#define MAX_ADMINBANS_PER_ADMIN 1

#define MAX_ADMINBANS_PER_HEADMIN 3

/proc/is_banned_from(player_ckey, list/roles)

if(!player_ckey)

return

var/client/C = GLOB.directory[player_ckey]

if(C)

if(!C.ban_cache)

build_ban_cache(C)

if(islist(roles))

for(var/R in roles)

if(R in C.ban_cache)

return TRUE //they're banned from at least one role, no need to keep checking

else if(roles in C.ban_cache)

return TRUE

else

var/values = list(

"player_ckey" = player_ckey,

"must_apply_to_admins" = !!(GLOB.permissions.admin_datums[player_ckey] || GLOB.permissions.deadmins[player_ckey]),

)

var/sql_roles

if(islist(roles))

var/list/sql_roles_list = list()

for (var/i in 1 to roles.len)

values["role[i]"] = roles[i]

sql_roles_list += ":role[i]"

sql_roles = sql_roles_list.Join(", ")

else

values["role"] = roles

sql_roles = ":role"

var/datum/DBQuery/query_check_ban = SSdbcore.NewQuery({"

FROM [format_table_name("ban")]

role IN ([sql_roles]) AND

"}, values)

if(!query_check_ban.warn_execute())

qdel(query_check_ban)

return

if(query_check_ban.NextRow())

qdel(query_check_ban)

return TRUE

qdel(query_check_ban)

/proc/is_banned_from_with_details(player_ckey, player_ip, player_cid, role)

var/datum/DBQuery/query_get_bypass_creds = SSdbcore.NewQuery({"

FROM [format_table_name("bound_credentials")]

FIND_IN_SET('[DB_BOUND_CREDENTIALS_FLAG_BYPASS_BANS]', [format_table_name("bound_credentials")].flags)

"}, list("ckey" = player_ckey));

if(!query_get_bypass_creds.warn_execute())

qdel(query_get_bypass_creds)

return

while(query_get_bypass_creds.NextRow())

var/bound_cid = query_get_bypass_creds.item[1]

var/bound_ip = query_get_bypass_creds.item[2]

//If we bypass, set the thing to null so that we can not check it

if(bound_cid == player_cid)

player_cid = null

if(bound_ip == player_ip)

player_ip = null

qdel(query_get_bypass_creds)

if(!player_ckey && !player_ip && !player_cid)

return

var/datum/DBQuery/query_check_ban = SSdbcore.NewQuery({"

IFNULL((SELECT byond_key FROM [format_table_name("player")] WHERE [format_table_name("player")].ckey = [format_table_name("ban")].ckey), ckey),

IFNULL((SELECT byond_key FROM [format_table_name("player")] WHERE [format_table_name("player")].ckey = [format_table_name("ban")].a_ckey), a_ckey)

FROM [format_table_name("ban")]

"}, list("role" = role, "ckey" = player_ckey, "ip" = player_ip, "computerid" = player_cid))

if(!query_check_ban.warn_execute())

qdel(query_check_ban)

return

. = list()

while(query_check_ban.NextRow())

. += list(list("id" = query_check_ban.item[1], "bantime" = query_check_ban.item[2], "round_id" = query_check_ban.item[3], "expiration_time" = query_check_ban.item[4], "duration" = query_check_ban.item[5], "applies_to_admins" = query_check_ban.item[6], "reason" = query_check_ban.item[7], "key" = query_check_ban.item[8], "ip" = query_check_ban.item[9], "computerid" = query_check_ban.item[10], "admin_key" = query_check_ban.item[11]))

qdel(query_check_ban)

/proc/build_ban_cache(client/C)

if(!SSdbcore.Connect())

return

if(C && istype(C))

C.ban_cache = list()

var/is_admin = FALSE

if(GLOB.permissions.admin_datums[C.ckey] || GLOB.permissions.deadmins[C.ckey])

is_admin = TRUE

var/datum/DBQuery/query_build_ban_cache = SSdbcore.NewQuery(

"SELECT [format_table_name("ban")].role, applies_to_admins FROM [format_table_name("ban")] WHERE ckey = :ckey AND unbanned_datetime IS NULL AND (expiration_time IS NULL OR expiration_time > NOW())",

list("ckey" = C.ckey)

)

if(!query_build_ban_cache.warn_execute())

qdel(query_build_ban_cache)

return

while(query_build_ban_cache.NextRow())

if(is_admin && !text2num(query_build_ban_cache.item[2]))

continue

C.ban_cache[query_build_ban_cache.item[1]] = TRUE

qdel(query_build_ban_cache)

