[31368] | 1 | <?php |
---|
[31373] | 2 | // +-----------------------------------------------------------------------+ |
---|
[32400] | 3 | // | Ban IP plugin for Piwigo by TEMMII | |
---|
[31373] | 4 | // +-----------------------------------------------------------------------+ |
---|
[32930] | 5 | // | Copyright(C) 2016-2023 ddtddt http://temmii.com/piwigo/ | |
---|
[31373] | 6 | // +-----------------------------------------------------------------------+ |
---|
| 7 | // | This program is free software; you can redistribute it and/or modify | |
---|
| 8 | // | it under the terms of the GNU General Public License as published by | |
---|
| 9 | // | the Free Software Foundation | |
---|
| 10 | // | | |
---|
| 11 | // | This program is distributed in the hope that it will be useful, but | |
---|
| 12 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
---|
| 13 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
---|
| 14 | // | General Public License for more details. | |
---|
| 15 | // | | |
---|
| 16 | // | You should have received a copy of the GNU General Public License | |
---|
| 17 | // | along with this program; if not, write to the Free Software | |
---|
| 18 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
---|
| 19 | // | USA. | |
---|
| 20 | // +-----------------------------------------------------------------------+ |
---|
[31368] | 21 | |
---|
| 22 | if (!defined('PHPWG_ROOT_PATH')) |
---|
| 23 | die('Hacking attempt!'); |
---|
| 24 | global $template, $conf, $user; |
---|
| 25 | include_once(PHPWG_ROOT_PATH . 'admin/include/tabsheet.class.php'); |
---|
| 26 | load_language('plugin.lang', BANIP_PATH); |
---|
| 27 | $my_base_url = PHPWG_ROOT_PATH.'admin.php?page=plugin-'; |
---|
| 28 | |
---|
| 29 | // +-----------------------------------------------------------------------+ |
---|
| 30 | // | Check Access and exit when user status is not ok | |
---|
| 31 | // +-----------------------------------------------------------------------+ |
---|
| 32 | check_status(ACCESS_ADMINISTRATOR); |
---|
| 33 | |
---|
| 34 | //-------------------------------------------------------- sections definitions |
---|
| 35 | if (!isset($_GET['tab'])) |
---|
| 36 | $page['tab'] = 'banip'; |
---|
| 37 | else |
---|
| 38 | $page['tab'] = $_GET['tab']; |
---|
| 39 | |
---|
| 40 | |
---|
| 41 | |
---|
| 42 | $tabsheet = new tabsheet(); |
---|
[31394] | 43 | $tabsheet->add('banip', l10n('Ban IP'), BANIP_ADMIN . '-banip'); |
---|
[31368] | 44 | $tabsheet->select($page['tab']); |
---|
| 45 | $tabsheet->assign(); |
---|
| 46 | |
---|
| 47 | switch ($page['tab']) { |
---|
| 48 | case 'banip': |
---|
[31394] | 49 | $admin_base_url = BANIP_ADMIN . '-banip'; |
---|
| 50 | $template->assign( |
---|
[31368] | 51 | 'ipbangest', array( |
---|
[31394] | 52 | 'U_DELETEALL' => $admin_base_url . '&deleteall', |
---|
[31368] | 53 | )); |
---|
| 54 | $ipban = pwg_query("SELECT * FROM " . BANIP_TABLE . ";"); |
---|
| 55 | |
---|
| 56 | $template->func_combine_css(array('id'=>'dst','path'=>BANIP_PATH.'banip.css')); |
---|
[32930] | 57 | if (pwg_db_num_rows($ipban)) { |
---|
[31368] | 58 | while ($ipban2 = pwg_db_fetch_assoc($ipban)) { |
---|
| 59 | |
---|
| 60 | $items = array( |
---|
| 61 | 'ID' => $ipban2['id'], |
---|
| 62 | 'IP' => $ipban2['ip'], |
---|
| 63 | 'U_DELETE' => $admin_base_url . '&delete=' . $ipban2['id'], |
---|
