How to restrict the visitor's ip address (PHPBB Code) Code :? Php *************************************** * ********************************** admin_user_ban.php *------------------- * begin: tuesday, Jul31, 2001 * copyright :( C) 2001ThephpBBGroup * email: [email] phpBB
Code: /*************************************** ************************************
* Admin_user_ban.php
*-------------------
* Begin: Tuesday, Jul 31,200 1
* Copyright: (C) 2001 The phpBB Group
* Email: [email] support@phpbb.com [/email]
*
* $ Id: admin_user_ban.php, v 1.21.2.2 2002/05/12 15:57:45 psotfx Exp $
*
*
**************************************** ***********************************/
/*************************************** ************************************
* This file is part of the phpBB2 port to Nuke 6.0 (c) copyright 2002
* By Tom Nitzschner ([email] tom@toms-home.com [/email])
* [Url] http://bbtonuke.sourceforge.net [/url] (or [url] http://www.toms-home.com) [/url]
*
* As always, make a backup before messing with anything. All code
* Release by me is considered sample code only. It may be fully
* Functual, but you use it at your own risk, if you break it,
* You get to fix it too. No waranty is given or implied.
*
* Please post all questions/request about this port on [url] http://bbtonuke.sourceforge.net [/url] first,
* Then on my site. All original header code and copyright messages will be maintained
* To give credit where credit is due. If you modify this, the only requirement is
* That you also maintain all original copyright messages. All my work is released
* Under the gnu general public license. Please see the README for more information.
*
**************************************** ***********************************/
/*************************************** ************************************
*
* This program is free software; you can redistribute it and/or modify
* It under the terms of the GNU General Public License as published
* The Free Software Foundation; either version 2 of the License, or
* (At your option) any later version.
*
**************************************** ***********************************/
Define ('in _ phpbb', 1 );
If (! Empty ($ setmodules ))
{
$ Filename = basename (_ FILE __);
$ Module ['users'] ['ban _ management'] = $ filename;
Return;
}
//
// Load default header
//
$ Phpbb_root_path = './../';
Require ($ phpbb_root_path. 'extension. Inc ');
Require ('./pagestart.'. $ phpEx );
//
// Start program
//
If (isset ($ HTTP_POST_VARS ['submit '])
{
$ User_bansql = ';
$ Email_bansql = ';
$ Ip_bansql = ';
$ User_list = array ();
If (! Empty ($ HTTP_POST_VARS ['username'])
{
$ This_userdata = get_userdata ($ HTTP_POST_VARS ['username']);
If (! $ This_userdata)
{
Message_die (GENERAL_MESSAGE, $ lang ['no _ user_id_specified ']);
}
$ User_list [] = $ this_userdata ['User _ id'];
}
$ Ip_list = array ();
If (isset ($ HTTP_POST_VARS ['ban _ IP'])
{
$ Ip_list_temp = explode (',', $ HTTP_POST_VARS ['ban _ IP']);
For ($ I = 0; $ I <count ($ ip_list_temp); $ I ++)
{
If (preg_match ('/^ ([0-9] {1, 3 })\. ([0-9] {1, 3 })\. ([0-9] {1, 3 })\. ([0-9] {1, 3}) [] * \-[] * ([0-9] {1, 3 })\. ([0-9] {1, 3 })\. ([0-9] {1, 3 })\. ([0-9] {1, 3}) $/', trim ($ ip_list_temp [$ I]), $ ip_range_explode ))
{
//
// Don't ask about all this, just don't ask ...! Why?