/datum/admins/proc/ban_panel(player_key, player_ip, player_cid, role, duration = 1440, applies_to_admins, reason, edit_id, page, admin_key)

var/panel_height = 620

if(edit_id)

panel_height = 240

var/datum/browser/panel = new(usr, "banpanel", "Banning Panel", 910, panel_height)

panel.add_stylesheet("banpanelcss", 'html/admin/banpanel.css')

var/tgui_fancy = usr.client.prefs.read_preference(/datum/preference/toggle/tgui_fancy)

if(tgui_fancy) //some browsers (IE8) have trouble with unsupported css3 elements and DOM methods that break the panel's functionality, so we won't load those if a user is in no frills tgui mode since that's for similar compatability support

panel.add_stylesheet("banpanelcss3", 'html/admin/banpanel_css3.css')

panel.add_script("banpaneljs", 'html/admin/banpanel.js')

var/list/output = list("<form method='get' action='?src=[REF(src)]'>[HrefTokenFormField()]")

// yogs - removed severity from the gui

output += {"<input type='hidden' name='src' value='[REF(src)]'>

<input type='checkbox' id='keycheck' name='keycheck' value='1'[player_key ? " checked": ""]>

<input type='text' name='keytext' size='26' value='[player_key]'>

<input type='text' name='iptext' size='18' value='[player_ip]'>

<input type='text' name='cidtext' size='14' value='[player_cid]'>

<input type='checkbox' id='lastconn' name='lastconn' value='1' [(!player_ip || !player_cid) ? " checked": ""]>

<input type='checkbox' id='applyadmins' name='applyadmins' value='1'[applies_to_admins ? " checked": ""]>

<input type='radio' id='permanent' name='radioduration' value='permanent'[isnull(duration) ? " checked" : ""]>

<input type='radio' id='temporary' name='radioduration' value='temporary'[duration ? " checked" : ""]>

<input type='text' name='duration' size='7' value='[duration]'>

<input type='radio' id='server' name='radioban' value='server'[role == "Server" ? " checked" : ""][edit_id ? " disabled" : ""]>

<input type='radio' id='role' name='radioban' value='role'[role == "Server" ? "" : " checked"][edit_id ? " disabled" : ""]>

<textarea class='reason' name='reason' maxlength='600'>[reason]</textarea>

if(edit_id)

output += {"<label class='inputlabel checkbox'>Mirror edits to matching bans

<input type='hidden' name='editid' value='[edit_id]'>

<input type='hidden' name='oldkey' value='[player_key]'>

<input type='hidden' name='oldip' value='[player_ip]'>

<input type='hidden' name='oldcid' value='[player_cid]'>

<input type='hidden' name='oldapplies' value='[applies_to_admins]'>

<input type='hidden' name='oldduration' value='[duration]'>

<input type='hidden' name='oldreason' value='[reason]'>

<input type='hidden' name='page' value='[page]'>

<input type='hidden' name='adminkey' value='[admin_key]'>

else

output += "<input type='hidden' name='roleban_delimiter' value='1'>"

//there's not always a client to use the bancache of so to avoid many individual queries from using is_banned_form we'll build a cache to use here

var/banned_from = list()

if(player_key)

var/datum/DBQuery/query_get_banned_roles = SSdbcore.NewQuery({"

FROM [format_table_name("ban")]

"}, list("player_ckey" = ckey(player_key)))

if(!query_get_banned_roles.warn_execute())

qdel(query_get_banned_roles)

return

while(query_get_banned_roles.NextRow())

banned_from += query_get_banned_roles.item[1]

qdel(query_get_banned_roles)

var/break_counter = 0

output += "<div class='row'><div class='column'><label class='rolegroup command'><input type='checkbox' name='Command' class='hidden' [tgui_fancy ? " onClick='toggle_checkboxes(this, \"_dep\")'" : ""]>Command</label><div class='content'>"

//all heads are listed twice so have a javascript call to toggle both their checkboxes when one is pressed

//for simplicity this also includes the captain even though it doesn't do anything

for(var/job in GLOB.original_command_positions)

if(break_counter > 0 && (break_counter % 3 == 0))

output += "<br>"

output += {"<label class='inputlabel checkbox'>[job]

<input type='checkbox' id='[job]_com' name='[job]' class='Command' value='1'[tgui_fancy ? " onClick='toggle_head(this, \"_dep\")'" : ""]>

