{

global $db;

// Are both arrays already filled? Yep, return else

// are neither array filled?

if ($user_id_ary && $username_ary)

{

return false;

}

else if (!$user_id_ary && !$username_ary)

{

return 'NO_USERS';

}

$which_ary = ($user_id_ary) ? 'user_id_ary' : 'username_ary';

if ($$which_ary && !is_array($$which_ary))

{

$$which_ary = array($$which_ary);

}

$sql_in = ($which_ary == 'user_id_ary') ? array_map('intval', $$which_ary) : array_map('utf8_clean_string', $$which_ary);

unset($$which_ary);

$user_id_ary = $username_ary = array();

// Grab the user id/username records

$sql_where = ($which_ary == 'user_id_ary') ? 'user_id' : 'username_clean';

$sql = 'SELECT user_id, username

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set($sql_where, $sql_in);

if ($user_type !== false && !empty($user_type))

{

$sql .= ' AND ' . $db->sql_in_set('user_type', $user_type);

}

$result = $db->sql_query($sql);

if (!($row = $db->sql_fetchrow($result)))

{

$db->sql_freeresult($result);

return 'NO_USERS';

}

do

{

$username_ary[$row['user_id']] = $row['username'];

$user_id_ary[] = $row['user_id'];

}

while ($row = $db->sql_fetchrow($result));

$db->sql_freeresult($result);

return false;

{

global $db;

// Get latest username

$sql = 'SELECT user_id, username, user_colour

FROM ' . USERS_TABLE . '

WHERE user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

ORDER BY user_id DESC';

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

if ($row)

{

set_config('newest_user_id', $row['user_id'], true);

set_config('newest_username', $row['username'], true);

set_config('newest_user_colour', $row['user_colour'], true);

}

{

global $config, $db, $cache, $phpbb_dispatcher;

$update_ary = array(

FORUMS_TABLE => array('forum_last_poster_name'),

MODERATOR_CACHE_TABLE => array('username'),

POSTS_TABLE => array('post_username'),

TOPICS_TABLE => array('topic_first_poster_name', 'topic_last_poster_name'),

);

foreach ($update_ary as $table => $field_ary)

{

foreach ($field_ary as $field)

{

$sql = "UPDATE $table

SET $field = '" . $db->sql_escape($new_name) . "'

WHERE $field = '" . $db->sql_escape($old_name) . "'";

$db->sql_query($sql);

}

}

if ($config['newest_username'] == $old_name)

{

set_config('newest_username', $new_name, true);

}

/**

$vars = array('old_name', 'new_name');

extract($phpbb_dispatcher->trigger_event('core.update_username', compact($vars)));

// Because some tables/caches use username-specific data we need to purge this here.

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

{

global $db, $user, $auth, $config, $phpbb_root_path, $phpEx;

global $phpbb_dispatcher, $phpbb_container;

if (empty($user_row['username']) || !isset($user_row['group_id']) || !isset($user_row['user_email']) || !isset($user_row['user_type']))

{

return false;

}

$username_clean = utf8_clean_string($user_row['username']);

if (empty($username_clean))

{

return false;

}

$sql_ary = array(

'username' => $user_row['username'],

'username_clean' => $username_clean,

'user_password' => (isset($user_row['user_password'])) ? $user_row['user_password'] : '',

'user_pass_convert' => 0,

'user_email' => strtolower($user_row['user_email']),

'user_email_hash' => phpbb_email_hash($user_row['user_email']),

'group_id' => $user_row['group_id'],

'user_type' => $user_row['user_type'],

);

