#!/usr/bin/perl
# create_table.cgi
# Create a new nftables table

require './nftables-lib.pl';    ## no critic
use strict;
use warnings;
our (%in, %text);
ReadParse();
error_setup($text{'create_err'});
assert_acl('create');

my @families = qw(ip ip6 inet arp bridge netdev);
my %family_ok = map { $_ => 1 } @families;

if ($in{'create'}) {
	my $name = $in{'name'};
	my $family = $in{'family'};

	$name =~ /^\w[\w-]*$/ || error($text{'create_ename'});
	$family_ok{$family} || error($text{'create_efamily'});

	my @tables = get_nftables_save();
	foreach my $t (@tables) {
		if ($t->{'name'} eq $name && $t->{'family'} eq $family) {
			error($text{'create_edup'});
			}
		}
	my ($active, $active_err) = get_active_nftables_save();
	if (!$active_err) {
		foreach my $t (@$active) {
			if ($t->{'name'} eq $name &&
				$t->{'family'} eq $family &&
				table_is_externally_managed($t))
			{
				error(text('create_eexternal', nft_table_spec($t)));
				}
			}
		}

	my $table = {
		'name' => $name,
		'family' => $family,
		'rules' => [ ],
		'chains' => {},
		'sets' => {}
	};
	assert_table_acl($table);
	push(@tables, $table);
	my $err = create_table_configuration($table, @tables);
	error(text('create_failed', $err)) if ($err);
	webmin_log("create", "table", $name, {'family' => $family});

	redirect(
		"index.cgi?table_family=".urlize($family)."&table_name=".urlize($name));
	return;
	}

ui_print_header(undef, $text{'create_title'}, "");
print ui_form_start("create_table.cgi");
print ui_hidden("create", 1);

print ui_table_start($text{'create_header'}, "width=100%", 2);
print ui_table_row($text{'create_family'},
	ui_select("family", $in{'family'} || "inet", [map { [$_, $_] } @families]));
print ui_table_row($text{'create_name'}, ui_textbox("name", $in{'name'}, 30));
print ui_table_end();

print ui_form_end([[undef, $text{'create_ok'}]]);
ui_print_footer("index.cgi", $text{'index_return'});