<div class='inputbox[(job in banned_from) ? " banned" : ""]'></div></label>

break_counter++

output += "</div></div>"

//standard departments all have identical handling

var/list/job_lists = list("Security" = GLOB.original_security_positions,

"Engineering" = GLOB.original_engineering_positions,

"Medical" = GLOB.original_medical_positions,

"Science" = GLOB.original_science_positions,

"Supply" = GLOB.original_supply_positions)

for(var/department in job_lists)

//the first element is the department head so they need the same javascript call as above

output += "<div class='column'><label class='rolegroup [ckey(department)]'><input type='checkbox' name='[department]' class='hidden' [tgui_fancy ? " onClick='toggle_checkboxes(this, \"_com\")'" : ""]>[department]</label><div class='content'>"

output += {"<label class='inputlabel checkbox'>[job_lists[department][1]]

<input type='checkbox' id='[job_lists[department][1]]_dep' name='[job_lists[department][1]]' class='[department]' value='1'[tgui_fancy ? " onClick='toggle_head(this, \"_com\")'" : ""]>

<div class='inputbox[(job_lists[department][1] in banned_from) ? " banned" : ""]'></div></label>

break_counter = 1

for(var/job in job_lists[department] - job_lists[department][1]) //skip the first element since it's already been done

if(break_counter % 3 == 0)

output += "<br>"

output += {"<label class='inputlabel checkbox'>[job]

<input type='checkbox' name='[job]' class='[department]' value='1'>

<div class='inputbox[(job in banned_from) ? " banned" : ""]'></div></label>

break_counter++

output += "</div></div>"

//departments/groups that don't have command staff would throw a javascript error since there's no corresponding reference for toggle_head()

var/list/headless_job_lists = list("Silicon" = GLOB.original_nonhuman_positions,

"Abstract" = list("Appearance", "Emote", "OOC", "Voice Announcements", "DEAD"))

for(var/department in headless_job_lists)

output += "<div class='column'><label class='rolegroup [ckey(department)]'><input type='checkbox' name='[department]' class='hidden' [tgui_fancy ? " onClick='toggle_checkboxes(this, \"_com\")'" : ""]>[department]</label><div class='content'>"

break_counter = 0

for(var/job in headless_job_lists[department])

if(break_counter > 0 && (break_counter % 3 == 0))

output += "<br>"

output += {"<label class='inputlabel checkbox'>[job]

<input type='checkbox' name='[job]' class='[department]' value='1'>

<div class='inputbox[(job in banned_from) ? " banned" : ""]'></div></label>

break_counter++

output += "</div></div>"

var/list/long_job_lists = list("Civilian" = GLOB.original_civilian_positions,

"Ghost and Other Roles" = list(ROLE_BRAINWASHED, ROLE_DEATHSQUAD, ROLE_DRONE, ROLE_FUGITIVE, ROLE_HOLOPARASITE, ROLE_HORROR, ROLE_LAVALAND, ROLE_MIND_TRANSFER, ROLE_POSIBRAIN, ROLE_SENTIENCE, ROLE_MOUSE, ROLE_GOLEM, ROLE_GHOSTBEACON),

"Antagonist Positions" = list(ROLE_ABDUCTOR, ROLE_ALIEN, ROLE_BLOB,

ROLE_BLOODSUCKER, ROLE_BROTHER, ROLE_CHANGELING, ROLE_CULTIST,

ROLE_DEVIL, ROLE_FUGITIVE, ROLE_HOLOPARASITE, ROLE_INTERNAL_AFFAIRS, ROLE_MALF,

ROLE_MONKEY, ROLE_MONSTERHUNTER, ROLE_NINJA, ROLE_OPERATIVE,

ROLE_REV, ROLE_REVENANT, ROLE_SINFULDEMON,

ROLE_REV_HEAD, ROLE_SERVANT_OF_RATVAR, ROLE_SYNDICATE,

ROLE_TRAITOR, ROLE_WIZARD, ROLE_GANG, ROLE_VAMPIRE,

ROLE_SHADOWLING, ROLE_DARKSPAWN, ROLE_ZOMBIE, ROLE_HERETIC)) //ROLE_REV_HEAD is excluded from this because rev jobbans are handled by ROLE_REV

for(var/department in long_job_lists)

output += "<div class='column'><label class='rolegroup long [ckey(department)]'><input type='checkbox' name='[department]' class='hidden' [tgui_fancy ? " onClick='toggle_checkboxes(this, \"_com\")'" : ""]>[department]</label><div class='content'>"

break_counter = 0

for(var/job in long_job_lists[department])

if(break_counter > 0 && (break_counter % 10 == 0))

output += "<br>"

output += {"<label class='inputlabel checkbox'>[job]

