- $module['Users']['Ban'] = $filename . "?mode=ban";

- $module['Users']['Un-ban'] = $filename . "?mode=unban";

-if( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )

-{

- $mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];

-}

-else

-{

- $mode = "unban";

-}

-

-if( isset($HTTP_POST_VARS['submit']) && isset($HTTP_POST_VARS['bancontrol']) )

- if($HTTP_POST_VARS['bancontrol'] == "ban")

- $user_bansql = "";

- $email_bansql = "";

- $ip_bansql = "";

- $user_list = array();

- if(isset($HTTP_POST_VARS['user']))

- $user_list_temp = $HTTP_POST_VARS['user'];

-

- for($i = 0; $i < count($user_list_temp); $i++)

- {

- $user_list[] = trim($user_list_temp[$i]);

- }

- $ip_list = array();

- if(isset($HTTP_POST_VARS['ip']))

- {

- $ip_list_temp = explode(",", $HTTP_POST_VARS['ip']);

- for($i = 0; $i < count($ip_list_temp); $i++)

- if( preg_match("/^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$/", trim($ip_list_temp[$i]), $ip_range_explode) )

- //

- // Don't ask about all this, just don't ask ... !

- //

- $ip_1_counter = $ip_range_explode[1];

- $ip_1_end = $ip_range_explode[5];

- while($ip_1_counter <= $ip_1_end)

- $ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0;

- $ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6];

- if($ip_2_counter == 0 && $ip_2_end == 254)

- $ip_2_counter = 255;

- $ip_2_fragment = 255;

- $ip_list[] = encode_ip("$ip_1_counter.255.255.255");

- while($ip_2_counter <= $ip_2_end)

- $ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0;

- $ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7];

- if($ip_3_counter == 0 && $ip_3_end == 254 )

- $ip_3_counter = 255;

- $ip_3_fragment = 255;

- $ip_list[] = encode_ip("$ip_1_counter.$ip_2_counter.255.255");

- while($ip_3_counter <= $ip_3_end)

- $ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0;

- $ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8];

-

- if($ip_4_counter == 0 && $ip_4_end == 254)

- {

- $ip_4_counter = 255;

- $ip_4_fragment = 255;

-

- $ip_list[] = encode_ip("$ip_1_counter.$ip_2_counter.$ip_3_counter.255");

- }

-

- while($ip_4_counter <= $ip_4_end)

- {

- $ip_list[] = encode_ip("$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter");

- $ip_4_counter++;

- }

- $ip_3_counter++;

- $ip_2_counter++;

- $ip_1_counter++;

- else if( preg_match("/^([\w\-_]\.?){2,}$/is", trim($ip_list_temp[$i])) )

- {

- $ip = gethostbynamel(trim($ip_list_temp[$i]));

- for($j = 0; $j < count($ip); $j++)

- if( !empty($ip[$j]) )

- {

- $ip_list[] = encode_ip($ip[$j]);

- }

- else if( preg_match("/^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$/", trim($ip_list_temp[$i])) )

- {

- $ip_list[] = encode_ip(str_replace("*", "255", trim($ip_list_temp[$i])));

- }

- $email_list = array();

- if(isset($HTTP_POST_VARS['email']))

- {

- $email_list_temp = explode(",", $HTTP_POST_VARS['email']);

- for($i = 0; $i < count($email_list_temp); $i++)

- //

- // This ereg match is based on one by php@unreelpro.com

- // contained in the annotated php manual at php.com (ereg

- // section)

- //

- if( eregi("^(([[:alnum:]]+([-_.][[:alnum:]]+)*\.?)|(\*))@([[:alnum:]]+([-_]?[[:alnum:]]+)*\.){1,3}([[:alnum:]]{2,6})$", trim($email_list_temp[$i])) )

- {

- $email_list[] = trim($email_list_temp[$i]);

- }

- $sql = "SELECT *

- FROM " . BANLIST_TABLE;

