sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't obtain banlist information", "", __LINE__, __FILE__, $sql);
}
$current_banlist = $db->sql_fetchrowset($result);
$kill_session_sql = "";
for($i = 0; $i < count($user_list); $i++)
{
$in_banlist = false;
for($j = 0; $j < count($current_banlist); $j++)
{
if($user_list[$i] == $current_banlist[$j]['ban_userid'])
{
$in_banlist = true;
}
}
if(!$in_banlist)
{
$kill_session_sql .= ( ($kill_session_sql != "") ? " OR " : "" ) . "session_user_id = $user_list[$i]";
$sql = "INSERT INTO " . BANLIST_TABLE . " (ban_userid)
VALUES ('" . $user_list[$i] . "')";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't insert ban_userid info into database", "", __LINE__, __FILE__, $sql);
}
}
}
for($i = 0; $i < count($ip_list); $i++)
{
$in_banlist = false;
for($j = 0; $j < count($current_banlist); $j++)
{
if($ip_list[$i] == $current_banlist[$j]['ban_ip'])
{
$in_banlist = true;
}
}
if(!$in_banlist)
{
if( preg_match("/(ff\.)|(\.ff)/is", chunk_split($ip_list[$i], 2, ".")) )
{
$kill_ip_sql = "session_ip LIKE '" . str_replace(".", "", preg_replace("/(ff\.)|(\.ff)/is", "%", chunk_split($ip_list[$i], 2, "."))) . "'";
}
else
{
$kill_ip_sql = "session_ip = '" . $ip_list[$i] . "'";
}
$kill_session_sql .= ( ($kill_session_sql != "") ? " OR " : "" ) . $kill_ip_sql;
$sql = "INSERT INTO " . BANLIST_TABLE . " (ban_ip)
VALUES ('" . $ip_list[$i] . "')";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't insert ban_ip info into database", "", __LINE__, __FILE__, $sql);
}
}
}
//
// Now we'll delete all entries from the
// session table with any of the banned
// user or IP info just entered into the
// ban table ... this will force a session
// initialisation resulting in an instant
// ban
//
if($kill_session_sql != "")
{
$sql = "DELETE FROM " . SESSIONS_TABLE . "
WHERE $kill_session_sql";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete banned sessions from database", "", __LINE__, __FILE__, $sql);
}
}
for($i = 0; $i < count($email_list); $i++)
{
$in_banlist = false;
for($j = 0; $j < count($current_banlist); $j++)
{
if($email_list[$i] == $current_banlist[$j]['ban_email'])
{
$in_banlist = true;
}
}
if(!$in_banlist)
{
$sql = "INSERT INTO " . BANLIST_TABLE . " (ban_email)
VALUES ('" . $email_list[$i] . "')";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't insert ban_email info into database", "", __LINE__, __FILE__, $sql);
}
}
}
$where_sql = "";
if(isset($HTTP_POST_VARS['unban_user']))
{
$user_list = $HTTP_POST_VARS['unban_user'];
for($i = 0; $i < count($user_list); $i++)
{
if($user_list[$i] != -1)
{
if($where_sql != "")
{
$where_sql .= " OR ";
}
$where_sql .= "ban_id = " . $user_list[$i];
}
}
}
if(isset($HTTP_POST_VARS['unban_ip']))
{
$ip_list = $HTTP_POST_VARS['unban_ip'];
for($i = 0; $i < count($ip_list); $i++)
{
if($ip_list[$i] != -1)
{
if($where_sql != "")
{
$where_sql .= " OR ";
}
$where_sql .= "ban_id = " . $ip_list[$i];
}
}
}
if(isset($HTTP_POST_VARS['unban_email']))
{
$email_list = $HTTP_POST_VARS['unban_email'];
for($i = 0; $i < count($email_list); $i++)
{
if($email_list[$i] != -1)
{
if($where_sql != "")
{
$where_sql .= " OR ";
}
$where_sql .= "ban_id = " . $email_list[$i];
}
}
}
if($where_sql != "")
{
$sql = "DELETE FROM " . BANLIST_TABLE . "
WHERE $where_sql";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete ban info from database", "", __LINE__, __FILE__, $sql);
}
}
message_die(GENERAL_MESSAGE, $lang['Ban_update_sucessful']);
}
else
{
$template->set_filenames(array(
"body" => "admin/user_ban_body.tpl")
);
$template->assign_vars(array(
"L_BAN_TITLE" => $lang['Ban_control'],
"L_BAN_EXPLAIN" => $lang['Ban_explain'],
"L_BAN_EXPLAIN_WARN" => $lang['Ban_explain_warn'],
"L_IP_OR_HOSTNAME" => $lang['IP_hostname'],
"L_EMAIL_ADDRESS" => $lang['Email_address'],