//
$ Ip_counter = $ ip_range_explode [1];
$ Ip_shortend = $ ip_range_explode [5];
While ($ ip_{counter <= $ ip_{end)
{
$ Ip_2_counter = ($ ip_counter counter = $ ip_range_explode [1])? $ Ip_range_explode [2]: 0;
$ Ip_2_end = ($ ip_1_counter <$ ip_1_end )? 254: $ ip_range_explode [6];
If ($ ip_2_counter = 0 & $ ip_2_end = 254)
{
$ Ip_2_counter = 255;
$ Ip_2_fragment = 255;
$ Ip_list [] = encode_ip ("$ ip_0000counter.0000255 ");
}
While ($ ip_2_counter <= $ ip_2_end)
{
$ Ip_3_counter = ($ ip_2_counter = $ ip_range_explode [2] & $ ip_1_counter = $ ip_range_explode [1])? $ Ip_range_explode [3]: 0;
$ Ip_3_end = ($ ip_2_counter <$ ip_2_end
$ Ip_counter <$ ip_{end )? 254: $ ip_range_explode [7];
If ($ ip_3_counter = 0 & $ ip_3_end = 254)
{
$ Ip_3_counter = 255;
$ Ip_3_fragment = 255;
$ Ip_list [] = encode_ip ("$ ip_counter. $ ip_2_counter.0000255 ");
}
While ($ ip_3_counter <= $ ip_3_end)
{
$ Ip_4_counter = ($ ip_3_counter = $ ip_range_explode [3] & $ ip_2_counter = $ counter [2] & $ ip_counter counter = $ ip_range_explode [1])? $ Ip_range_explode [4]: 0;
$ Ip_4_end = ($ ip_3_counter <$ ip_3_end
$ Ip_2_counter <$ ip_2_end )? 254: $ ip_range_explode [8];
If ($ ip_4_counter = 0 & $ ip_4_end = 254)
{
$ Ip_4_counter = 255;
$ Ip_4_fragment = 255;
$ Ip_list [] = encode_ip ("$ ip_counter. $ ip_2_counter. $ ip_3_counter.255 ");
}
While ($ ip_4_counter <= $ ip_4_end)
{
$ Ip_list [] = encode_ip ("$ ip_counter. $ ip_2_counter. $ ip_3_counter. $ ip_4_counter ");
$ Ip_4_counter ++;
}
$ Ip_3_counter ++;
}
$ Ip_2_counter ++;
}
$ Ip_counter ++;
}
}
Else if (preg_match ('/^ ([\ w \-_] \.?) {2 ,}$/is ', trim ($ ip_list_temp [$ I])
{
$ Ip = gethostbynamel (trim ($ ip_list_temp [$ I]);
For ($ j = 0; $ j <count ($ ip); $ j ++)
{
If (! Empty ($ ip [$ j])
{
$ Ip_list [] = encode_ip ($ ip [$ j]);
}
}
}
Else if (preg_match ('/^ ([0-9] {1, 3 })\. ([0-9 \ *] {1, 3 })\. ([0-9 \ *] {1, 3 })\. ([0-9 \ *] {1, 3}) $/', trim ($ ip_list_temp [$ I])
{
$ Ip_list [] = encode_ip (str_replace ('*', '000000', trim ($ ip_list_temp [$ I]);
}
}
}
$ Email_list = array ();
If (isset ($ HTTP_POST_VARS ['ban _ email '])
{
$ Email_list_temp = explode (',', $ HTTP_POST_VARS ['ban _ email ']);
For ($ I = 0; $ I <count ($ email_list_temp); $ I ++)
{
//
// This ereg match is based on one by [email] php@unreelpro.com [/email]
// Contained in the annotated php manual at php.com (ereg
// Section)
//
If (eregi ('^ ([[: alnum:] \ *] + ([-_.] [[: alnum:] \ *] + )*\.?) | (\ *) @ ([[: Alnum:] + ([-_]? [[: Alnum:] + )*\.) {1, 3} ([[: alnum:] {2, 6}) $ ', trim ($ email_list_temp [$ I])
{
$ Email_list [] = trim ($ email_list_temp [$ I]);
}
}
}
$ SQL = "SELECT *
FROM ". BANLIST_TABLE;
If (! ($ Result = $ db-> SQL _query ($ SQL )))
{
Message_die (GENERAL_ERROR, "Couldn't obtain banlist information", "", _ LINE __, _ FILE __, $ SQL );
}
$ Current_banlist = $ db-> SQL _fetchrowset ($ result );
$ Db-> SQL _freeresult ($ result );
$ Kill_session_ SQL = ';
For ($ I = 0; $ I <count ($ user_list); $ I ++)
{
$ In_banlist = false;
For ($ j = 0; $ j <count ($ current_banlist); $ j ++)
{
If ($ user_list [$ I] ==$ current_banlist [$ j] ['ban _ userid'])
{
$ In_banlist = true;
}
}
If (! $ In_banlist)
{
$ Kill_session_ SQL. = ($ kill_session_ SQL! = ')? 'OR': '). "session_user_id =". $ user_list [$ I];
$ SQL = "INSERT INTO". BANLIST_TABLE. "(ban_userid)
VALUES (". $ user_list [$ I].") ";
If (! $ Db-> SQL _query ($ SQL ))
{
Message_die (GENERAL_ERROR, "Couldn't insert ban_userid info into database", "", _ LINE __, _ FILE __, $ SQL );
}
}
}
For ($ I = 0; $ I <count ($ ip_list); $ I ++)
{
$ In_banlist = false;
For ($ j = 0; $ j <count ($ current_banlist); $ j ++)
{
If ($ ip_list [$ I] ==$ current_banlist [$ j] ['ban _ IP'])
{
$ In_banlist = true;
}
}
If (! $ In_banlist)
{
If (preg_match ('/(ff \.) | (\. ff)/is', chunk_split ($ ip_list [$ I], 2 ,'.')))
