2012-07-22 08:00:16 +00:00
|
|
|
<?php
|
|
|
|
|
|
2013-02-07 08:00:47 +00:00
|
|
|
if (!check_perms('admin_manage_ipbans')) { error(403); }
|
|
|
|
|
if (isset($_GET['perform'])) {
|
|
|
|
|
$IPA = substr($_GET['ip'], 0, strcspn($_GET['ip'], '.'));
|
|
|
|
|
if ($_GET['perform'] == 'delete') {
|
|
|
|
|
if (!is_number($_GET['id']) || $_GET['id'] == '') {
|
|
|
|
|
error(0);
|
|
|
|
|
}
|
|
|
|
|
$DB->query('DELETE FROM ip_bans WHERE ID='.$_GET['id']);
|
|
|
|
|
$Bans = $Cache->delete_value('ip_bans_'.$IPA);
|
|
|
|
|
} elseif ($_GET['perform'] == 'create') {
|
2012-07-22 08:00:16 +00:00
|
|
|
$Notes = db_string($_GET['notes']);
|
2013-02-07 08:00:47 +00:00
|
|
|
$IP = Tools::ip_to_unsigned($_GET['ip']); //Sanitized by Validation regex
|
|
|
|
|
$DB->query("INSERT INTO ip_bans
|
|
|
|
|
(FromIP, ToIP, Reason) VALUES
|
|
|
|
|
('$IP','$IP', '$Notes')");
|
|
|
|
|
$Cache->delete_value('ip_bans_'.$IPA);
|
2013-02-06 08:00:17 +00:00
|
|
|
}
|
2012-07-22 08:00:16 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
?>
|
