$icon Player name cannot be empty!
"; die(); } if (empty($playerSteamID)) { echo "$icon Player SteamID cannot be empty!
"; die(); } if (!preg_match("/^STEAM_[0-5]:[01]:\d+$/", $playerSteamID)) { echo "$icon Invalid SteamID Format
"; die(); } if (empty($reason)) { echo "$icon Reason cannot be empty!
"; die(); } if (str_contains($playerName, "'") || str_contains($playerName, "\"")) { echo "$icon ' and \" characters cannot be used for Player Name!
"; die(); } if (str_contains($reason, "'") || str_contains($reason, "\"")) { echo "$icon ' and \" characters cannot be used for Reason!
"; die(); } $kban = new Kban(); if ($kban->IsSteamIDAlreadyBanned($playerSteamID)) { echo "$icon $playerSteamID is already kbanned!
"; die(); } $kban->addNewKban($playerName, $playerSteamID, $length, $reason); } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['edit']) && isset($_POST['playerName'])) { if (!ValidateCsrfToken(filter_input(INPUT_POST, 'csrf_token', FILTER_UNSAFE_RAW))) { http_response_code(403); echo "Security token expired or invalid. Please refresh the page and try again.
"; die(); } if (!isset($_COOKIE['steamID'])) { echo "You are not logged in. Please log in again.
"; die(); } $id = (int) filter_input(INPUT_POST, 'id', FILTER_SANITIZE_NUMBER_INT); $playerName = sanitizeString(filter_input(INPUT_POST, 'playerName', FILTER_UNSAFE_RAW)); $playerSteamID = sanitizeString(filter_input(INPUT_POST, 'playerSteamID', FILTER_UNSAFE_RAW)); $length = filter_input(INPUT_POST, 'length', FILTER_SANITIZE_NUMBER_INT); $reason = sanitizeString(filter_input(INPUT_POST, 'reason', FILTER_UNSAFE_RAW)); $icon = " "; if (empty($playerName)) { echo "$icon Player name cannot be empty!
"; die(); } if (empty($playerSteamID)) { echo "$icon Player SteamID cannot be empty!
"; die(); } if (!preg_match("/^STEAM_[0-5]:[01]:\d+$/", $playerSteamID)) { echo "$icon Invalid SteamID Format
"; die(); } if (empty($reason)) { echo "$icon Reason cannot be empty!
"; die(); } if (str_contains($playerName, "'") || str_contains($playerName, "\"")) { echo "$icon ' and \" characters cannot be used for Player Name!
"; die(); } if (str_contains($reason, "'") || str_contains($reason, "\"")) { echo "$icon ' and \" characters cannot be used for Reason!
"; die(); } $admin = new Admin(); $admin->UpdateAdminInfo($_COOKIE['steamID']); if ($length === null && !$admin->DoesHaveFullAccess()) { echo "$icon You do not have permission for Permanent bans!
"; die(); } if (empty($reason)) { $reason = "NO REASON"; } if ($length === null) { $length = 0; } $length = (int) $length; if ($length < 0) { $length = 30; } $kban = new Kban(); $info = $kban->getKbanInfoFromID($id); if ($info === null) { echo "$icon Kban not found (it may have already been removed or is pending deletion).
"; die(); } if (!IsAdminLoggedIn()) { echo "$icon You are not logged in.
"; die(); } if (!$admin->DoesHaveFullAccess() && $info['admin_steamid'] != $admin->adminSteamID) { echo "$icon You do not have permission to edit a kban issued by another admin.
"; die(); } if ($playerName == $info['client_name'] && $playerSteamID == $info['client_steamid'] && $reason == $info['reason'] && $length == ($info['length'] * 60)) { echo "$icon Cannot detect any changes to edit!
"; die(); } if (!$kban->IsSteamIDAlreadyBanned($playerSteamID)) { echo "$icon The edited steamid is already kbanned and cannot be edited from here
"; die(); } // Note: there's no longer a way to validate "is this duration already in the // past" here — expiry is playtime-based and only the sourcemod plugin knows a // player's current playtime, so that check has been removed rather than guessed at. $kban->EditKban($id, $playerName, $playerSteamID, $length, $reason); } if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['delete'])) { if (!ValidateCsrfToken(filter_input(INPUT_POST, 'csrf_token', FILTER_UNSAFE_RAW))) { http_response_code(403); die(); } if (!isset($_COOKIE['steamID'])) { die(); } $admin = new Admin(); $admin->UpdateAdminInfo($_COOKIE['steamID']); if (!IsAdminLoggedIn() || !$admin->DoesHaveFullAccess()) { die(); } $id = (int) filter_input(INPUT_POST, 'deleteid', FILTER_SANITIZE_NUMBER_INT); $kban = new Kban(); if (!$kban->RemoveKbanFromDB($id)) { http_response_code(400); echo "Delete failed"; } die(); } ?>