<input type='checkbox' name='[job]' class='[department]' value='1'>

<div class='inputbox[(job in banned_from) ? " banned" : ""]'></div></label>

break_counter++

output += "</div></div>"

output += "</div>"

output += "</form>"

panel.set_content(jointext(output, ""))

panel.open()

/datum/admins/proc/ban_parse_href(list/href_list)

if(!check_rights(R_BAN))

return

if(!SSdbcore.Connect())

to_chat(usr, span_danger("Failed to establish database connection."), confidential=TRUE)

return

var/list/error_state = list()

var/player_key

var/ip_check = FALSE

var/player_ip

var/cid_check = FALSE

var/player_cid

var/use_last_connection = FALSE

var/applies_to_admins = FALSE

var/duration

var/interval

//var/severity // yogs - we dont need this

var/reason

var/mirror_edit

var/edit_id

var/old_key

var/old_ip

var/old_cid

var/old_applies

var/page

var/admin_key

var/list/changes = list()

var/list/roles_to_ban = list()

if(href_list["keycheck"])

player_key = href_list["keytext"]

if(!player_key)

error_state += "Key was ticked but none was provided."

if(href_list["ipcheck"])

ip_check = TRUE

if(href_list["cidcheck"])

cid_check = TRUE

if(href_list["lastconn"])

if(player_key)

use_last_connection = TRUE

else

if(ip_check)

player_ip = href_list["iptext"]

if(!player_ip && !use_last_connection)

error_state += "IP was ticked but none was provided."

if(cid_check)

player_cid = href_list["cidtext"]

if(!player_cid && !use_last_connection)

error_state += "CID was ticked but none was provided."

if(!use_last_connection && !player_ip && !player_cid && !player_key)

error_state += "At least a key, IP or CID must be provided."

if(use_last_connection && !ip_check && !cid_check)

error_state += "Use last connection was ticked, but neither IP nor CID was."

if(href_list["applyadmins"])

applies_to_admins = TRUE

switch(href_list["radioduration"])

if("permanent")

duration = null

if("temporary")

duration = href_list["duration"]

interval = href_list["intervaltype"]

if(!duration)

error_state += "Temporary ban was selected but no duration was provided."

else

error_state += "No duration was selected."

reason = href_list["reason"]

if(!reason)

error_state += "No reason was provided."

if(length(reason) > 600)

error_state += "Reason cannot be more than 600 characters."

if(href_list["editid"])

edit_id = href_list["editid"]

if(href_list["mirroredit"])

mirror_edit = TRUE

old_key = href_list["oldkey"]

old_ip = href_list["oldip"]

old_cid = href_list["oldcid"]

page = href_list["page"]

admin_key = href_list["adminkey"]

if(player_key != old_key)

changes += list("Key" = "[old_key] to [player_key]")

if(player_ip != old_ip)

changes += list("IP" = "[old_ip] to [player_ip]")

if(player_cid != old_cid)

changes += list("CID" = "[old_cid] to [player_cid]")

old_applies = text2num(href_list["oldapplies"])

if(applies_to_admins != old_applies)

changes += list("Applies to admins" = "[old_applies] to [applies_to_admins]")

if(duration != href_list["oldduration"])

changes += list("Duration" = "[href_list["oldduration"]] MINUTE to [duration] [interval]")

if(reason != href_list["oldreason"])

changes += list("Reason" = "[href_list["oldreason"]]<br>to<br>[reason]")

if(!changes.len)

error_state += "No changes were detected."

else

// yogs - removed severity

/*severity = href_list["radioseverity"]

switch(href_list["radioban"])

if("server")

roles_to_ban += "Server"

if("role")

href_list.Remove("Command", "Security", "Engineering", "Medical", "Science", "Supply", "Silicon", "Abstract", "Civilian", "Ghost and Other Roles", "Antagonist Positions") //remove the role banner hidden input values

var/delimiter_pos = href_list.Find("roleban_delimiter")

if(href_list.len == delimiter_pos)

error_state += "Role ban was selected but no roles to ban were selected."

else if(delimiter_pos == 0)

error_state += "roleban_delimiter not found in href. Report this to coders."

