<?php

 /**

 * File: EditIP.Admin.class.php

 * This is the Edit IPBlacklist Module for the Geeklog Spam-X plugin

 *

 * Copyright (C) 2004-2009 by the following authors:

 * Author   Tom Willett     tomw AT pigstye DOT net

 *          Dirk Haun       dirk AT haun-online DOT de

 *

 * Licensed under GNU General Public License

 *

 * @package Spam-X

 * @subpackage Modules

 */

 if (strpos(strtolower($_SERVER['PHP_SELF']), 'editip.admin.class.php') !== false) {

     die('This file can not be used on its own!');

 }

 /**

 * Include Abstract Base Class

 */

 require_once $_CONF['path'] . 'plugins/spamx/BaseAdmin.class.php';

 /**

 * IP Black List Editor

 *

 * @package Spam-X

 *

 */

 class EditIP extends BaseAdmin {

     /**

      * Constructor

      */

     function display()

     {

         global $_CONF, $_TABLES, $LANG_SX00;

         $action = '';

         if (isset($_GET['action'])) {

             $action = $_GET['action'];

         } elseif (isset($_POST['paction'])) {

             $action = $_POST['paction'];

         }

         $entry = '';

         if (isset($_GET['entry'])) {

             $entry = COM_stripslashes($_GET['entry']);

         } elseif (isset($_POST['pentry'])) {

             $entry = COM_stripslashes($_POST['pentry']);

         }

         if (($action == 'delete') && SEC_checkToken()) {

             $entry = addslashes($entry);

             DB_delete($_TABLES['spamx'], array('name', 'value'),

                                          array('IP', $entry));

         } elseif (($action == $LANG_SX00['addentry']) && SEC_checkToken()) {

             if (!empty($entry)) {

                 $entry = str_replace(' ', '', $entry);

                 $entry = addslashes($entry);

                 $result = DB_query("INSERT INTO {$_TABLES['spamx']} VALUES ('IP', '$entry')");

             }

         }

         $token = SEC_createToken();

         $display = '<hr' . XHTML . '>' . LB . '<p><b>';

         $display .= $LANG_SX00['ipblack'];

         $display .= '</b></p>' . LB . '<ul>' . LB;

         $result = DB_query("SELECT value FROM {$_TABLES['spamx']} WHERE name = 'IP'");

         $nrows = DB_numRows($result);

         for ($i = 0; $i < $nrows; $i++) {

             list($e) = DB_fetchArray($result);

             $display .= '<li>'. COM_createLink(htmlspecialchars($e),

                 $_CONF['site_admin_url']

                 . '/plugins/spamx/index.php?command=EditIP&amp;action=delete&amp;entry=' . urlencode($e) . '&amp;' . CSRF_TOKEN . '=' . $token) . '</li>' . LB;

         }

         $display .= '</ul>' . LB . '<p>' . $LANG_SX00['e1'] . '</p>' . LB;

         $display .= '<p>' . $LANG_SX00['e2'] . '</p>' . LB;

         $display .= '<form method="post" action="' . $_CONF['site_admin_url']

                  . '/plugins/spamx/index.php?command=EditIP">' . LB;

         $display .= '<div><input type="text" size="31" name="pentry"' . XHTML

                  . '>   ';

         $display .= '<input type="submit" name="paction" value="'

                  . $LANG_SX00['addentry'] . '"' . XHTML . '>' . LB;

         $display .= '<input type="hidden" name="' . CSRF_TOKEN

                  . "\" value=\"{$token}\"" . XHTML . '>' . LB;

         $display .= '</div></form>' . LB;

         return $display;

     }

     function link()

     {

         return 'Edit IP Blacklist';

     }

 }

 ?>