// These are the additional vars able to be specified

$additional_vars = array(

'user_permissions' => '',

'user_timezone' => $config['board_timezone'],

'user_dateformat' => $config['default_dateformat'],

'user_lang' => $config['default_lang'],

'user_style' => (int) $config['default_style'],

'user_actkey' => '',

'user_ip' => '',

'user_regdate' => time(),

'user_passchg' => time(),

'user_options' => 230271,

// We do not set the new flag here - registration scripts need to specify it

'user_new' => 0,

'user_inactive_reason' => 0,

'user_inactive_time' => 0,

'user_lastmark' => time(),

'user_lastvisit' => 0,

'user_lastpost_time' => 0,

'user_lastpage' => '',

'user_posts' => 0,

'user_colour' => '',

'user_avatar' => '',

'user_avatar_type' => '',

'user_avatar_width' => 0,

'user_avatar_height' => 0,

'user_new_privmsg' => 0,

'user_unread_privmsg' => 0,

'user_last_privmsg' => 0,

'user_message_rules' => 0,

'user_full_folder' => PRIVMSGS_NO_BOX,

'user_emailtime' => 0,

'user_notify' => 0,

'user_notify_pm' => 1,

'user_notify_type' => NOTIFY_EMAIL,

'user_allow_pm' => 1,

'user_allow_viewonline' => 1,

'user_allow_viewemail' => 1,

'user_allow_massemail' => 1,

'user_sig' => '',

'user_sig_bbcode_uid' => '',

'user_sig_bbcode_bitfield' => '',

'user_form_salt' => unique_id(),

);

// Now fill the sql array with not required variables

foreach ($additional_vars as $key => $default_value)

{

$sql_ary[$key] = (isset($user_row[$key])) ? $user_row[$key] : $default_value;

}

// Any additional variables in $user_row not covered above?

$remaining_vars = array_diff(array_keys($user_row), array_keys($sql_ary));

// Now fill our sql array with the remaining vars

if (sizeof($remaining_vars))

{

foreach ($remaining_vars as $key)

{

$sql_ary[$key] = $user_row[$key];

}

}

/**

$vars = array('sql_ary');

extract($phpbb_dispatcher->trigger_event('core.user_add_modify_data', compact($vars)));

$sql = 'INSERT INTO ' . USERS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

$db->sql_query($sql);

$user_id = $db->sql_nextid();

// Insert Custom Profile Fields

if ($cp_data !== false && sizeof($cp_data))

{

$cp_data['user_id'] = (int) $user_id;

$cp = $phpbb_container->get('profilefields.manager');

$sql = 'INSERT INTO ' . PROFILE_FIELDS_DATA_TABLE . ' ' .

$db->sql_build_array('INSERT', $cp->build_insert_sql_array($cp_data));

$db->sql_query($sql);

}

// Place into appropriate group...

$sql = 'INSERT INTO ' . USER_GROUP_TABLE . ' ' . $db->sql_build_array('INSERT', array(

'user_id' => (int) $user_id,

'group_id' => (int) $user_row['group_id'],

'user_pending' => 0)

);

$db->sql_query($sql);

// Now make it the users default group...

group_set_user_default($user_row['group_id'], array($user_id), false);

// Add to newly registered users group if user_new is 1

if ($config['new_member_post_limit'] && $sql_ary['user_new'])

{

$sql = 'SELECT group_id

FROM ' . GROUPS_TABLE . "

AND group_type = " . GROUP_SPECIAL;

$result = $db->sql_query($sql);

$add_group_id = (int) $db->sql_fetchfield('group_id');

$db->sql_freeresult($result);

if ($add_group_id)

{

global $phpbb_log;

// Because these actions only fill the log unneccessarily we skip the add_log() entry.

$phpbb_log->disable('admin');

// Add user to "newly registered users" group and set to default group if admin specified so.

if ($config['new_member_group_default'])

{

group_user_add($add_group_id, $user_id, false, false, true);

$user_row['group_id'] = $add_group_id;

}

else

{

group_user_add($add_group_id, $user_id);

}

$phpbb_log->enable('admin');

}

}

// set the newest user and adjust the user count if the user is a normal user and no activation mail is sent

if ($user_row['user_type'] == USER_NORMAL || $user_row['user_type'] == USER_FOUNDER)

{

set_config('newest_user_id', $user_id, true);

set_config('newest_username', $user_row['username'], true);

set_config_count('num_users', 1, true);

$sql = 'SELECT group_colour

FROM ' . GROUPS_TABLE . '

WHERE group_id = ' . (int) $user_row['group_id'];

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

set_config('newest_user_colour', $row['group_colour'], true);

}

return $user_id;

{

global $cache, $config, $db, $user, $auth, $phpbb_dispatcher;

global $phpbb_root_path, $phpEx;

$db->sql_transaction('begin');

