<?php
include ('DB.php');
function Flood() {
/** Configs
*
* Attempts - Count user refreshes
* SecondLimit - The limit in time for the attempts (in seconds)
* DoubleSecond - Increase the bann (if blocked) with any refresh (in seconds)
* BanLimit - The time after the ban expired (in seconds)
*
*/
$Attempts = 5;
$SecondLimit = 5;
$DoubleSecond = 5;
$BanLimit = 10;
/** End config */
/** Getting current time (in seconds) */
$Now = time();
/** Getting the user agent */
$Agent = preg_replace("/[^A-Za-z0-9?!\s]/","", $_SERVER['HTTP_USER_AGENT']);
if (preg_match("/Google/i", $Agent)) {
return false;
}
/** Check if the user IP is valid */
if(!filter_var($_SERVER['REMOTE_ADDR'], FILTER_VALIDATE_IP)) {
exit('YOUR IP IS NOT VALID');
}
$Ip = $_SERVER['REMOTE_ADDR'];
$DB = DB::MyDB();
$IpCheck = $DB -> prepare("SELECT `ip`, `refresh`, `ban` FROM flood WHERE `ip` = :ip LIMIT 1");
$IpCheck -> bindParam(':ip', $Ip, PDO::PARAM_STR);
$IpCheck -> execute();
$Result = $IpCheck -> fetch(PDO::FETCH_ASSOC);
if(!empty($Result)) {
$Refresh = $Result['refresh'] + 1;
$IpUpdate = $DB -> prepare("UPDATE `flood` SET `refresh` = :refresh WHERE `ip` = :ip");
$IpUpdate -> bindParam(':ip', $Ip, PDO::PARAM_STR);
$IpUpdate -> bindParam(':refresh', $Refresh, PDO::PARAM_INT);
$IpUpdate -> execute();
$N = $Now - $Result['ban'];
/** Checking for flood and creating the ban page*/
if($Result['refresh'] >= $Attempts AND $N < $SecondLimit) {
$Ban = $Result['ban'] + $DoubleSecond;
$IpInsert = $DB -> prepare("UPDATE `flood` SET `ban` = :ban WHERE `ip` = :ip");
$IpInsert -> bindParam(':ip', $Ip, PDO::PARAM_STR);
$IpInsert -> bindParam(':ban', $Ban, PDO::PARAM_INT);
$IpInsert -> execute();
return exit('You are blocked');
}
/** Unban the user */
if($Result['refresh'] >= $Attempts AND $N > $BanLimit) {
$IpDelete = $DB -> prepare("DELETE FROM `flood` WHERE `ip` = :ip");
$IpDelete -> bindParam(':ip', $Ip, PDO::PARAM_STR);
$IpDelete -> execute();
return true;
}
}
else {
/** Insert new record if the ip dosen't exist */
$Refresh = 1;
$IpInsert = $DB -> prepare("INSERT INTO `flood` (`ip`, `ban`, `refresh`) VALUES (:ip, :ban, :refresh)");
$IpInsert -> bindParam(':ip', $Ip, PDO::PARAM_STR);
$IpInsert -> bindParam(':ban', $Now, PDO::PARAM_INT);
$IpInsert -> bindParam(':refresh', $Refresh, PDO::PARAM_INT);
$IpInsert -> execute();
return true;
}
}
?>
