bannedemails.php

<?php
define("VERSION", "BAN EMAIL");
require "include/bittorrent.php";
dbconn();
loggedinorreturn();
if (get_user_class() < UC_SYSOP)
    stderr("Error", "Access denied.");

$action = isset($_POST['action']) ? htmlspecialchars($_POST['action']) : (isset($_GET['action']) ? htmlspecialchars($_GET['action']) : 'showlist');

if ($action == 'showlist') {
    stdhead(VERSION . " - Show List");
    print("<table border=1 cellspacing=0 cellpadding=5 width=737>\n");
    $sql = sql_query("SELECT * FROM bannedemails") or sqlerr(__FILE__, __LINE__);
    $list = mysql_fetch_array($sql);
    ?>
    <form method=post action=bannedemails.php>
        <input type=hidden name=action value=savelist>
        <tr>
            <td>Enter a list of banned email addresses (separated by spaces):<br/>To ban a specific address enter
                "email@domain.com", to ban an entire domain enter "@domain.com"
            </td>
            <td><textarea name="value" rows="5" cols="40"><?php echo $list['value'] ?></textarea>
                <input type=submit value="save">
    </form></td>
    </tr></table>
    <?php
    stdfoot();
} elseif ($action == 'savelist') {
    stdhead(VERSION . " - Save List");
    $value = trim(htmlspecialchars($_POST['value']));
    sql_query("UPDATE bannedemails SET value = " . sqlesc($value)) or sqlerr(__FILE__, __LINE__);
    Print ("Saved.");
    stdfoot();
}