mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-03 14:10:57 +08:00
72 lines
2.6 KiB
PHP
72 lines
2.6 KiB
PHP
<?php
|
|
require "../include/bittorrent.php";
|
|
dbconn();
|
|
loggedinorreturn();
|
|
if (get_user_class() < UC_ADMINISTRATOR)
|
|
stderr("Sorry", "Access denied.");
|
|
|
|
$remove = intval($_GET['remove'] ?? 0);
|
|
if (is_valid_id($remove))
|
|
{
|
|
sql_query("DELETE FROM bans WHERE id=".mysql_real_escape_string($remove)) or sqlerr();
|
|
write_log("Ban ".htmlspecialchars($remove)." was removed by {$CURUSER['id']} ($CURUSER[username])",'mod');
|
|
}
|
|
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST" && get_user_class() >= UC_ADMINISTRATOR)
|
|
{
|
|
$first = trim($_POST["first"]);
|
|
$last = trim($_POST["last"]);
|
|
$comment = trim($_POST["comment"]);
|
|
if (!$first || !$last || !$comment)
|
|
stderr("Error", "Missing form data.");
|
|
$firstlong = ip2long($first);
|
|
$lastlong = ip2long($last);
|
|
if ($firstlong == -1 || $lastlong == -1)
|
|
stderr("Error", "Bad IP address.");
|
|
$comment = sqlesc($comment);
|
|
$added = sqlesc(date("Y-m-d H:i:s"));
|
|
sql_query("INSERT INTO bans (added, addedby, first, last, comment) VALUES($added, ".mysql_real_escape_string($CURUSER['id']).", $firstlong, $lastlong, $comment)") or sqlerr(__FILE__, __LINE__);
|
|
header("Location: {$_SERVER['REQUEST_URI']}");
|
|
die;
|
|
}
|
|
|
|
//ob_start("ob_gzhandler");
|
|
|
|
$res = sql_query("SELECT * FROM bans ORDER BY added DESC") or sqlerr();
|
|
|
|
stdhead("Bans");
|
|
|
|
print("<h1>Current Bans</h1>\n");
|
|
|
|
if (mysql_num_rows($res) == 0)
|
|
print("<p align=center><b>Nothing found</b></p>\n");
|
|
else
|
|
{
|
|
print("<table border=1 cellspacing=0 cellpadding=5>\n");
|
|
print("<tr><td class=colhead>Added</td><td class=colhead align=left>First IP</td><td class=colhead align=left>Last IP</td>".
|
|
"<td class=colhead align=left>By</td><td class=colhead align=left>Comment</td><td class=colhead>Remove</td></tr>\n");
|
|
|
|
while ($arr = mysql_fetch_assoc($res))
|
|
{
|
|
print("<tr><td>".gettime($arr['added'])."</td><td align=left>".long2ip($arr['first'])."</td><td align=left>".long2ip($arr['last'])."</td><td align=left>". get_username($arr['addedby']) .
|
|
"</td><td align=left>{$arr['comment']}</td><td><a href=bans.php?remove={$arr['id']}>Remove</a></td></tr>\n");
|
|
}
|
|
print("</table>\n");
|
|
}
|
|
|
|
if (get_user_class() >= UC_ADMINISTRATOR)
|
|
{
|
|
print("<h1>Add ban</h1>\n");
|
|
print("<table border=1 cellspacing=0 cellpadding=5>\n");
|
|
print("<form method=post action=bans.php>\n");
|
|
print("<tr><td class=rowhead>First IP</td><td><input type=text name=first size=40></td></tr>\n");
|
|
print("<tr><td class=rowhead>Last IP</td><td><input type=text name=last size=40></td></tr>\n");
|
|
print("<tr><td class=rowhead>Comment</td><td><input type=text name=comment size=40></td></tr>\n");
|
|
print("<tr><td colspan=2 align=center><input type=submit value='Okay' class=btn></td></tr>\n");
|
|
print("</form>\n</table>\n");
|
|
}
|
|
|
|
stdfoot();
|
|
|
|
?>
|