$user_rows = array();

if (!is_array($user_ids))

{

$user_ids = array($user_ids);

}

$user_id_sql = $db->sql_in_set('user_id', $user_ids);

$sql = 'SELECT *

FROM ' . USERS_TABLE . '

WHERE ' . $user_id_sql;

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$user_rows[(int) $row['user_id']] = $row;

}

$db->sql_freeresult($result);

if (empty($user_rows))

{

return false;

}

/**

$vars = array('mode', 'user_ids', 'retain_username');

extract($phpbb_dispatcher->trigger_event('core.delete_user_before', compact($vars)));

// Before we begin, we will remove the reports the user issued.

$sql = 'SELECT r.post_id, p.topic_id

FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . ' p

WHERE ' . $db->sql_in_set('r.user_id', $user_ids) . '

AND p.post_id = r.post_id';

$result = $db->sql_query($sql);

$report_posts = $report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$report_posts[] = $row['post_id'];

$report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (sizeof($report_posts))

{

$report_posts = array_unique($report_posts);

$report_topics = array_unique($report_topics);

// Get a list of topics that still contain reported posts

$sql = 'SELECT DISTINCT topic_id

FROM ' . POSTS_TABLE . '

WHERE ' . $db->sql_in_set('topic_id', $report_topics) . '

AND ' . $db->sql_in_set('post_id', $report_posts, true);

$result = $db->sql_query($sql);

$keep_report_topics = array();

while ($row = $db->sql_fetchrow($result))

{

$keep_report_topics[] = $row['topic_id'];

}

$db->sql_freeresult($result);

if (sizeof($keep_report_topics))

{

$report_topics = array_diff($report_topics, $keep_report_topics);

}

unset($keep_report_topics);

// Now set the flags back

$sql = 'UPDATE ' . POSTS_TABLE . '

WHERE ' . $db->sql_in_set('post_id', $report_posts);

$db->sql_query($sql);

if (sizeof($report_topics))

{

$sql = 'UPDATE ' . TOPICS_TABLE . '

WHERE ' . $db->sql_in_set('topic_id', $report_topics);

$db->sql_query($sql);

}

}

// Remove reports

$db->sql_query('DELETE FROM ' . REPORTS_TABLE . ' WHERE ' . $user_id_sql);

$num_users_delta = 0;

// Some things need to be done in the loop (if the query changes based

// on which user is currently being deleted)

$added_guest_posts = 0;

foreach ($user_rows as $user_id => $user_row)

{

if ($user_row['user_avatar'] && $user_row['user_avatar_type'] == 'avatar.driver.upload')

{

avatar_delete('user', $user_row);

}

// Decrement number of users if this user is active

if ($user_row['user_type'] != USER_INACTIVE && $user_row['user_type'] != USER_IGNORE)

{

--$num_users_delta;

}

switch ($mode)

{

case 'retain':

if ($retain_username === false)

{

$post_username = $user->lang['GUEST'];

}

else

{

$post_username = $user_row['username'];

}

// If the user is inactive and newly registered

// we assume no posts from the user, and save

// the queries

if ($user_row['user_type'] != USER_INACTIVE || $user_row['user_inactive_reason'] != INACTIVE_REGISTER || $user_row['user_posts'])

{

// When we delete these users and retain the posts, we must assign all the data to the guest user

$sql = 'UPDATE ' . FORUMS_TABLE . '

SET forum_last_poster_id = ' . ANONYMOUS . ", forum_last_poster_name = '" . $db->sql_escape($post_username) . "', forum_last_poster_colour = ''

WHERE forum_last_poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . POSTS_TABLE . '

SET poster_id = ' . ANONYMOUS . ", post_username = '" . $db->sql_escape($post_username) . "'

WHERE poster_id = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_poster = ' . ANONYMOUS . ", topic_first_poster_name = '" . $db->sql_escape($post_username) . "', topic_first_poster_colour = ''

WHERE topic_poster = $user_id";

$db->sql_query($sql);

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_last_poster_id = ' . ANONYMOUS . ", topic_last_poster_name = '" . $db->sql_escape($post_username) . "', topic_last_poster_colour = ''

WHERE topic_last_poster_id = $user_id";

