<?php
$host = "host";
$user = "user";
$pass = "password";
$db = "database";
mysql_connect($host,$user,$pass);
mysql_select_db($db);
?>
<!-- HTML part for the form-->
<form method="post">
<table>
<tr>
<td align=left> Name: </td><td><input type="text" name="naam" size="20" maxlength="20"></td>
</tr>
<tr>
<td align=left> Message: </td><td><input type="text" name="bericht" size="100" maxlength="100"></td>
</tr>
<tr>
<td><input class="button" type="submit" name="submit" value="Add it!"></td>
</tr>
</table>
</form>
<?
$banned_ips = array('127.0.0.1','255.255.255.0','localhost');
// Determine the poster's IP address
function getip()
{
if(isset($_SERVER['HTTP_CLIENT_IP']))
{
$ip = $_SERVER['HTTP_CLIENT_IP'];
} else {
if(getenv('HTTP_X_FORWARDED_FOR'))
{
$ip = getenv('REMOTE_ADDR');
if(preg_match("/^([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)/", getenv('HTTP_X_FORWARDED_FOR'), $ip3))
{
$ip2 = array('/^0\./', '/^127\.0\.0\.1/', '/^192\.168\..*/', '/^172\.16\..*/', '/^10..*/', '/^224..*/', '/^240..*/');
$ip = preg_replace($ip2, $ip, $ip3[1]);
}
} else {
$ip = getenv('REMOTE_ADDR');
}
if($ip == "") $ip = "x.x.x.x";
}
return $ip;
}
$IPbezoeker = getip();
$tijd = date("d/m/y - H:i:s");
$tijd2 = time();
$naam = $_POST['naam'];
$bericht = $_POST['bericht'];
if(isset($_POST['submit'])){
if (in_array("$IPbezoeker",$banned_ips)){
$ip_check = "true";
} else {
if (!(in_array("$IPbezoeker",$banned_ips))){
$ip_check = "false";
}}
if($ip_check = "false"){
mysql_query ("INSERT INTO berichten (naam, bericht, ip, tijd, tijd2) VALUES ('$naam','$bericht','$IPbezoeker','$tijd','$tijd2')");
echo "<table>The message was successfully added! Sending you back to the frontpage now...</table>";
echo "<meta http-equiv='Refresh' content='2; url=index.php'>";
echo "Your ip is $IPbezoeker";
} else {
if(isset($_POST['submit']) AND $ip_check = "true"){
echo "Sorry, but you can't post messages anymore. You have been banned for misuse of the system!";
echo "Your ip is $IPbezoeker";
}}}
mysql_close();
?>
I'm trying to get this to work, but am absolutely stumped at why it is NOT working. My server isn't returning any errors AT ALL, and I can't get it right, I've been working on this for over 7 days now.
2007-11-04T12:33:15+00:00
132
PHP
message-system-ip-ban
9
Message system IP-ban
2010-02-08T13:46:20+00:00
291
if(isset($_POST['submit'])){
$ip_check = "false";
if (in_array("$IPbezoeker",$banned_ips)){
$ip_check = "true";
}
}
132
I think the problem is located in lines 66-78. I would prefer this code:
"if(!(in_array" is not correctly copied...
2007-11-04T13:47:20+00:00
712
PHP
3
4
On Message system IP-ban
Marco Kranenburg
<title>- Spidey 666 - Add a message!</title>
<?php
$host = "";
$user = "";
$pass = ";
$db = "";
mysql_connect($host,$user,$pass);
mysql_select_db($db);
?>
<!-- HTML gedeelte voor het formuliertje -->
<form method="post">
<table>
<tr>
<td align=left> Name: </td><td><input type="text" name="naam" size="20" maxlength="20"></td>
</tr>
<tr>
<td align=left> Message: </td><td><input type="text" name="bericht" size="100" maxlength="100"></td>
</tr>
<tr>
<td><input class="button" type="submit" name="submit" value="Add it!"></td>
</tr>
</table>
</form>
<br><br><br><br>
Keep in mind, misuse WILL get you banned from posting! Use common sense and don't spam and it'll all work out ^^
<br><br><br><br>
<?
$banned_ips = array();
function getip()
{
if(isset($_SERVER['HTTP_CLIENT_IP']))
{
$ip = $_SERVER['HTTP_CLIENT_IP'];
} else {
if(getenv('HTTP_X_FORWARDED_FOR'))
{
$ip = getenv('REMOTE_ADDR');
if(preg_match("/^([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)/", getenv('HTTP_X_FORWARDED_FOR'), $ip3))
{
$ip2 = array('/^0\./', '/^127\.0\.0\.1/', '/^192\.168\..*/', '/^172\.16\..*/', '/^10..*/', '/^224..*/', '/^240..*/');
$ip = preg_replace($ip2, $ip, $ip3[1]);
}
} else {
$ip = getenv('REMOTE_ADDR');
}
if($ip == "") $ip = "x.x.x.x";
}
return $ip;
}
$IPbezoeker = getip();
$tijd = date("d/m/y - H:i:s");
$tijd2 = time();
$naam = $_POST['naam'];
$bericht = $_POST['bericht'];
if(isset($_POST['submit'])){
$ip_check = in_array($IPbezoeker,$banned_ips) ? false : true;
if ($ip_check) {
mysql_query ("INSERT INTO berichten (naam, bericht, ip, tijd, tijd2) VALUES ('$naam','$bericht','$IPbezoeker','$tijd','$tijd2')");
echo "<table>The message was successfully added! Sending you back to the frontpage now...</table>";
echo "<meta http-equiv='Refresh' content='2; url=index.php'>";
}
else {
echo "Sorry, but you can't post messages anymore. You have been banned for misuse of the system!";
}}
mysql_close();
?>
132
I got the code to work, here it is:
2007-11-04T19:10:33+00:00
716
PHP
0
0
On Message system IP-ban
291
Elnaeth
<?php
include 'l2hide.wu.lt/cfon/cronjob/configdb.php';
?>
132
fds
2010-02-02T22:06:22+00:00
435077
PHP
0
0
On Message system IP-ban
vv
dd.one.lt