else

href_list.Cut(1, delimiter_pos+1)//remove every list element before and including roleban_delimiter so we have a list of only the roles to ban

for(var/key in href_list) //flatten into a list of only unique keys

roles_to_ban |= key

else

error_state += "No ban type was selected."

if(error_state.len)

to_chat(usr, span_danger("Ban not [edit_id ? "edited" : "created"] because the following errors were present:\n[error_state.Join("\n")]"), confidential=TRUE)

return

if(edit_id)

edit_ban(edit_id, player_key, ip_check, player_ip, cid_check, player_cid, use_last_connection, applies_to_admins, duration, interval, reason, mirror_edit, old_key, old_ip, old_cid, old_applies, page, admin_key, changes)

else

create_ban(player_key, ip_check, player_ip, cid_check, player_cid, use_last_connection, applies_to_admins, duration, interval, reason, roles_to_ban) // yogs - removed severity

/datum/admins/proc/create_ban(player_key, ip_check, player_ip, cid_check, player_cid, use_last_connection, applies_to_admins, duration, interval, reason, list/roles_to_ban) // removed severity

if(!check_rights(R_BAN))

return

if(!SSdbcore.Connect())

to_chat(usr, span_danger("Failed to establish database connection."), confidential=TRUE)

return

var/player_ckey = ckey(player_key)

if(player_ckey)

var/datum/DBQuery/query_create_ban_get_player = SSdbcore.NewQuery({"

SELECT byond_key, INET_NTOA(ip), computerid FROM [format_table_name("player")] WHERE ckey = :player_ckey

"}, list("player_ckey" = player_ckey))

if(!query_create_ban_get_player.warn_execute())

qdel(query_create_ban_get_player)

return

if(query_create_ban_get_player.NextRow())

player_key = query_create_ban_get_player.item[1]

if(use_last_connection)

if(ip_check)

player_ip = query_create_ban_get_player.item[2]

if(cid_check)

player_cid = query_create_ban_get_player.item[3]

else

if(use_last_connection)

if(tgui_alert(usr, "[player_key]/([player_ckey]) has not been seen before, unable to use IP and CID from last connection. Are you sure you want to create a ban for them?", "Unknown key", list("Yes", "No", "Cancel")) != "Yes")

qdel(query_create_ban_get_player)

return

else

if(tgui_alert(usr, "[player_key]/([player_ckey]) has not been seen before, are you sure you want to create a ban for them?", "Unknown key", list("Yes", "No", "Cancel")) != "Yes")

qdel(query_create_ban_get_player)

return

qdel(query_create_ban_get_player)

var/admin_ckey = usr.client.ckey

if(applies_to_admins)

var/datum/DBQuery/query_check_adminban_count = SSdbcore.NewQuery({"

FROM [format_table_name("ban")]

"}, list("admin_ckey" = admin_ckey))

if(!query_check_adminban_count.warn_execute()) //count distinct bantime to treat rolebans made at the same time as one ban

qdel(query_check_adminban_count)

return

if(query_check_adminban_count.NextRow())

var/adminban_count = text2num(query_check_adminban_count.item[1])

var/max_adminbans = MAX_ADMINBANS_PER_ADMIN

if(check_rights(R_PERMISSIONS, FALSE)) //edit rights are a more effective way to check hierarchical rank since many non-headmins have R_PERMISSIONS now

max_adminbans = MAX_ADMINBANS_PER_HEADMIN

if(adminban_count >= max_adminbans)

to_chat(usr, span_danger("You've already logged [max_adminbans] admin ban(s) or more. Do not abuse this function!"), confidential=TRUE)

qdel(query_check_adminban_count)

return

qdel(query_check_adminban_count)

var/admin_ip = usr.client.address

var/admin_cid = usr.client.computer_id

duration = text2num(duration)

if (!(interval in list("SECOND", "MINUTE", "HOUR", "DAY", "WEEK", "MONTH", "YEAR")))

interval = "MINUTE"

var/time_message = "[duration] [lowertext(interval)]" //no DisplayTimeText because our duration is of variable interval type

if(duration > 1) //pluralize the interval if necessary

time_message += "s"

var/note_reason = "Banned from [roles_to_ban[1] == "Server" ? "the server" : " Roles: [roles_to_ban.Join(", ")]"] [isnull(duration) ? "permanently" : "for [time_message]"] - [reason]"

var/list/clients_online = GLOB.clients.Copy()

var/list/admins_online = list()

for(var/client/C in clients_online)

if(C.holder) //deadmins aren't included since they wouldn't show up on adminwho

admins_online += C

var/who = clients_online.Join(", ")

var/adminwho = admins_online.Join(", ")

var/kn = key_name(usr)

var/kna = key_name_admin(usr)

var/special_columns = list(

"bantime" = "NOW()",

"server_ip" = "INET_ATON(?)",

"ip" = "INET_ATON(?)",

"a_ip" = "INET_ATON(?)",

"expiration_time" = "IF(? IS NULL, NULL, NOW() + INTERVAL ? [interval])"