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't obtain banlist information", "", __LINE__, __FILE__, $sql);

- }

- $current_banlist = $db->sql_fetchrowset($result);

- $kill_session_sql = "";

- for($i = 0; $i < count($user_list); $i++)

- $in_banlist = false;

- for($j = 0; $j < count($current_banlist); $j++)

- if($user_list[$i] == $current_banlist[$j]['ban_userid'])

- {

- $in_banlist = true;

- }

- if(!$in_banlist)

- {

- $kill_session_sql .= ( ($kill_session_sql != "") ? " OR " : "" ) . "session_user_id = $user_list[$i]";

- $sql = "INSERT INTO " . BANLIST_TABLE . " (ban_userid)

- VALUES ('" . $user_list[$i] . "')";

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't insert ban_userid info into database", "", __LINE__, __FILE__, $sql);

- }

- for($i = 0; $i < count($ip_list); $i++)

- $in_banlist = false;

- for($j = 0; $j < count($current_banlist); $j++)

- if($ip_list[$i] == $current_banlist[$j]['ban_ip'])

- {

- $in_banlist = true;

- }

- if(!$in_banlist)

- if( preg_match("/(ff\.)|(\.ff)/is", chunk_split($ip_list[$i], 2, ".")) )

- {

- $kill_ip_sql = "session_ip LIKE '" . str_replace(".", "", preg_replace("/(ff\.)|(\.ff)/is", "%", chunk_split($ip_list[$i], 2, "."))) . "'";

- }

- else

- {

- $kill_ip_sql = "session_ip = '" . $ip_list[$i] . "'";

- }

- $kill_session_sql .= ( ($kill_session_sql != "") ? " OR " : "" ) . $kill_ip_sql;

- $sql = "INSERT INTO " . BANLIST_TABLE . " (ban_ip)

- VALUES ('" . $ip_list[$i] . "')";

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't insert ban_ip info into database", "", __LINE__, __FILE__, $sql);

- }

- //

- // Now we'll delete all entries from the

- // session table with any of the banned

- // user or IP info just entered into the

- // ban table ... this will force a session

- // initialisation resulting in an instant

- // ban

- //

- if($kill_session_sql != "")

- $sql = "DELETE FROM " . SESSIONS_TABLE . "

- WHERE $kill_session_sql";

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't delete banned sessions from database", "", __LINE__, __FILE__, $sql);

- }

- for($i = 0; $i < count($email_list); $i++)

- $in_banlist = false;

- for($j = 0; $j < count($current_banlist); $j++)

- if($email_list[$i] == $current_banlist[$j]['ban_email'])

- {

- $in_banlist = true;

- }

- if(!$in_banlist)

- $sql = "INSERT INTO " . BANLIST_TABLE . " (ban_email)

- VALUES ('" . $email_list[$i] . "')";

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't insert ban_email info into database", "", __LINE__, __FILE__, $sql);

- }

- else if($HTTP_POST_VARS['bancontrol'] == "unban")

- {

- $where_sql = "";

- if(isset($HTTP_POST_VARS['user']))

- {

- $user_list = $HTTP_POST_VARS['user'];

- for($i = 0; $i < count($user_list); $i++)

- if($user_list[$i] != -1)

- if($where_sql != "")

- {

- $where_sql .= " OR ";

- }

- $where_sql .= "ban_id = " . $user_list[$i];

- if(isset($HTTP_POST_VARS['ip']))

- {

- $ip_list = $HTTP_POST_VARS['ip'];

- for($i = 0; $i < count($ip_list); $i++)

- if($ip_list[$i] != -1)

- if($where_sql != "")

- {

- $where_sql .= " OR ";

- }

- $where_sql .= "ban_id = " . $ip_list[$i];

- if(isset($HTTP_POST_VARS['email']))

- {

- $email_list = $HTTP_POST_VARS['email'];

- for($i = 0; $i < count($email_list); $i++)

