diff --git a/admin/admin_settings.php b/admin/admin_settings.php
index 879f19b1..8f3a2642 100644
--- a/admin/admin_settings.php
+++ b/admin/admin_settings.php
@@ -2156,7 +2156,7 @@ if ( defined('HESK_DEMO') )
-
+
@@ -2174,9 +2174,9 @@ if ( defined('HESK_DEMO') )
$ipRs= hesk_dbQuery('SELECT * FROM `'.$hesk_settings['db_pfix'].'denied_ips`');
while ($row = $ipRs->fetch_assoc()) {
echo '
';
- echo ' | ';
- echo ' | ';
- echo ' | ';
+ echo ' | ';
+ echo ' | ';
+ echo ' | ';
echo '
';
}
@@ -2200,29 +2200,29 @@ if ( defined('HESK_DEMO') )
diff --git a/admin/admin_settings_save.php b/admin/admin_settings_save.php
index fc9aa288..faa6d158 100644
--- a/admin/admin_settings_save.php
+++ b/admin/admin_settings_save.php
@@ -497,6 +497,38 @@ $stmt = hesk_dbConnect()->prepare($updateQuery);
$stmt->bind_param('i', $_POST['lockedTicketStatus']);
$stmt->execute();
+//-- IP Bans
+$ipBanSql = hesk_dbQuery('SELECT * FROM `'.$hesk_settings['db_pfix'].'denied_ips`');
+while ($row = $ipBanSql->fetch_assoc()) {
+ if (isset($_POST['ipDelete'][$row['ID']])) {
+ hesk_dbQuery('DELETE FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_ips` WHERE ID = '.hesk_dbEscape($row['ID']));
+ } else {
+ hesk_dbQuery('UPDATE `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_ips`
+ SET `RangeStart` = \''.hesk_dbEscape($_POST['ipFrom'][$row['ID']]).'\',
+ `RangeEnd` = \''.hesk_dbEscape($_POST['ipTo'][$row['ID']]).'\'
+ WHERE ID = '.hesk_dbEscape($row['ID']));
+ }
+}
+if (!empty($_POST['addIpFrom']) && !empty($_POST['addIpTo'])) {
+ hesk_dbQuery('INSERT INTO `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_ips` (`RangeStart`, `RangeEnd`)
+ VALUES (\''.hesk_dbEscape($_POST['addIpFrom']).'\', \''.hesk_dbEscape($_POST['addIpTo']).'\')');
+}
+
+//-- Email Bans
+$emailBanSql = hesk_dbQuery('SELECT * FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_emails`');
+while ($row = $emailBanSql->fetch_assoc()) {
+ if (isset($_POST['emailDelete'][$row['ID']])) {
+ hesk_dbQuery('DELETE FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_emails` WHERE ID = '.hesk_dbEscape($row['ID']));
+ } else {
+ hesk_dbQuery('UPDATE `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_emails`
+ SET Email = \''.hesk_dbEscape($_POST['email'][$row['ID']]).'\'
+ WHERE ID = '.hesk_dbEscape($row['ID']));
+ }
+}
+if (!empty($_POST['addEmail'])) {
+ hesk_dbQuery('INSERT INTO `'.hesk_dbEscape($hesk_settings['db_pfix']).'denied_emails` (Email) VALUES (\''.hesk_dbEscape($_POST['addEmail']).'\')');
+}
+
$set['hesk_version'] = $hesk_settings['hesk_version'];
// Save the nuMods_settings.inc.php file