API call to modify local CNAME records

Signed-off-by: Alexandr Salamatov <wpgnetworks@gmail.com>

api.php

@@ -168,6 +168,33 @@ elseif(isset($_GET['customdns']) && $auth)
 
 	require("scripts/pi-hole/php/customdns.php");
 }
+elseif(isset($_GET['customcname']) && $auth)
+{
+	if(isset($_GET["auth"]))
+	{
+	if($_GET["auth"] !== $pwhash)
+		die("Not authorized!");
+	}
+	else
+	{
+		// Skip token validation if explicit auth string is given
+		check_csrf($_GET['token']);
+	}
+
+	switch ($_GET["action"]) {
+		case 'get':
+			$_POST['action'] = 'get';
+			break;
+		case 'add':
+			$_POST['action'] = 'add';
+			break;
+		case 'delete':
+			$_POST['action'] = 'delete';
+			break;
+		}
+
+	require("scripts/pi-hole/php/customcname.php");
+}
 
 // Other API functions
 require("api_FTL.php");

scripts/pi-hole/php/customcname.php

@@ -5,11 +5,13 @@
     require_once('auth.php');
 
     // Authentication checks
-    if (isset($_POST['token'])) {
-        check_cors();
-        check_csrf($_POST['token']);
-    } else {
-        log_and_die('Not allowed (login session invalid or expired, please relogin on the Pi-hole dashboard)!');
+    if (!isset($api)) {
+        if (isset($_POST['token'])) {
+            check_cors();
+            check_csrf($_POST['token']);
+        } else {
+            log_and_die('Not allowed (login session invalid or expired, please relogin on the Pi-hole dashboard)!');
+        }
     }