{
$ Kill_ip_ SQL = "session_ip LIKE '". str_replace ('. ',', preg_replace ('/(ff \.) | (\. ff)/is ',' % ', chunk_split ($ ip_list [$ I], 2 ,". "))). "'";
}
Else
{
$ Kill_ip_ SQL = "session_ip = '". $ ip_list [$ I]. "'";
}
$ Kill_session_ SQL. = ($ kill_session_ SQL! = ')? 'OR': '). $ kill_ip_ SQL;
$ SQL = "INSERT INTO". BANLIST_TABLE. "(ban_ip)
VALUES ('". $ ip_list [$ I]."') ";
If (! $ Db-> SQL _query ($ SQL ))
{
Message_die (GENERAL_ERROR, "Couldn't insert ban_ip info into database", "", _ LINE __, _ FILE __, $ SQL );
}
}
}
//
// Now we'll delete all entries from the session table with any of the banned
// User or IP info just entered into the ban table... this will force a session
// Initialisation resulting in an instant ban
//
If ($ kill_session_ SQL! = ')
{
$ SQL = "DELETE FROM". SESSIONS_TABLE ."
WHERE $ kill_session_ SQL ";
If (! $ Db-> SQL _query ($ SQL ))
{
Message_die (GENERAL_ERROR, "Couldn't delete banned sessions from database", "", _ LINE __, _ FILE __, $ SQL );
}
}
For ($ I = 0; $ I <count ($ email_list); $ I ++)
{
$ In_banlist = false;
For ($ j = 0; $ j <count ($ current_banlist); $ j ++)
{
If ($ email_list [$ I] = $ current_banlist [$ j] ['ban _ email '])
{
$ In_banlist = true;
}
}
If (! $ In_banlist)
{
$ SQL = "INSERT INTO". BANLIST_TABLE. "(ban_email)
VALUES ('". str_replace ("' "," '", $ email_list [$ I])."') ";
If (! $ Db-> SQL _query ($ SQL ))
{
Message_die (GENERAL_ERROR, "Couldn't insert ban_email info into database", "", _ LINE __, _ FILE __, $ SQL );
}
}
}
$ Where_ SQL = ';
If (isset ($ HTTP_POST_VARS ['unban _ user'])
{
$ User_list = $ HTTP_POST_VARS ['unban _ user'];
For ($ I = 0; $ I <count ($ user_list); $ I ++)
{
If ($ user_list [$ I]! =-1)
{
$ Where_ SQL. = ($ where_ SQL! = ')? ',': '). $ User_list [$ I];
}
}
}
If (isset ($ HTTP_POST_VARS ['unban _ IP'])
{
$ Ip_list = $ HTTP_POST_VARS ['unban _ IP'];
For ($ I = 0; $ I <count ($ ip_list); $ I ++)
{
If ($ ip_list [$ I]! =-1)
{
$ Where_ SQL. = ($ where_ SQL! = ')? ',': '). $ Ip_list [$ I];
}
}
}
If (isset ($ HTTP_POST_VARS ['unban _ email '])
{
$ Email_list = $ HTTP_POST_VARS ['unban _ email '];
For ($ I = 0; $ I <count ($ email_list); $ I ++)
{
If ($ email_list [$ I]! =-1)
{
$ Where_ SQL. = ($ where_ SQL! = ')? ',': '). $ Email_list [$ I];
}
}
}
If ($ where_ SQL! = ')
{
$ SQL = "DELETE FROM". BANLIST_TABLE ."
WHERE ban_id IN ($ where_ SQL )";
If (! $ Db-> SQL _query ($ SQL ))
{
Message_die (GENERAL_ERROR, "Couldn't delete ban info from database", "", _ LINE __, _ FILE __, $ SQL );
}
}
$ Message = $ lang ['ban _ update_sucessful '].'
'. Sprintf ($ lang ['click _ return_banadmin'], '','').'
