64 lines
2.4 KiB
PHP
64 lines
2.4 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
// Check if user has any of the required rights
|
||
|
|
if (!($userObject->hasRight($user_id, 'superuser') ||
|
||
|
|
$userObject->hasRight($user_id, 'edit whitelist') ||
|
||
|
|
$userObject->hasRight($user_id, 'edit blacklist') ||
|
||
|
|
$userObject->hasRight($user_id, 'edit ratelimiting'))) {
|
||
|
|
include '../app/templates/error-unauthorized.php';
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
$action = $_GET['action'] ?? 'view';
|
||
|
|
$section = $_GET['section'] ?? 'whitelist';
|
||
|
|
|
||
|
|
// Handle form submissions
|
||
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||
|
|
switch ($_POST['action']) {
|
||
|
|
case 'add_whitelist':
|
||
|
|
if ($userObject->hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit whitelist')) {
|
||
|
|
$ip = $_POST['ip_address'];
|
||
|
|
$description = $_POST['description'];
|
||
|
|
$is_network = isset($_POST['is_network']) ? 1 : 0;
|
||
|
|
$rateLimiter->addToWhitelist($ip, $is_network, $description, $currentUser);
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'remove_whitelist':
|
||
|
|
if ($userObject->hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit whitelist')) {
|
||
|
|
$ip = $_POST['ip_address'];
|
||
|
|
$rateLimiter->removeFromWhitelist($ip, $user_id, $currentUser);
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'add_blacklist':
|
||
|
|
if ($userObject->hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit blacklist')) {
|
||
|
|
$ip = $_POST['ip_address'];
|
||
|
|
$reason = $_POST['reason'];
|
||
|
|
$is_network = isset($_POST['is_network']) ? 1 : 0;
|
||
|
|
$expiry_hours = empty($_POST['expiry_hours']) ? null : intval($_POST['expiry_hours']);
|
||
|
|
$rateLimiter->addToBlacklist($ip, $is_network, $reason, $currentUser, null, $expiry_hours);
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
|
||
|
|
case 'remove_blacklist':
|
||
|
|
if ($userObject->hasRight($user_id, 'superuser') || $userObject->hasRight($user_id, 'edit blacklist')) {
|
||
|
|
$ip = $_POST['ip_address'];
|
||
|
|
$rateLimiter->removeFromBlacklist($ip, $user_id, $currentUser);
|
||
|
|
}
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Redirect to prevent form resubmission
|
||
|
|
header("Location: {$app_root}?page=security§ion={$section}");
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Get the lists
|
||
|
|
$whitelisted = $rateLimiter->getWhitelistedIps();
|
||
|
|
$blacklisted = $rateLimiter->getBlacklistedIps();
|
||
|
|
|
||
|
|
// Include the template
|
||
|
|
include '../app/templates/security.php';
|
||
|
|
?>
|