- if($email_list[$i] != -1)

- if($where_sql != "")

- {

- $where_sql .= " OR ";

- }

- $where_sql .= "ban_id = " . $email_list[$i];

- if($where_sql != "")

- $sql = "DELETE FROM " . BANLIST_TABLE . "

- WHERE $where_sql";

- if( !$result = $db->sql_query($sql) )

- {

- message_die(GENERAL_ERROR, "Couldn't delete ban info from database", "", __LINE__, __FILE__, $sql);

- }

- if( $mode == "ban" )

- {

- $userban_count = 0;

- $sql = "SELECT user_id, username

- FROM " . USERS_TABLE . "

- WHERE user_id <> " . ANONYMOUS . "

- ORDER BY username ASC";

- $u_result = $db->sql_query($sql);

- $user_list = $db->sql_fetchrowset($u_result);

-

- $select_userlist = "<option value=\"0\">Select a Username</option>";

- for($i = 0; $i < count($user_list); $i++)

- {

- $select_userlist .= "<option value=\"" . $user_list[$i]['user_id'] . "\">" . $user_list[$i]['username'] . "</option>";

- $userban_count++;

- }

- $select_userlist = "<select name=\"user[]\"" . ( ($userban_count > 1) ? "multiple=\"multiple\" size=\"" . min(5, $userban_count) . "\">" : ">" ) . $select_userlist . "</select>";

-

- $template->set_filenames(array(

- "body" => "admin/user_ban_body.tpl")

- );

-

- $s_hidden_fields = "<input type=\"hidden\" name=\"bancontrol\" value=\"ban\" />";

-

- $template->assign_vars(array(

- "L_BAN_TITLE" => $lang['Ban_control'],

- "L_BAN_EXPLAIN" => $lang['Ban_explain'],

- "L_BAN_EXPLAIN_WARN" => $lang['Ban_explain_warn'],

- "L_BAN_USER" => $lang['Ban_username'],

- "L_BAN_USER_EXPLAIN" => $lang['Ban_username_explain'],

- "L_BAN_IP" => $lang['Ban_IP'],

- "L_IP_OR_HOSTNAME" => $lang['IP_hostname'],

- "L_BAN_IP_EXPLAIN" => $lang['Ban_IP_explain'],

- "L_BAN_EMAIL" => $lang['Ban_email'],

- "L_EMAIL_ADDRESS" => $lang['Email_address'],

- "L_BAN_EMAIL_EXPLAIN" => $lang['Ban_email_explain'],

- "L_SUBMIT" => $lang['Submit'],

- "L_RESET" => $lang['Reset'],

-

- "S_USERLIST_SELECT" => $select_userlist,

- "S_HIDDEN_FIELDS" => $s_hidden_fields,

- "S_BAN_ACTION" => append_sid("admin_user_ban.$phpEx"))

- );

- else if( $mode == "unban" )

- $userban_count = 0;

- $ipban_count = 0;

- $emailban_count = 0;

-

- $sql = "SELECT b.ban_id, u.user_id, u.username

- FROM " . BANLIST_TABLE . " b, " . USERS_TABLE . " u

- WHERE u.user_id = b.ban_userid

- AND b.ban_userid <> 0

- AND u.user_id <> " . ANONYMOUS . "

- ORDER BY u.user_id ASC";

- $u_result = $db->sql_query($sql);

- $user_list = $db->sql_fetchrowset($u_result);

-

- $select_userlist = "";

- for($i = 0; $i < count($user_list); $i++)

- {

- $select_userlist .= "<option value=\"" . $user_list[$i]['ban_id'] . "\">" . $user_list[$i]['username'] . "</option>";

- $userban_count++;

- }

-

- if($select_userlist == "")

- {

- $select_userlist = "<option value=\"-1\">" . $lang['No_banned_users'] . "</option>";

- }

- else if($userban_count == 1)