"L_SUBMIT" => $lang['Submit'],
"L_RESET" => $lang['Reset'],
"S_BANLIST_ACTION" => append_sid("admin_user_ban.$phpEx"))
);
$userban_count = 0;
$sql = "SELECT user_id, username
FROM " . USERS_TABLE . "
WHERE user_id <> " . ANONYMOUS . "
ORDER BY username ASC";
$u_result = $db->sql_query($sql);
$user_list = $db->sql_fetchrowset($u_result);
$select_userlist = "";
for($i = 0; $i < count($user_list); $i++)
{
$select_userlist .= "";
$userban_count++;
}
$select_userlist = "";
$template->assign_vars(array(
"L_BAN_USER" => $lang['Ban_username'],
"L_BAN_USER_EXPLAIN" => $lang['Ban_username_explain'],
"L_BAN_IP" => $lang['Ban_IP'],
"L_BAN_IP_EXPLAIN" => $lang['Ban_IP_explain'],
"L_BAN_EMAIL" => $lang['Ban_email'],
"L_BAN_EMAIL_EXPLAIN" => $lang['Ban_email_explain'],
"S_BAN_USERLIST_SELECT" => $select_userlist)
);
$userban_count = 0;
$ipban_count = 0;
$emailban_count = 0;
$sql = "SELECT b.ban_id, u.user_id, u.username
FROM " . BANLIST_TABLE . " b, " . USERS_TABLE . " u
WHERE u.user_id = b.ban_userid
AND b.ban_userid <> 0
AND u.user_id <> " . ANONYMOUS . "
ORDER BY u.user_id ASC";
$u_result = $db->sql_query($sql);
$user_list = $db->sql_fetchrowset($u_result);
$select_userlist = "";
for($i = 0; $i < count($user_list); $i++)
{
$select_userlist .= "";
$userban_count++;
}
if($select_userlist == "")
{
$select_userlist = "";
}
else if($userban_count == 1)
{
$select_userlist = "" . $select_userlist;
}
$select_userlist = "";
$sql = "SELECT ban_id, ban_ip, ban_email
FROM " . BANLIST_TABLE;
$b_result = $db->sql_query($sql);
$banlist = $db->sql_fetchrowset($b_result);
$select_iplist = "";
$select_emaillist = "";
for($i = 0; $i < $db->sql_numrows($b_result); $i++)
{
$ban_id = $banlist[$i]['ban_id'];
if( !empty($banlist[$i]['ban_ip']) )
{
$ban_ip = str_replace("255", "*", decode_ip($banlist[$i]['ban_ip']));
$select_iplist .= "";
$ipban_count++;
}
else if( !empty($banlist[$i]['ban_email']) )
{
$ban_email = $banlist[$i]['ban_email'];
$select_emaillist .= "";
$emailban_count++;
}
}
if($select_iplist == "")
{
$select_iplist = "";
}
else if($ipban_count == 1)
{
$select_iplist = "" . $select_iplist;
}
if($select_emaillist == "")
{
$select_emaillist = "";
}
else if($emailban_count == 1)
{
$select_emaillist = "" . $select_emaillist;
}
$select_iplist = "";
$select_emaillist = "";
$template->assign_vars(array(
"L_UNBAN_USER" => $lang['Unban_username'],
"L_UNBAN_USER_EXPLAIN" => $lang['Unban_username_explain'],
"L_UNBAN_IP" => $lang['Unban_IP'],
"L_UNBAN_IP_EXPLAIN" => $lang['Unban_IP_explain'],
"L_UNBAN_EMAIL" => $lang['Unban_email'],
"L_UNBAN_EMAIL_EXPLAIN" => $lang['Unban_email_explain'],
"S_UNBAN_USERLIST_SELECT" => $select_userlist,
"S_UNBAN_IPLIST_SELECT" => $select_iplist,
"S_UNBAN_EMAILLIST_SELECT" => $select_emaillist,
"S_BAN_ACTION" => append_sid("admin_user_ban.$phpEx"))
);
}
$template->pparse("body");
include('page_footer_admin.'.$phpEx);
?>8y%g>I)P(T8څhL0WHh >2K%'uTjŤBVX#oF'd#Vtعxҙ<ɟɞ'6)?[b"\y6
ZiҒcG!} 1VZfV㘻af:0./Dǥ5 ę,l
X-AbMrhHGn)K5648ǂ3HN8CH
W<қJTF7+QE6k~Lp.33jv
dsx2ӝitZ1)$BquCySPݮB"86yR2qLo/.4Ԃtp,F_h&i%&W뉻Ϡ?-4iaS$Z!`/S(d5W7Y,&R5"ӰGmP[,Fӱ#h%Zv+yԱH0cvMv0=4}`u⥌g! (ivp9/^$\g:!cZlG:cKA|6K˄YV8?wU1S/|&Sb*[FHI+$: 㗶titS!
TMɁ"haԩWkBwk{9KO:~NX>rP@=rA `m -HvBGp2TlR\W5Qj]hH2
zkʾ a{zťdP/~$xI,~GЉ3 EUzB4uC
ITMZu=XZ-ctjᲒM{E-vj-@tާT C Y.<-z~]
vtNqΦ^
_,@@Y-ڨ M:#ڦ3c9rZvK'+ۭt7I1#dxG}rbTЏy:W<-ɕKq<c*t(Ѓ>YDڰ]A| seJei9=F:rʐ0FWVZ'h3zY"@@w٤MgPQHƫYUnQÝyIшk
/Nv11U]q&Or'NN l7ښ47kq gDW
\^$>( N;P
ٚ2vi辦ѥZn"SH`Eq`{L?Iόios.8o~:nΉ|3U"K`Ĝy%;BhSs M#aO::fz/3rA1_q!ޒoMM[iH^uFŗ,=[u#mG
BzS\Z
R@
w5o3+
t·
yW8H8E
tG$n|v)N-fLpUF2ڼi vda:j&DRiǎ3{ юGHӼ!3\d.ĔY~d>Ll9iPAO03$p!6/Cq`@_ `D
ap;UER6qű57;)Cgk n7WeBK('t͈|nww l>)5\g@OF̸M.^fFzNCM]`_U =\oK[*O-|Hkv
;kzk\a&J^QņId2Ml>J3T`KK wב('VrñpS7 \ݲ'[edWuF3Go0wSd}뀬 7.+/~0PWI*VX?fq4YAt#A0JBp*S[= ,/M //PFwzOAMwB
^=ZRhđܚ$
2j~mja_QAg,;۱oGhj2Hr0wKRsA5ðЉ
OH"N<7գu