<?php

$vip = $_SERVER['REMOTE_ADDR'];
include "config.php";

##############################
# See if the Ip is in the blocked list #
##############################

$get_info = mysql_query("SELECT * FROM blocked WHERE ip = '$vip'");
$do_block = mysql_fetch_array($get_info);

############################################
# Now we are just checking to see if we need to block the user #
############################################

if( $do_block['ip'] == "$vip" ){

die("Sorry! Your Ip has been blocked from viewing our sites content");

}


?>

USE 'databasename';

CREATE TABLE blocked(
id int not null auto_increment primary key,
ip varchar(15),
added datetime);

<?php

#########################
# Config File #
#########################

$dbhost = "localhost"; // This is your database host name usally localhost
$dbuser = "user"; // This is your database user name...
$dbpass = "pass"; // this is your password used to login to the database
$dbname = "database"; // this is your database name.

##########################
# Edit the above to suit your needs ##
##########################

$conn = mysql_connect("$dbhost","$dbuser","$dbpass");
mysql_select_db("$dbname", $conn );

?>

<?php

include "ipblocklist.php";

// The rest of your code

?>

<?php

session_start();

#####################
# Get the Config File #
#####################
include "config.php";

#########################
# Set the admin credentials #
#########################
$admin = 'admin';
$pass = 'password';

$s_user = $_POST["admin"];
$s_pass = $_POST["pass"];

if( $ses_user <= " " ){

#########################
# Admin Login Form #
#########################

echo "<form action='ipadmin.php' method='post'>";
echo "Admin: <input type='text' name='admin'><br>";
echo "Pass: <input type='password' name='pass'><br>";
echo "<input type='submit' value='Login'>";
echo "</form>";

}

if( $s_user == $admin and $s_pass == $pass ){
$ses_user = $_SESSION['admin'] = $s_pass;
$go = 1;
}

if( $go = 1 ){

echo "Add a Ip to the Blocked List";
echo "<form action='ipadmin.php' method='post'>Ip: <input type='text' name='ip'><input type=submit value='Block Ip'></form>";

}
if( $_POST["ip"] > " " ){
$ip2 = $_POST["ip"];

echo "Are you sure you want to block $ip2";

echo "<form action='ipadmin.php' method='post'><input type='hidden' name='ip2' value='$ip2'><input type='submit' name='block' value='yes'>";

}
if( $_POST["block"] == "yes" ){
mysql_query("INSERT INTO blocked SET ip = '$ip2' added = NOW()") or die("Could not Block Ip, MySql Error");
}

echo "<center>Remove Blocked Ips<br><br>";
echo "<form action='ipadmin.php' method='post'><select name='remove'><option value=''>Select One</option>";
$ips = mysql_query("SELECT * FROM blocked");
while( $showips = mysql_fetch_array($ips)){
$ip_value = $showips['ip'];
echo "<option value='$ip_value'>$ip_value</option>";
}
echo "<input type='submit' value='RemoveIp' name='Remove Ip'>";
echo "</form>";

if( $_POST["Remove Ip"] == "RemoveIp" ){
$del_ip = $_POST['remove'];
mysql_query("DELETE FROM blocked WHERE ip = '$del_ip' LIMIT 1");
echo "The Ip $del_ip has been removed from the blocked list!";
}

?>