root/admin/admin_disallow.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                            admin_disallow.php
 *                            -------------------
 *   begin                : Tuesday, Oct 05, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_disallow.php,v 1.9.2.3 2005/09/14 18:14:29 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if( !empty($setmodules) )</span>
<span class="code-keyword">{
        $filename = basename(__FILE__);
        $module['users']['disallow'] = $filename;

        return;
}

define('IN_PHPBB', 1);

//</span>
<span class="code-comment">// Include required files, get $phpEx and check permissions
//
$root_path = './../';</span>
<span class="code-lang">require($root_path . 'extension.inc');
require('./pagestart.' . $phpEx);

if( isset($_POST['add_name']) )
{
        include($root_path . 'include/functions_check.'.$phpEx);

        $disallowed_user = ( isset($_POST['disallowed_user']) ) ? trim($_POST['disallowed_user']) : trim($_GET['disallowed_user']);

        if ($disallowed_user == '')
        {
                trigger_error($lang['fields_empty']);
                return;
        }
        if( !check_username($disallowed_user) )
        {
                $message = $lang['disallowed_already'];
        }
        else
        {
                $sql = "INSERT INTO " . DISALLOW_TABLE . " (disallow_username)
                        VALUES('" . str_replace("\'", "''", $disallowed_user) . "')";
                $result = $db->sql_query( $sql );
                $message = $lang['disallow_successful'];
        }

        $message .= "<br /><br />" . sprintf($lang['click_return_disallowadmin'], "<a href=\"" . append_sid("admin_disallow.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

        trigger_error($message);
        return;
}
else if( isset($_POST['delete_name']) )
{
        $disallowed_id = ( isset($_POST['disallowed_id']) ) ? intval( $_POST['disallowed_id'] ) : intval( $_GET['disallowed_id'] );

        $sql = "DELETE FROM " . DISALLOW_TABLE . "
                WHERE disallow_id = $disallowed_id";
        $result = $db->sql_query($sql);

        $message .= $lang['disallowed_deleted'] . "<br /><br />" . sprintf($lang['click_return_disallowadmin'], "<a href=\"" . append_sid("admin_disallow.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

        trigger_error($message);
        return;

}

//</span>
<span class="code-comment">// Grab the current list of disallowed usernames...
//
$sql = "SELECT *</span>
<span class="code-lang">        FROM " . DISALLOW_TABLE;
$result = $db->sql_query($sql);

//</span>
<span class="code-comment">// Ok now generate the info for the template, which will be put out no matter
// what mode we are in.
//
$disallow_select = '<select name="disallowed_id">';</span>
<span class="code-lang">
if( !($disallowed = $db->sql_fetchrow($result)) )
{
        $disallow_select .= '<option value="">' . $lang['no_disallowed'] . '</option>';
}
else
{
        $user = array();
        do {
                $disallow_select .= '<option value="' . $disallowed['disallow_id'] . '">' . $disallowed['disallow_username'] . '</option>';
       }
        while ( $disallowed = $db->sql_fetchrow($result) );
}

$disallow_select .= '</select>';

$template->set_filenames(array(</span>
<span class="code-lang">        "body" => "../admin/disallow_body.tpl")
);

$template->assign_vars(array(</span>
<span class="code-lang">        "S_DISALLOW_SELECT" => $disallow_select,
        "S_FORM_ACTION" => append_sid("admin_disallow.$phpEx"),

        "L_DISALLOW_TITLE" => $lang['disallow_control'],
        "L_DISALLOW_EXPLAIN" => $lang['disallow_explain'],
        "L_DELETE" => $lang['delete_disallow'],
        "L_DELETE_DISALLOW" => $lang['delete_disallow_title'],
        "L_DELETE_EXPLAIN" => $lang['delete_disallow_explain'],
        "L_ADD" => $lang['add_disallow'],
        "L_ADD_DISALLOW" => $lang['add_disallow_title'],
        "L_ADD_EXPLAIN" => $lang['add_disallow_explain'])
);

$template->display("body");</span>
<span class="code-lang">
include('./page_footer_admin.'.$phpEx);

?>