<?php

if (!check_perms('admin_manage_ipbans')) { error(403); }
	if (isset($_GET['perform'])) {
		$IPA = substr($_GET['ip'], 0, strcspn($_GET['ip'], '.'));
		if ($_GET['perform'] == 'delete') {
			if (!is_number($_GET['id']) || $_GET['id'] == '') {
				error(0);
			}
			$DB->query('DELETE FROM ip_bans WHERE ID='.$_GET['id']);
			$Bans = $Cache->delete_value('ip_bans_'.$IPA);
		} elseif ($_GET['perform'] == 'create') {
			$Notes = db_string($_GET['notes']);
			$IP = Tools::ip_to_unsigned($_GET['ip']); //Sanitized by Validation regex
			$DB->query("INSERT INTO ip_bans
				(FromIP, ToIP, Reason) VALUES
				('$IP','$IP', '$Notes')");
			$Cache->delete_value('ip_bans_'.$IPA);
		}
}


?>