| 64 | 'U_EDIT' => $admin_base_url . '&edit=' . $ipban2['id'], |
---|
| 65 | ); |
---|
| 66 | |
---|
| 67 | $template->append('ipban2', $items); |
---|
| 68 | } |
---|
| 69 | } |
---|
| 70 | |
---|
| 71 | if (isset($_GET['delete'])) { |
---|
| 72 | |
---|
| 73 | check_input_parameter('delete', $_GET, false, PATTERN_ID); |
---|
| 74 | $query = 'DELETE FROM ' . BANIP_TABLE . ' WHERE id = ' . $_GET['delete'] . ';'; |
---|
| 75 | pwg_query($query); |
---|
| 76 | |
---|
| 77 | $_SESSION['page_infos'] = array(l10n('IP ban deleted')); |
---|
| 78 | redirect($admin_base_url); |
---|
| 79 | } |
---|
| 80 | |
---|
| 81 | if (isset($_GET['edit'])) { |
---|
| 82 | check_input_parameter('edit', $_GET, false, PATTERN_ID); |
---|
| 83 | $query = 'SELECT * FROM ' . BANIP_TABLE . ' WHERE id = \'' . $_GET['edit'] . '\';'; |
---|
| 84 | $result = pwg_query($query); |
---|
| 85 | $row = pwg_db_fetch_assoc($result); |
---|
| 86 | $template->assign( |
---|
| 87 | 'ipban_edit', array( |
---|
| 88 | 'ID' => $row['id'], |
---|
| 89 | 'IP' => $row['ip'], |
---|
| 90 | )); |
---|
| 91 | } |
---|
| 92 | |
---|
[31394] | 93 | if (isset($_GET['deleteall'])) { |
---|
[31375] | 94 | $query = 'DELETE FROM ' . BANIP_TABLE . ';'; |
---|
| 95 | pwg_query($query); |
---|
[31368] | 96 | redirect($admin_base_url); |
---|
[31394] | 97 | } |
---|
[31368] | 98 | |
---|
[31394] | 99 | |
---|
[31368] | 100 | //add ban |
---|
| 101 | if (isset($_POST['submitipban'])) { |
---|
| 102 | $template->assign( |
---|
| 103 | 'ipban_add', array( |
---|
| 104 | 'nada' => l10n('nada'), |
---|
| 105 | )); |
---|
| 106 | $template->clear_assign( |
---|
| 107 | 'ipban_edit', array( |
---|
| 108 | )); |
---|
| 109 | } |
---|
| 110 | |
---|
| 111 | if (isset($_POST['submitaddipban'])) { |
---|
[31375] | 112 | $plage= explode(".", $_POST['inserip']); |
---|
| 113 | if(count($plage)!=4) |
---|
| 114 | { |
---|
[31419] | 115 | $_SESSION['page_errors'] = array(l10n('This isn\'t an IP')); |
---|
[31375] | 116 | redirect($admin_base_url); |
---|
| 117 | } |
---|
| 118 | if($plage[3]=='*') |
---|
| 119 | { |
---|
| 120 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $_POST['inserip'] . '\';'; |
---|
| 121 | $result = pwg_query($query); |
---|
| 122 | $exist=pwg_db_fetch_array($result); |
---|
| 123 | if($exist['verif_exist']>0) |
---|
| 124 | { |
---|
| 125 | $_SESSION['page_errors'] = array(l10n('Range IP already banned')); |
---|
| 126 | redirect($admin_base_url); |
---|
| 127 | } |
---|
| 128 | } |
---|
| 129 | $ipaddinrange=$plage[0].".".$plage[1].".".$plage[2].".*"; |
---|
| 130 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $ipaddinrange . '\';'; |
---|
| 131 | $result = pwg_query($query); |
---|
| 132 | $exist=pwg_db_fetch_array($result); |
---|
| 133 | if($exist['verif_exist']>0) |
---|
| 134 | { |
---|
[31419] | 135 | $_SESSION['page_errors'] = array(l10n('IP is in a banned range')); |
---|
[31375] | 136 | redirect($admin_base_url); |
---|
| 137 | } |
---|
| 138 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $_POST['inserip'] . '\';'; |
---|
| 139 | $result = pwg_query($query); |
---|
| 140 | $exist=pwg_db_fetch_array($result); |
---|
| 141 | if($exist['verif_exist']>0) |
---|
| 142 | { |
---|
| 143 | $_SESSION['page_errors'] = array(l10n('IP already banned')); |
---|
| 144 | redirect($admin_base_url); |
---|
| 145 | } |
---|
| 146 | if($plage[3]=='*') |
---|
| 147 | { |