$db->sql_query($sql);

// Since we change every post by this author, we need to count this amount towards the anonymous user

if ($user_row['user_posts'])

{

$added_guest_posts += $user_row['user_posts'];

}

}

break;

case 'remove':

// there is nothing variant specific to deleting posts

break;

}

}

if ($num_users_delta != 0)

{

set_config_count('num_users', $num_users_delta, true);

}

// Now do the invariant tasks

// all queries performed in one call of this function are in a single transaction

// so this is kosher

if ($mode == 'retain')

{

// Assign more data to the Anonymous user

$sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

SET poster_id = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('poster_id', $user_ids);

$db->sql_query($sql);

$sql = 'UPDATE ' . POSTS_TABLE . '

SET post_edit_user = ' . ANONYMOUS . '

WHERE ' . $db->sql_in_set('post_edit_user', $user_ids);

$db->sql_query($sql);

$sql = 'UPDATE ' . USERS_TABLE . '

SET user_posts = user_posts + ' . $added_guest_posts . '

WHERE user_id = ' . ANONYMOUS;

$db->sql_query($sql);

}

else if ($mode == 'remove')

{

if (!function_exists('delete_posts'))

{

include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

}

// Delete posts, attachments, etc.

// delete_posts can handle any number of IDs in its second argument

delete_posts('poster_id', $user_ids);

}

$table_ary = array(USERS_TABLE, USER_GROUP_TABLE, TOPICS_WATCH_TABLE, FORUMS_WATCH_TABLE, ACL_USERS_TABLE, TOPICS_TRACK_TABLE, TOPICS_POSTED_TABLE, FORUMS_TRACK_TABLE, PROFILE_FIELDS_DATA_TABLE, MODERATOR_CACHE_TABLE, DRAFTS_TABLE, BOOKMARKS_TABLE, SESSIONS_KEYS_TABLE, PRIVMSGS_FOLDER_TABLE, PRIVMSGS_RULES_TABLE);

// Delete the miscellaneous (non-post) data for the user

foreach ($table_ary as $table)

{

$sql = "DELETE FROM $table

WHERE " . $user_id_sql;

$db->sql_query($sql);

}

$cache->destroy('sql', MODERATOR_CACHE_TABLE);

// Delete user log entries about this user

$sql = 'DELETE FROM ' . LOG_TABLE . '

WHERE ' . $db->sql_in_set('reportee_id', $user_ids);

$db->sql_query($sql);

// Change user_id to anonymous for this users triggered events

$sql = 'UPDATE ' . LOG_TABLE . '

SET user_id = ' . ANONYMOUS . '

WHERE ' . $user_id_sql;

$db->sql_query($sql);

// Delete the user_id from the zebra table

$sql = 'DELETE FROM ' . ZEBRA_TABLE . '

WHERE ' . $user_id_sql . '

OR ' . $db->sql_in_set('zebra_id', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the banlist

$sql = 'DELETE FROM ' . BANLIST_TABLE . '

WHERE ' . $db->sql_in_set('ban_userid', $user_ids);

$db->sql_query($sql);

// Delete the user_id from the session table

$sql = 'DELETE FROM ' . SESSIONS_TABLE . '

WHERE ' . $db->sql_in_set('session_user_id', $user_ids);

$db->sql_query($sql);

// Clean the private messages tables from the user

if (!function_exists('phpbb_delete_user_pms'))

{

include($phpbb_root_path . 'includes/functions_privmsgs.' . $phpEx);

}

phpbb_delete_users_pms($user_ids);

$db->sql_transaction('commit');

/**

$vars = array('mode', 'user_ids', 'retain_username');

extract($phpbb_dispatcher->trigger_event('core.delete_user_after', compact($vars)));

// Reset newest user info if appropriate

if (in_array($config['newest_user_id'], $user_ids))

{

update_last_username();

}

return false;

{

global $config, $db, $user, $auth;

$deactivated = $activated = 0;

$sql_statements = array();

if (!is_array($user_id_ary))

{

$user_id_ary = array($user_id_ary);

}

if (!sizeof($user_id_ary))

{

return;

}

$sql = 'SELECT user_id, group_id, user_type, user_inactive_reason

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set('user_id', $user_id_ary);

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$sql_ary = array();

if ($row['user_type'] == USER_IGNORE || $row['user_type'] == USER_FOUNDER ||

($mode == 'activate' && $row['user_type'] != USER_INACTIVE) ||

($mode == 'deactivate' && $row['user_type'] == USER_INACTIVE))

{

continue;

}

if ($row['user_type'] == USER_INACTIVE)

{

$activated++;

}

else

{

$deactivated++;

// Remove the users session key...

