UNLOZE/entwatchbans-unloze
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initial comit of repository

Browse Source
This commit is contained in:
jenz
2026-08-12 15:35:36 +02:00
commit 8ede019d8f
21 changed files with 4392 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
functions_url.php
+215
View File
@@ -0,0 +1,215 @@
<?php
include_once('connect.php');
include_once('functions_global.php');
function sanitizeString($input)
{
// Replace problematic characters with an empty string
$replacements = array("'", '"', "\\", ";", "`", "--", "#", "=", ">", "<", "&", "%", "|", "^", "~", "(", ")");
$sanitized = str_replace($replacements, "", $input);
return htmlspecialchars($sanitized, ENT_QUOTES, 'UTF-8'); // Escape HTML entities
}
if (isset($_GET['id']) && !isset($_GET['reban']) && !isset($_GET['edit'])) {
$id = filter_input(INPUT_GET, 'id', FILTER_SANITIZE_NUMBER_INT);
showEbanInfo($id);
}
if (isset($_GET['oldid']) && !isset($_GET['reban']) && !isset($_GET['edit'])) {
$icon = "<i class='fa-solid fa-xmark'></i>&nbsp";
if (!isset($_COOKIE['steamID'])) {
echo "<p>$icon You are not logged in. Please log in again.</p>";
die();
}
$admin = new Admin();
$admin->UpdateAdminInfo($_COOKIE['steamID']);
$id = filter_input(INPUT_GET, 'oldid', FILTER_SANITIZE_NUMBER_INT);
$Eban = new Eban();
$info = $Eban->getEbanInfoFromID($id);
if ($info === null) {
echo "<p>$icon Eban not found.</p>";
die();
}
if (!IsAdminLoggedIn()) {
echo "<p>$icon You are not logged in.</p>";
die();
}
if (!$admin->DoesHaveFullAccess() && $info['admin_steamid'] != $admin->adminSteamID) {
echo "<p>$icon You do not have permission to unban an eban issued by another admin.</p>";
die();
}
$reason = sanitizeString($reason);
$Eban = new Eban();
if (!$Eban->UnbanByID($id, $reason)) {
echo "<p>$icon Failed to unban.</p>";
die();
}
die();
}
function showEbanInfo(int $id) {
GetRowInfo($id);
}
if (isset($_GET['add']) && isset($_GET['playerName'])) {
if (!IsAdminLoggedIn()) {
echo "<p><i class='fa-solid fa-xmark'></i>&nbsp You are not logged in.</p>";
die();
}
// Sanitize input
$playerName = sanitizeString(filter_input(INPUT_GET, 'playerName', FILTER_SANITIZE_STRING));
$playerSteamID = filter_input(INPUT_GET, 'playerSteamID', FILTER_SANITIZE_STRING);
$length = filter_input(INPUT_GET, 'length', FILTER_SANITIZE_NUMBER_INT);
$reason = sanitizeString(filter_input(INPUT_GET, 'reason', FILTER_SANITIZE_STRING));
$icon = "<i class='fa-solid fa-xmark'></i>&nbsp";
if (empty($playerSteamID)) {
echo "<p>$icon Player SteamID cannot be empty!</p>";
die();
}
if (!preg_match("/^STEAM_[0-5]:[01]:\d+$/", $playerSteamID)) {
echo "<p>$icon Invalid SteamID Format</p>";
die();
}
if (empty($reason)) {
echo "<p>$icon Reason cannot be empty!</p>";
die();
}
$Eban = new Eban();
if ($Eban->IsSteamIDAlreadyBanned($playerSteamID)) {
echo "<p>$icon $playerSteamID is already Ebanned!</p>";
die();
}
$Eban->addNewEban($playerName, $playerSteamID, $length, $reason);
}
if (isset($_GET['edit']) && isset($_GET['playerName'])) {
if (!isset($_COOKIE['steamID'])) {
echo "<p><i class='fa-solid fa-xmark'></i>&nbsp You are not logged in.</p>";
die();
}
$id = filter_input(INPUT_GET, 'id', FILTER_SANITIZE_NUMBER_INT);
$playerName = sanitizeString(filter_input(INPUT_GET, 'playerName', FILTER_SANITIZE_STRING));
$playerSteamID = filter_input(INPUT_GET, 'playerSteamID', FILTER_SANITIZE_STRING);
$length = filter_input(INPUT_GET, 'length', FILTER_SANITIZE_NUMBER_INT);
$reason = sanitizeString(filter_input(INPUT_GET, 'reason', FILTER_SANITIZE_STRING));
$icon = "<i class='fa-solid fa-xmark'></i>&nbsp";
if (empty($playerName)) {
echo "<p>$icon Player name cannot be empty!</p>";
die();
}
if (empty($playerSteamID)) {
echo "<p>$icon Player SteamID cannot be empty!</p>";
die();
}
if (!preg_match("/^STEAM_[0-5]:[01]:\d+$/", $playerSteamID)) {
echo "<p>$icon Invalid SteamID Format</p>";
die();
}
if (empty($reason)) {
echo "<p>$icon Reason cannot be empty!</p>";
die();
}
$admin = new Admin();
$admin->UpdateAdminInfo($_COOKIE['steamID']);
if ($length === null && !$admin->DoesHaveFullAccess()) {
echo "<p>$icon You do not have permission for Permanent bans!</p>";
die();
}
if (empty($reason)) {
$reason = "NO REASON";
}
if ($length === null) {
$length = 0;
}
if ($length < 0) {
$length = 60;
}
$Eban = new Eban();
$info = $Eban->getEbanInfoFromID($id);
if ($info === null) {
echo "<p>$icon Eban not found.</p>";
die();
}
if (!IsAdminLoggedIn()) {
echo "<p>$icon You are not logged in.</p>";
die();
}
if (!$admin->DoesHaveFullAccess() && $info['admin_steamid'] != $admin->adminSteamID) {
echo "<p>$icon You do not have permission to edit an eban issued by another admin.</p>";
die();
}
if ($playerName == $info['client_name'] && $playerSteamID == $info['client_steamid'] && $reason == $info['reason'] && $length == ($info['duration'] * 60)) {
echo "<p>$icon Cannot detect any changes to edit!</p>";
die();
}
if (!$Eban->IsSteamIDAlreadyBanned($playerSteamID)) {
echo "<p>$icon The edited steamid is already Eunbanned and cannot be edited from here</p>";
die();
}
// Note: there's no longer a way to validate "is this duration already in the
// past" here - expiry is playtime-based and only the sourcemod plugin knows a
// player's current playtime, so that check has been removed rather than guessed at.
$Eban->EditEban($id, $playerName, $playerSteamID, $length, $reason);
}
if (isset($_GET['delete'])) {
$icon = "<i class='fa-solid fa-xmark'></i>&nbsp";
if (!isset($_COOKIE['steamID'])) {
echo "<p>$icon You are not logged in.</p>";
die();
}
$admin = new Admin();
$admin->UpdateAdminInfo($_COOKIE['steamID']);
if (!IsAdminLoggedIn()) {
echo "<p>$icon You are not logged in.</p>";
die();
}
if (!$admin->DoesHaveFullAccess()) {
echo "<p>$icon You do not have permission to delete an eban.</p>";
die();
}
$id = filter_input(INPUT_GET, 'deleteid', FILTER_SANITIZE_NUMBER_INT);
$Eban = new Eban();
$Eban->RemoveEbanFromDB($id);
die();
}
?>