mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 19:06:27 +00:00
158 lines
4.9 KiB
PHP
158 lines
4.9 KiB
PHP
<?
|
|
if(!check_perms('admin_manage_ipbans')) { error(403); }
|
|
|
|
if (isset($_POST['submit'])) {
|
|
authorize();
|
|
|
|
$IPA = substr($_POST['start'], 0, strcspn($_POST['start'], '.'));
|
|
if ($_POST['submit'] == 'Delete') { //Delete
|
|
if(!is_number($_POST['id']) || $_POST['id'] == ''){ error(0); }
|
|
$DB->query('DELETE FROM ip_bans WHERE ID='.$_POST['id']);
|
|
$Cache->delete_value('ip_bans_'.$IPA);
|
|
} else { //Edit & Create, Shared Validation
|
|
$Val->SetFields('start', '1','regex','You must include the starting IP address.',array('regex'=>'/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/i'));
|
|
$Val->SetFields('end', '1','regex','You must include the ending IP address.',array('regex'=>'/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/i'));
|
|
$Val->SetFields('notes', '1','string','You must include the reason for the ban.');
|
|
$Err=$Val->ValidateForm($_POST); // Validate the form
|
|
if($Err){ error($Err); }
|
|
|
|
$Notes = db_string($_POST['notes']);
|
|
$Start = Tools::ip_to_unsigned($_POST['start']); //Sanitized by Validation regex
|
|
$End = Tools::ip_to_unsigned($_POST['end']); //See above
|
|
|
|
if($_POST['submit'] == 'Edit'){ //Edit
|
|
if(empty($_POST['id']) || !is_number($_POST['id'])) {
|
|
error(404);
|
|
}
|
|
$DB->query("UPDATE ip_bans SET
|
|
FromIP=$Start,
|
|
ToIP='$End',
|
|
Reason='$Notes'
|
|
WHERE ID='".$_POST['id']."'");
|
|
} else { //Create
|
|
$DB->query("INSERT INTO ip_bans
|
|
(FromIP, ToIP, Reason) VALUES
|
|
('$Start','$End', '$Notes')");
|
|
}
|
|
$Cache->delete_value('ip_bans_'.$IPA);
|
|
}
|
|
}
|
|
|
|
define('BANS_PER_PAGE', '20');
|
|
list($Page,$Limit) = Format::page_limit(BANS_PER_PAGE);
|
|
|
|
$sql = "SELECT SQL_CALC_FOUND_ROWS ID, FromIP, ToIP, Reason FROM ip_bans AS i ";
|
|
|
|
if(!empty($_REQUEST['notes'])) {
|
|
$sql .= "WHERE Reason LIKE '%".db_string($_REQUEST['notes'])."%' ";
|
|
}
|
|
|
|
if(!empty($_REQUEST['ip']) && preg_match('/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/', $_REQUEST['ip'])) {
|
|
if (!empty($_REQUEST['notes'])) {
|
|
$sql .= "AND '".Tools::ip_to_unsigned($_REQUEST['ip'])."' BETWEEN FromIP AND ToIP ";
|
|
} else {
|
|
$sql .= "WHERE '".Tools::ip_to_unsigned($_REQUEST['ip'])."' BETWEEN FromIP AND ToIP ";
|
|
}
|
|
}
|
|
|
|
$sql .= "ORDER BY FromIP ASC";
|
|
$sql .= " LIMIT ".$Limit;
|
|
$Bans = $DB->query($sql);
|
|
|
|
$DB->query('SELECT FOUND_ROWS()');
|
|
list($Results) = $DB->next_record();
|
|
|
|
$PageLinks=Format::get_pages($Page,$Results,BANS_PER_PAGE,11);
|
|
|
|
View::show_header('IP Address Bans');
|
|
$DB->set_query_id($Bans);
|
|
?>
|
|
|
|
<div class="header">
|
|
<h2>IP Address Bans</h2>
|
|
</div>
|
|
<div>
|
|
<form class="search_form" name="bans" action="" method="get">
|
|
<table cellpadding="6" cellspacing="1" border="0" class="layout border" width="100%">
|
|
<tr>
|
|
<td class="label"><label for="ip">IP address:</label></td>
|
|
<td>
|
|
<input type="hidden" name="action" value="ip_ban" />
|
|
<input type="text" id="ip" name="ip" size="20" value="<?=(!empty($_GET['ip']) ? display_str($_GET['ip']) : '')?>" />
|
|
</td>
|
|
<td class="label"><label for="notes">Notes:</label></td>
|
|
<td>
|
|
<input type="hidden" name="action" value="ip_ban" />
|
|
<input type="text" id="notes" name="notes" size="60" value="<?=(!empty($_GET['notes']) ? display_str($_GET['notes']) : '')?>" />
|
|
</td>
|
|
<td>
|
|
<input type="submit" value="Search" />
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
</div>
|
|
<br />
|
|
|
|
<h3>Manage</h3>
|
|
<div class="linkbox">
|
|
<?=$PageLinks?>
|
|
</div>
|
|
<table width="100%">
|
|
<tr class="colhead">
|
|
<td colspan="2">
|
|
<span title="The IP addresses specified are *inclusive*. The left box is the beginning of the IP address range, and the right box is the end of the IP address range.">Range</span>
|
|
</td>
|
|
<td>Notes</td>
|
|
<td>Submit</td>
|
|
</tr>
|
|
<tr class="rowa">
|
|
<form class="create_form" name="ban" action="" method="post">
|
|
<input type="hidden" name="action" value="ip_ban" />
|
|
<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
|
|
<td colspan="2">
|
|
<input type="text" size="12" name="start" />
|
|
<input type="text" size="12" name="end" />
|
|
</td>
|
|
<td>
|
|
<input type="text" size="72" name="notes" />
|
|
</td>
|
|
<td>
|
|
<input type="submit" name="submit" value="Create" />
|
|
</td>
|
|
</form>
|
|
</tr>
|
|
<?
|
|
$Row = 'a';
|
|
while(list($ID, $Start, $End, $Reason) = $DB->next_record()) {
|
|
$Row = ($Row === 'a' ? 'b' : 'a');
|
|
$Start=long2ip($Start);
|
|
$End=long2ip($End);
|
|
?>
|
|
<tr class="row<?=$Row?>">
|
|
<form class="manage_form" name="ban" action="" method="post">
|
|
<input type="hidden" name="id" value="<?=$ID?>" />
|
|
<input type="hidden" name="action" value="ip_ban" />
|
|
<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
|
|
<td colspan="2">
|
|
<input type="text" size="12" name="start" value="<?=$Start?>" />
|
|
<input type="text" size="12" name="end" value="<?=$End?>" />
|
|
</td>
|
|
<td>
|
|
<input type="text" size="72" name="notes" value="<?=$Reason?>" />
|
|
</td>
|
|
<td>
|
|
<input type="submit" name="submit" value="Edit" />
|
|
<input type="submit" name="submit" value="Delete" />
|
|
</td>
|
|
</form>
|
|
</tr>
|
|
<?
|
|
}
|
|
?>
|
|
</table>
|
|
<div class="linkbox">
|
|
<?=$PageLinks?>
|
|
</div>
|
|
<? View::show_footer(); ?>
|