diff options
| author | Savetheinternet <savetheinternet@tinyboard.org> | 2011-11-22 00:25:00 +1100 |
|---|---|---|
| committer | Savetheinternet <savetheinternet@tinyboard.org> | 2011-11-22 00:25:00 +1100 |
| commit | 6aa24cce92e43c0e4735930566da2a3b27910859 (patch) | |
| tree | 4a08c4af18085546f51c327efa3afddd4c2fc1e5 | |
| parent | 3380c3008f2922b39243a2816a0cf0a9a6a029a3 (diff) | |
CIDR netmask bans
| -rw-r--r-- | inc/config.php | 4 | ||||
| -rw-r--r-- | inc/functions.php | 18 |
2 files changed, 20 insertions, 2 deletions
diff --git a/inc/config.php b/inc/config.php index cdeffea9..d6b10f0e 100644 --- a/inc/config.php +++ b/inc/config.php @@ -718,6 +718,10 @@ // A little more load on the database $config['ban_range'] = true; + // Enable CDIR netmask bans (eg. "10.0.0.0/8" for 10.0.0.0.0 - 10.255.255.255). Useful for stopping persistent spammers. + // Again, a little more database load. + $config['ban_cidr'] = true; + // Do a DNS lookup on IP addresses to get their hostname on the IP summary page $config['mod']['dns_lookup'] = true; // Show ban form on the IP summary page diff --git a/inc/functions.php b/inc/functions.php index 74e94ea6..7934a53a 100644 --- a/inc/functions.php +++ b/inc/functions.php @@ -537,8 +537,7 @@ if(!isset($_SERVER['REMOTE_ADDR'])) { // Server misconfiguration return; - } - + } $query = prepare("SELECT `set`, `expires`, `reason`, `board`, `uri`, `bans`.`id` FROM `bans` LEFT JOIN `boards` ON `boards`.`id` = `board` WHERE (`board` IS NULL OR `uri` = :board) AND `ip` = :ip ORDER BY `expires` IS NULL DESC, `expires` DESC, `expires` DESC LIMIT 1"); $query->bindValue(':ip', $_SERVER['REMOTE_ADDR']); @@ -550,6 +549,21 @@ $query->bindValue(':board', $board); $query->execute() or error(db_error($query)); } + if($query->rowCount() < 1 && $config['ban_cidr']) { + // my most insane SQL query yet + $query = prepare("SELECT `set`, `expires`, `reason`, `board`, `uri`, `bans`.`id` FROM `bans` LEFT JOIN `boards` ON `boards`.`id` = `board` WHERE (`board` IS NULL OR `uri` = :board) + AND ( + `ip` REGEXP '^(\[0-9]+\.\[0-9]+\.\[0-9]+\.\[0-9]+\)\/(\[0-9]+)$' + AND + :ip >= INET_ATON(SUBSTRING_INDEX(`ip`, '/', 1)) + AND + :ip < INET_ATON(SUBSTRING_INDEX(`ip`, '/', 1)) + POW(2, 32 - SUBSTRING_INDEX(`ip`, '/', -1)) + ) + ORDER BY `expires` IS NULL DESC, `expires` DESC LIMIT 1"); + $query->bindValue(':ip', ip2long($_SERVER['REMOTE_ADDR'])); + $query->bindValue(':board', $board); + $query->execute() or error(db_error($query)); + } if($ban = $query->fetch()) { if($ban['expires'] && $ban['expires'] < time()) { |