---|
| 148 | $oldip=$plage[0].".".$plage[1].".".$plage[2]."."; |
---|
| 149 | $query = 'DELETE FROM ' . BANIP_TABLE . ' WHERE ip LIKE "' . $oldip . '%";'; |
---|
| 150 | pwg_query($query); |
---|
[31419] | 151 | $_SESSION['page_infos'] = array(l10n('Range IP ban insert')); |
---|
[31375] | 152 | } |
---|
| 153 | else |
---|
| 154 | { |
---|
[31419] | 155 | $_SESSION['page_infos'] = array(l10n('IP ban insert')); |
---|
[31375] | 156 | } |
---|
| 157 | $query = 'INSERT INTO ' . BANIP_TABLE .'(ip) VALUES ("' . $_POST['inserip'] . '");'; |
---|
| 158 | $result = pwg_query($query); |
---|
| 159 | redirect($admin_base_url); |
---|
[31368] | 160 | } |
---|
[31375] | 161 | |
---|
| 162 | if (isset($_POST['submitaddipban2'])) { |
---|
| 163 | $plage= explode(".", $_POST['inserip']); |
---|
| 164 | if(count($plage)!=4) |
---|
| 165 | { |
---|
[31419] | 166 | $_SESSION['page_errors'] = array(l10n('This isn\'t an IP')); |
---|
[31375] | 167 | redirect($admin_base_url); |
---|
| 168 | } |
---|
| 169 | if($plage[3]=='*') |
---|
| 170 | { |
---|
| 171 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $_POST['inserip'] . '\';'; |
---|
| 172 | $result = pwg_query($query); |
---|
| 173 | $exist=pwg_db_fetch_array($result); |
---|
| 174 | if($exist['verif_exist']>0) |
---|
| 175 | { |
---|
| 176 | $_SESSION['page_errors'] = array(l10n('Range IP already banned')); |
---|
| 177 | redirect($admin_base_url); |
---|
| 178 | } |
---|
| 179 | } |
---|
| 180 | $ipaddinrange=$plage[0].".".$plage[1].".".$plage[2].".*"; |
---|
| 181 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $ipaddinrange . '\';'; |
---|
| 182 | $result = pwg_query($query); |
---|
| 183 | $exist=pwg_db_fetch_array($result); |
---|
| 184 | if($exist['verif_exist']>0) |
---|
| 185 | { |
---|
[31419] | 186 | $_SESSION['page_errors'] = array(l10n('IP is in a banned range')); |
---|
[31375] | 187 | redirect($admin_base_url); |
---|
| 188 | } |
---|
| 189 | $query = 'SELECT COUNT(*) AS verif_exist FROM ' . BANIP_TABLE . ' WHERE ip = \'' . $_POST['inserip'] . '\';'; |
---|
| 190 | $result = pwg_query($query); |
---|
| 191 | $exist=pwg_db_fetch_array($result); |
---|
| 192 | if($exist['verif_exist']>0) |
---|
| 193 | { |
---|
| 194 | $_SESSION['page_errors'] = array(l10n('IP already banned')); |
---|
| 195 | redirect($admin_base_url); |
---|
| 196 | } |
---|
| 197 | if($plage[3]=='*') |
---|
| 198 | { |
---|
| 199 | $oldip=$plage[0].".".$plage[1].".".$plage[2]."."; |
---|
| 200 | $query = 'DELETE FROM ' . BANIP_TABLE . ' WHERE ip LIKE "' . $oldip . '%";'; |
---|
| 201 | pwg_query($query); |
---|
[31419] | 202 | $_SESSION['page_infos'] = array(l10n('Range IP ban update')); |
---|
[31375] | 203 | } |
---|
| 204 | else |
---|
| 205 | { |
---|
[31419] | 206 | $_SESSION['page_infos'] = array(l10n('IP ban update')); |
---|
[31375] | 207 | } |
---|
| 208 | $query = 'UPDATE ' . BANIP_TABLE .' SET ip= "'.$_POST['inserip'].'" WHERE id = '.$_POST['invisibleID'].';'; |
---|
| 209 | $result = pwg_query($query); |
---|
| 210 | redirect($admin_base_url); |
---|
| 211 | } |
---|
| 212 | |
---|
[31368] | 213 | break; |
---|
| 214 | } |
---|
| 215 | |
---|
| 216 | |
---|
| 217 | $template->set_filenames(array('plugin_admin_content' => dirname(__FILE__) . '/admin.tpl')); |
---|
| 218 | $template->assign_var_from_handle('ADMIN_CONTENT', 'plugin_admin_content'); |
---|
| 219 | ?> |
---|