = "yes";
	}
}

if (!empty($restart)) {
	exec(HESTIA_CMD . "v-restart-dns", $output, $return_var);
}

if (empty($record)) {
	header("Location: /list/dns/");
	exit();
} else {
	header("Location: /list/dns/?domain=" . $domain);
	exit();
}