$user->reset_login_keys($row['user_id']);

}

$sql_ary += array(

'user_type' => ($row['user_type'] == USER_NORMAL) ? USER_INACTIVE : USER_NORMAL,

'user_inactive_time' => ($row['user_type'] == USER_NORMAL) ? time() : 0,

'user_inactive_reason' => ($row['user_type'] == USER_NORMAL) ? $reason : 0,

);

$sql_statements[$row['user_id']] = $sql_ary;

}

$db->sql_freeresult($result);

if (sizeof($sql_statements))

{

foreach ($sql_statements as $user_id => $sql_ary)

{

$sql = 'UPDATE ' . USERS_TABLE . '

SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

WHERE user_id = ' . $user_id;

$db->sql_query($sql);

}

$auth->acl_clear_prefetch(array_keys($sql_statements));

}

if ($deactivated)

{

set_config_count('num_users', $deactivated * (-1), true);

}

if ($activated)

{

set_config_count('num_users', $activated, true);

}

// Update latest username

update_last_username();

{

global $db, $user, $auth, $cache;

// Delete stale bans

$sql = 'DELETE FROM ' . BANLIST_TABLE . '

WHERE ban_end < ' . time() . '

AND ban_end <> 0';

$db->sql_query($sql);

$ban_list = (!is_array($ban)) ? array_unique(explode("\n", $ban)) : $ban;

$ban_list_log = implode(', ', $ban_list);

$current_time = time();

// Set $ban_end to the unix time when the ban should end. 0 is a permanent ban.

if ($ban_len)

{

if ($ban_len != -1 || !$ban_len_other)

{

$ban_end = max($current_time, $current_time + ($ban_len) * 60);

}

else

{

$ban_other = explode('-', $ban_len_other);

if (sizeof($ban_other) == 3 && ((int)$ban_other[0] < 9999) &&

(strlen($ban_other[0]) == 4) && (strlen($ban_other[1]) == 2) && (strlen($ban_other[2]) == 2))

{

$ban_end = max($current_time, $user->create_datetime()

->setDate((int) $ban_other[0], (int) $ban_other[1], (int) $ban_other[2])

->setTime(0, 0, 0)

->getTimestamp() + $user->timezone->getOffset(new DateTime('UTC')));

}

else

{

trigger_error('LENGTH_BAN_INVALID', E_USER_WARNING);

}

}

}

else

{

$ban_end = 0;

}

$founder = $founder_names = array();

if (!$ban_exclude)

{

// Create a list of founder...

$sql = 'SELECT user_id, user_email, username_clean

FROM ' . USERS_TABLE . '

WHERE user_type = ' . USER_FOUNDER;

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$founder[$row['user_id']] = $row['user_email'];

$founder_names[$row['user_id']] = $row['username_clean'];

}

$db->sql_freeresult($result);

}

$banlist_ary = array();

switch ($mode)

{

case 'user':

$type = 'ban_userid';

// At the moment we do not support wildcard username banning

// Select the relevant user_ids.

$sql_usernames = array();

foreach ($ban_list as $username)

{

$username = trim($username);

if ($username != '')

{

$clean_name = utf8_clean_string($username);

if ($clean_name == $user->data['username_clean'])

{

trigger_error('CANNOT_BAN_YOURSELF', E_USER_WARNING);

}

if (in_array($clean_name, $founder_names))

{

trigger_error('CANNOT_BAN_FOUNDER', E_USER_WARNING);

}

$sql_usernames[] = $clean_name;

}

}

// Make sure we have been given someone to ban

if (!sizeof($sql_usernames))

{

trigger_error('NO_USER_SPECIFIED', E_USER_WARNING);

}

$sql = 'SELECT user_id

FROM ' . USERS_TABLE . '

WHERE ' . $db->sql_in_set('username_clean', $sql_usernames);

// Do not allow banning yourself, the guest account, or founders.

