$method != 'POST' and message(-1, 'Method error');
empty($group['allowdeleteuser']) and message(-1, '您无权删除用户');
$u = user_read($_uid);
empty($u) and message(-1, '用户不存在或者已经被删除。');
$u['gid'] < 6 and message(-1, '不允许删除管理组，请先调整用户用户组。');
$r = user_delete($_uid);
$r === FALSE ? message(-1, '删除失败') : message(0, '删除成功');
} elseif ($action == 'banip') {
$method != 'POST' and message(-1, 'Method error');
$_ip = xn_urldecode(param(2));
empty($_ip) and message(-1, 'IP 为空');
$_ip = long2ip(ip2long($_ip));
// 安全过滤
$day = intval(xn_urldecode(param(3)));
empty($group['allowbanuser']) and message(-1, '您无权禁止 IP');
$arr = explode('.', $_ip);
$arr[0] == '0' and message(-1, 'IP 地址不能以 0 开头。');
$banip = banip_read_by_ip($_ip);
if ($day == -1) {
$r = banip_delete($banip['banid']);
} else {
$day == 0 and $day = 3650;
$arr = array('ip0' => $arr[0], 'ip1' => $arr[1], 'ip2' => $arr[2], 'ip3' => $arr[3], 'uid' => $uid, 'create_date' => $time, 'uid' => $uid, 'expiry' => $time + 86400 * $day);
if (empty($banip)) {
$r = banip_create($arr);
} else {
$r = banip_update($banip['banid'], $arr);
}
}
$r === FALSE ? message(-1, '操作失败') : message(0, '操作成功');
}
function check_banip($ip)
{
global $conf;
if (empty($conf['banip_on'])) {
return;
}
$r = banip_read_by_ip($ip);
$r and message(-1, '您的 IP 已经被禁止。');
}