'. Sprintf ($ lang ['click _ return_admin_index'], '','');
Message_die (GENERAL_MESSAGE, $ message );
}
Else
{
$ Template-> set_filenames (array (
'Body' => 'admin/user_ban_body.tpl ')
);
$ Template-> assign_vars (array (
'L _ BAN_TITLE '=> $ lang ['ban _ control'],
'L _ BAN_EXPLAIN '=> $ lang ['ban _ explain'],
'L _ ban_explain_warn' => $ lang ['ban _ explain_warn'],
'L _ ip_or_hostname' => $ lang ['IP _ hostname'],
'L _ EMAIL_ADDRESS '=> $ lang ['email _ address'],
'L _ SUBMIT '=> $ lang ['submit'],
'L _ reset' => $ lang ['reset'],
'S _ BANLIST_ACTION '=> append_sid ("admin_user_ban. $ phpEx "))
);
$ Template-> assign_vars (array (
'L _ ban_user' => $ lang ['ban _ username'],
'L _ BAN_USER_EXPLAIN '=> $ lang ['ban _ username_explain'],
'L _ BAN_IP '=> $ lang ['ban _ IP'],
'L _ BAN_IP_EXPLAIN '=> $ lang ['ban _ IP_explain'],
'L _ BAN_EMAIL '=> $ lang ['ban _ email'],
'L _ BAN_EMAIL_EXPLAIN '=> $ lang ['ban _ email_explain'])
);
$ Userban_count = 0;
$ Ipban_count = 0;
$ Emailban_count = 0;
$ SQL = "SELECT B. ban_id, u. user_id, u. username
FROM ". BANLIST_TABLE." B, ". USERS_TABLE." u
WHERE u. user_id = B. ban_userid
AND B. ban_userid <> 0
AND u. user_id <> ". ANONYMOUS ."
Order by u. user_id ASC ";
If (! ($ Result = $ db-> SQL _query ($ SQL )))
{
Message_die (GENERAL_ERROR, 'could not select current user_id ban list', ', _ LINE __, _ FILE __, $ SQL );
}
$ User_list = $ db-> SQL _fetchrowset ($ result );
$ Db-> SQL _freeresult ($ result );
$ Select_userlist = ';
For ($ I = 0; $ I <count ($ user_list); $ I ++)
{
$ Select_userlist. =' '. $ User_list [$ I] ['username'].'';
$ Userban_count ++;
}
If ($ select_userlist = ')
{
$ Select_userlist =' '. $ Lang ['no _ banned_users'].'';
}
$ Select_userlist =' '. $ Select_userlist .'';
$ SQL = "SELECT ban_id, ban_ip, ban_email
FROM ". BANLIST_TABLE;
If (! ($ Result = $ db-> SQL _query ($ SQL )))
{
Message_die (GENERAL_ERROR, 'could not select current ip ban list', ', _ LINE __, _ FILE __, $ SQL );
}
$ Banlist = $ db-> SQL _fetchrowset ($ result );
$ Db-> SQL _freeresult ($ result );
$ Select_iplist = ';
$ Select_emaillist = ';
For ($ I = 0; $ I <count ($ banlist); $ I ++)
{
$ Ban_id = $ banlist [$ I] ['ban _ id'];
If (! Empty ($ banlist [$ I] ['ban _ IP'])
{
$ Ban_ip = str_replace ('20140901', '*', decode_ip ($ banlist [$ I] ['ban _ IP']);
$ Select_iplist. =' '. $ Ban_ip .'';
$ Ipban_count ++;
}
Else if (! Empty ($ banlist [$ I] ['ban _ email '])
{
$ Ban_email = $ banlist [$ I] ['ban _ email '];
$ Select_emaillist. =' '. $ Ban_email .'';
$ Emailban_count ++;
}
}
If ($ select_iplist = ')
{
$ Select_iplist =' '. $ Lang ['no _ banned_ip'].'';
}
If ($ select_emaillist = ')
{
$ Select_emaillist =' '. $ Lang ['no _ banned_email'].'';
}
$ Select_iplist =' '. $ Select_iplist .'';
$ Select_emaillist =' '. $ Select_emaillist .'';
$ Template-> assign_vars (array (
'L _ UNBAN_USER '=> $ lang ['unban _ username'],
'L _ UNBAN_USER_EXPLAIN '=> $ lang ['unban _ username_explain'],
'L _ UNBAN_IP '=> $ lang ['unban _ IP'],
'L _ UNBAN_IP_EXPLAIN '=> $ lang ['unban _ IP_explain'],
'L _ UNBAN_EMAIL '=> $ lang ['unban _ email'],
'L _ UNBAN_EMAIL_EXPLAIN '=> $ lang ['unban _ email_explain'],
'L _ username' => $ lang ['username'],
'L _ LOOK_UP '=> $ lang ['Look _ up_User'],
'L _ find_username' => $ lang ['find _ username'],
'U _ SEARCH_USER '=> append_sid ("search. $ phpEx? Mode = searchuser & popup = 1 & menu = 1 "),
'S _ UNBAN_USERLIST_SELECT '=> $ select_userlist,
'S _ UNBAN_IPLIST_SELECT '=> $ select_iplist,
'S _ UNBAN_EMAILLIST_SELECT '=> $ select_emaillist,
'S _ BAN_ACTION '=> append_sid ("admin_user_ban. $ phpEx "))
);
}
$ Template-> pparse ('body ');
Include ('./page_footer_admin.'. $ phpEx );
?>