$non_bannable = array($user->data['user_id'], ANONYMOUS);

if (sizeof($founder))

{

$sql .= ' AND ' . $db->sql_in_set('user_id', array_merge(array_keys($founder), $non_bannable), true);

}

else

{

$sql .= ' AND ' . $db->sql_in_set('user_id', $non_bannable, true);

}

$result = $db->sql_query($sql);

if ($row = $db->sql_fetchrow($result))

{

do

{

$banlist_ary[] = (int) $row['user_id'];

}

while ($row = $db->sql_fetchrow($result));

}

else

{

$db->sql_freeresult($result);

trigger_error('NO_USERS', E_USER_WARNING);

}

$db->sql_freeresult($result);

break;

case 'ip':

$type = 'ban_ip';

foreach ($ban_list as $ban_item)

{

if (preg_match('#^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$#', trim($ban_item), $ip_range_explode))

{

// This is an IP range

// Don't ask about all this, just don't ask ... !

$ip_1_counter = $ip_range_explode[1];

$ip_1_end = $ip_range_explode[5];

while ($ip_1_counter <= $ip_1_end)

{

$ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0;

$ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6];

if ($ip_2_counter == 0 && $ip_2_end == 254)

{

$ip_2_counter = 256;

$ip_2_fragment = 256;

$banlist_ary[] = "$ip_1_counter.*";

}

while ($ip_2_counter <= $ip_2_end)

{

$ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0;

$ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7];

if ($ip_3_counter == 0 && $ip_3_end == 254)

{

$ip_3_counter = 256;

$ip_3_fragment = 256;

$banlist_ary[] = "$ip_1_counter.$ip_2_counter.*";

}

while ($ip_3_counter <= $ip_3_end)

{

$ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0;

$ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8];

if ($ip_4_counter == 0 && $ip_4_end == 254)

{

$ip_4_counter = 256;

$ip_4_fragment = 256;

$banlist_ary[] = "$ip_1_counter.$ip_2_counter.$ip_3_counter.*";

}

while ($ip_4_counter <= $ip_4_end)

{

$banlist_ary[] = "$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter";

$ip_4_counter++;

}

$ip_3_counter++;

}

$ip_2_counter++;

}

$ip_1_counter++;

}

}

else if (preg_match('#^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$#', trim($ban_item)) || preg_match('#^[a-f0-9:]+\*?$#i', trim($ban_item)))

{

// Normal IP address

$banlist_ary[] = trim($ban_item);

}

else if (preg_match('#^\*$#', trim($ban_item)))

{

// Ban all IPs

$banlist_ary[] = '*';

}

else if (preg_match('#^([\w\-_]\.?){2,}$#is', trim($ban_item)))

{

// hostname

$ip_ary = gethostbynamel(trim($ban_item));

if (!empty($ip_ary))

{

foreach ($ip_ary as $ip)

{

if ($ip)

{

if (strlen($ip) > 40)

{

continue;

}

$banlist_ary[] = $ip;

}

}

}

}

if (empty($banlist_ary))

{

trigger_error('NO_IPS_DEFINED', E_USER_WARNING);

}

}

break;

case 'email':

$type = 'ban_email';

foreach ($ban_list as $ban_item)

{

$ban_item = trim($ban_item);

if (preg_match('#^.*?@*|(([a-z0-9\-]+\.)+([a-z]{2,3}))$#i', $ban_item))

{

if (strlen($ban_item) > 100)

{

continue;

}

if (!sizeof($founder) || !in_array($ban_item, $founder))

{

$banlist_ary[] = $ban_item;

}

}

}

if (sizeof($ban_list) == 0)

{

trigger_error('NO_EMAILS_DEFINED', E_USER_WARNING);

}

break;

default:

trigger_error('NO_MODE', E_USER_WARNING);

break;

}

// Fetch currently set bans of the specified type and exclude state. Prevent duplicate bans.

$sql_where = ($type == 'ban_userid') ? 'ban_userid <> 0' : "$type <> ''";

$sql = "SELECT $type

FROM " . BANLIST_TABLE . "