- {

- $select_userlist = "<option value=\"-1\">" . $lang['No_unban'] . "</option>" . $select_userlist;

- }

- $select_userlist = "<select name=\"user[]\"" . ( ($userban_count > 1) ? "multiple=\"multiple\" size=\"" . min(5, $userban_count) . "\">" : ">" ) . $select_userlist;

- $select_userlist .= "</select>";

- $sql = "SELECT ban_id, ban_ip, ban_email

- FROM " . BANLIST_TABLE;

- $b_result = $db->sql_query($sql);

- $banlist = $db->sql_fetchrowset($b_result);

- $select_iplist = "";

- $select_emaillist = "";

- for($i = 0; $i < $db->sql_numrows($b_result); $i++)

- {

- $ban_id = $banlist[$i]['ban_id'];

- if( !empty($banlist[$i]['ban_ip']) )

- {

- $ban_ip = str_replace("255", "*", decode_ip($banlist[$i]['ban_ip']));

- $select_iplist .= "<option value=\"$ban_id\">$ban_ip</option>";

- $ipban_count++;

- }

- else if( !empty($banlist[$i]['ban_email']) )

- {

- $ban_email = $banlist[$i]['ban_email'];

- $select_emaillist .= "<option value=\"$ban_id\">$ban_email</option>";

- $emailban_count++;

- }

- }

-

- if($select_iplist == "")

- {

- $select_iplist = "<option value=\"-1\">" . $lang['No_banned_ip'] . "</option>";

- }

- else if($ipban_count == 1)

- {

- $select_iplist = "<option value=\"-1\">" . $lang['No_unban'] . "</option>" . $select_iplist;

- }

- if($select_emaillist == "")

- $select_emaillist = "<option value=\"-1\">" . $lang['No_banned_email'] . "</option>";

- else if($emailban_count == 1)

- $select_emaillist = "<option value=\"-1\">" . $lang['No_unban'] . "</option>" . $select_emaillist;

- $select_iplist = "<select name=\"ip[]\"" . ( ($ipban_count > 1) ? "multiple=\"multiple\" size=\"" . min(5, $ipban_count) . "\">" : ">" ) . $select_iplist . "</select>";

- $select_emaillist = "<select name=\"email[]\"" . ( ($emailban_count > 1) ? "multiple=\"multiple\" size=\"" . min(5, $emailban_count) . "\">" : ">" ) . $select_emaillist . "</select>";

-

- $template->set_filenames(array(

- "body" => "admin/user_unban_body.tpl")

- );

-

- $s_hidden_fields = "<input type=\"hidden\" name=\"bancontrol\" value=\"unban\" />";

-

- $template->assign_vars(array(

- "L_BAN_TITLE" => $lang['Ban_control'],

- "L_BAN_EXPLAIN" => $lang['Ban_explain'],

- "L_BAN_USER" => $lang['Unban_username'],

- "L_BAN_USER_EXPLAIN" => $lang['Unban_username_explain'],

- "L_BAN_IP" => $lang['Unban_IP'],

- "L_IP_OR_HOSTNAME" => $lang['IP_hostname'],

- "L_BAN_IP_EXPLAIN" => $lang['Unban_IP_explain'],

- "L_BAN_EMAIL" => $lang['Unban_email'],

- "L_EMAIL_ADDRESS" => $lang['Email_address'],

- "L_BAN_EMAIL_EXPLAIN" => $lang['Unban_email_explain'],

- "L_SUBMIT" => $lang['Submit'],

- "L_RESET" => $lang['Reset'],

-

- "S_USERLIST_SELECT" => $select_userlist,

- "S_IPLIST_SELECT" => $select_iplist,

- "S_EMAILLIST_SELECT" => $select_emaillist,

- "S_HIDDEN_FIELDS" => $s_hidden_fields,

- "S_BAN_ACTION" => append_sid("admin_user_ban.$phpEx"))

- );

-