From 1cdb1b9397deb5f47ce5a45ca2ac8b6582d08f3d Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 9 Nov 2020 15:06:08 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=20=ED=99=98?=
 =?UTF-8?q?=EA=B2=BD=EC=84=A4=EC=A0=95=EC=9D=98=20=EC=A0=91=EA=B7=BC?=
 =?UTF-8?q?=EC=B0=A8=EB=8B=A8IP=20=EC=A4=91=20=ED=98=84=EC=9E=AC=20?=
 =?UTF-8?q?=EC=A0=91=EC=86=8D=20IP=EB=A5=BC=20=EC=B0=A8=EB=8B=A8=EB=AA=BB?=
 =?UTF-8?q?=ED=95=98=EA=B2=8C=20=ED=95=98=EA=B8=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/config_form.php        | 20 ++++++++++++++++++++
 adm/config_form_update.php | 18 ++++++++++++++++++
 2 files changed, 38 insertions(+)

diff --git a/adm/config_form.php b/adm/config_form.php
index 223d40471..536d9754b 100644
--- a/adm/config_form.php
+++ b/adm/config_form.php
@@ -1434,6 +1434,26 @@ $(function(){
 
 function fconfigform_submit(f)
 {
+    var current_user_ip = "<?php echo $_SERVER['REMOTE_ADDR']; ?>";
+    var cf_intercept_ip_val = f.cf_intercept_ip.value;
+
+    if( cf_intercept_ip_val && current_user_ip ){
+        var cf_intercept_ips = cf_intercept_ip_val.split("\n");
+
+        for(var i=0; i < cf_intercept_ips.length; i++){
+            if ( cf_intercept_ips[i].trim() ) {
+                cf_intercept_ips[i] = cf_intercept_ips[i].replace(".", "\.");
+                cf_intercept_ips[i] = cf_intercept_ips[i].replace("+", "[0-9\.]+");
+                
+                var re = new RegExp(cf_intercept_ips[i]);
+                if ( re.test(current_user_ip) ){
+                    alert("현재 접속 IP : "+ current_user_ip +" 가 차단될수 있기 때문에, 다른 IP를 입력해 주세요.");
+                    return false;
+                }
+            }
+        }
+    }
+
     f.action = "./config_form_update.php";
     return true;
 }
diff --git a/adm/config_form_update.php b/adm/config_form_update.php
index 250fc9082..f7e51ae24 100644
--- a/adm/config_form_update.php
+++ b/adm/config_form_update.php
@@ -38,6 +38,24 @@ foreach( $check_keys as $key ){
 
 $_POST['cf_icode_server_port'] = isset($_POST['cf_icode_server_port']) ? preg_replace('/[^0-9]/', '', $_POST['cf_icode_server_port']) : '7295';
 
+if(isset($_POST['cf_intercept_ip']) && $_POST['cf_intercept_ip']){
+
+    $pattern = explode("\n", trim($_POST['cf_intercept_ip']));
+    for ($i=0; $i<count($pattern); $i++) {
+        $pattern[$i] = trim($pattern[$i]);
+        if (empty($pattern[$i]))
+            continue;
+
+        $pattern[$i] = str_replace(".", "\.", $pattern[$i]);
+        $pattern[$i] = str_replace("+", "[0-9\.]+", $pattern[$i]);
+        $pat = "/^{$pattern[$i]}$/";
+
+        if( preg_match($pat, $_SERVER['REMOTE_ADDR']) ){
+            alert("현재 접속 IP : ".$_SERVER['REMOTE_ADDR']." 가 차단될수 있기 때문에, 다른 IP를 입력해 주세요.");
+        }
+    }
+}
+
 $sql = " update {$g5['config_table']}
             set cf_title = '{$_POST['cf_title']}',
                 cf_admin = '{$_POST['cf_admin']}',