From 9590e6bb78cafee8b47725a2c415aca9a1f761a8 Mon Sep 17 00:00:00 2001
From: Al Beano <albino@autistici.org>
Date: Mon, 17 Jul 2017 00:35:13 +0100
Subject: [PATCH] Implement domain removal

---
 lib/cyberman/Domains.pm | 42 +++++++++++++++++++++++++++++++++++++++++
 lib/cyberman/Helper.pm  |  9 +++++++++
 views/domains.tt        |  6 ++++++
 views/domains/remove.tt | 32 +++++++++++++++++++++++++++++++
 4 files changed, 89 insertions(+)
 create mode 100644 views/domains/remove.tt

diff --git a/lib/cyberman/Domains.pm b/lib/cyberman/Domains.pm
index 8610f56..c49df4c 100644
--- a/lib/cyberman/Domains.pm
+++ b/lib/cyberman/Domains.pm
@@ -72,4 +72,46 @@ post '/domains/new' => sub {
   };
 };
 
+get '/domains/:id/remove' => sub {
+  my $domain = database->quick_select(
+    "domain",
+    {
+      "id" => param("id"),
+    },
+  );
+
+  return auth_test($domain->{"ownerid"}) if auth_test($domain->{"ownerid"});
+
+  template 'domains/remove.tt' => {
+    "domain" => $domain,
+  };
+};
+
+post '/domains/:id/remove' => sub {
+  my $domain = database->quick_select(
+    "domain",
+    {
+      "id" => param("id"),
+    },
+  );
+
+  if (!$domain) {
+    # quick and dirty error that shouldn't really appear
+    return "No such domain!";
+  }
+
+  return auth_test($domain->{"ownerid"}) if auth_test($domain->{"ownerid"});
+
+  database->quick_delete(
+    "domain",
+    {
+      "id" => param("id"),
+    },
+  );
+
+  template redir => {
+    redir => "../../domains?removed=$domain->{name}",
+  };
+};
+
 true;
diff --git a/lib/cyberman/Helper.pm b/lib/cyberman/Helper.pm
index f709a53..960ac51 100644
--- a/lib/cyberman/Helper.pm
+++ b/lib/cyberman/Helper.pm
@@ -6,10 +6,19 @@ use Exporter qw(import);
 our @EXPORT = qw(auth_test);
 
 sub auth_test {
+  my $id = undef;
+  if (@_) {
+    $id = shift;
+  }
+
   if (!vars->{"auth"}) {
     return template 'redir' => {
       "redir" => "/index",
     };
+  } elsif ($id && vars->{"auth"} != $id) {
+    return template 'redir' => {
+      "redir" => "/index",
+    };
   } else {
     return 0; # nothing to be returned, route can continue
   }
diff --git a/views/domains.tt b/views/domains.tt
index 7130930..990f9f4 100644
--- a/views/domains.tt
+++ b/views/domains.tt
@@ -9,6 +9,12 @@
   </div>
   <br /><br />
   <% END %>
+  <% IF params.removed %>
+  <div class="msgBox">
+    The domain '<% params.removed | html_entity %>.cyb' was removed successfully.
+  </div>
+  <br /><br />
+  <% END %>
 </center>
 
 <div class="body">
diff --git a/views/domains/remove.tt b/views/domains/remove.tt
new file mode 100644
index 0000000..b9648eb
--- /dev/null
+++ b/views/domains/remove.tt
@@ -0,0 +1,32 @@
+<% IF domain %>
+<center>
+  <br />
+  <h1>Removal of <% domain.name %>.cyb</h1>
+  <br />
+</center>
+
+<div class="body">
+  <p>
+    You are about to permanently remove <% domain.name %>.cyb and all its records.
+  </p>
+  <p style="font-size:1.6em">
+    YOU ARE ABOUT TO PERMANENTLY REMOVE <% domain.name %>.cyb AND ALL ITS RECORDS!
+  </p>
+  <p>
+    There is <strong>no</strong> guarantee that you will be able to re-register this domain at a later date.
+  </p>
+  <p>
+    <center>
+      <form method="POST">
+        [&nbsp;<button class="textButton" action="submit">yes,&nbsp;destroy&nbsp;the&nbsp;domain</button>&nbsp;]
+      </form>
+    </center>
+  </p>
+</div>
+<% ELSE %>
+<center>
+  No such domain!
+  <br />
+  [&nbsp;<a href="../../domains" class="bracketButton">go&nbsp;back</a>&nbsp;]
+</center>
+<% END %>