)

var/sql_ban = list()

for(var/role in roles_to_ban)

sql_ban += list(list(

"server_ip" = world.internet_address || 0,

"server_port" = world.port,

"round_id" = GLOB.round_id,

"role" = role,

"expiration_time" = duration,

"applies_to_admins" = applies_to_admins,

"reason" = reason,

"ckey" = player_ckey || null,

"ip" = player_ip || null,

"computerid" = player_cid || null,

"a_ckey" = admin_ckey,

"a_ip" = admin_ip || null,

"a_computerid" = admin_cid,

"who" = who,

"adminwho" = adminwho,

))

if(!SSdbcore.MassInsert(format_table_name("ban"), sql_ban, warn = TRUE, special_columns = special_columns))

return

var/target = ban_target_string(player_key, player_ip, player_cid)

var/msg = "has created a [isnull(duration) ? "permanent" : "temporary [time_message]"] [applies_to_admins ? "admin " : ""][roles_to_ban[1] == "Server" ? "server ban" : "role ban from [roles_to_ban.len] roles"] for [target]."

log_admin_private("[kn] [msg][roles_to_ban[1] == "Server" ? "" : " Roles: [roles_to_ban.Join(", ")]"] Reason: [reason]")

message_admins("[kna] [msg][roles_to_ban[1] == "Server" ? "" : " Roles: [roles_to_ban.Join("\n")]"]\nReason: [reason]")

if(applies_to_admins)

send2irc("BAN ALERT","[kn] [msg]")

if(player_ckey)

create_message("note", player_ckey, admin_ckey, note_reason, null, null, 0, 0, null, 0) // yogs - removed severity

var/client/C = GLOB.directory[player_ckey]

var/datum/admin_help/AH = admin_ticket_log(player_ckey, msg)

var/appeal_url = "No ban appeal url set!"

appeal_url = CONFIG_GET(string/banappeals)

var/is_admin = FALSE

if(C)

build_ban_cache(C)

to_chat(C, "[span_boldannounce("You have been [applies_to_admins ? "admin " : ""]banned by [usr.client.key] from [roles_to_ban[1] == "Server" ? "the server" : " Roles: [roles_to_ban.Join(", ")]"].\nReason: [reason]")]<br>[span_danger("This ban is [isnull(duration) ? "permanent." : "temporary, it will be removed in [time_message]."] The round ID is [GLOB.round_id].")]<br>[span_danger("To appeal this ban go to [appeal_url]")]", confidential=TRUE)

if(GLOB.permissions.admin_datums[C.ckey] || GLOB.permissions.deadmins[C.ckey])

is_admin = TRUE

if(roles_to_ban[1] == "Server" && (!is_admin || (is_admin && applies_to_admins)))

qdel(C)

if(roles_to_ban[1] == "Server" && AH)

AH.Resolve()

for(var/client/i in GLOB.clients - C)

if(i.address == player_ip || i.computer_id == player_cid)

build_ban_cache(i)

to_chat(i, "[span_boldannounce("You have been [applies_to_admins ? "admin " : ""]banned by [usr.client.key] from [roles_to_ban[1] == "Server" ? "the server" : " Roles: [roles_to_ban.Join(", ")]"].\nReason: [reason]")]<br>[span_danger("This ban is [isnull(duration) ? "permanent." : "temporary, it will be removed in [time_message]."] The round ID is [GLOB.round_id].")]<br>[span_danger("To appeal this ban go to [appeal_url]")]")

if(GLOB.permissions.admin_datums[i.ckey] || GLOB.permissions.deadmins[i.ckey])

is_admin = TRUE

if(roles_to_ban[1] == "Server" && (!is_admin || (is_admin && applies_to_admins)))

qdel(i)

/datum/admins/proc/unban_panel(player_key, admin_key, player_ip, player_cid, page = 0)

if(!check_rights(R_BAN))

return

if(!SSdbcore.Connect())

to_chat(usr, span_danger("Failed to establish database connection."), confidential=TRUE)

return

var/datum/browser/unban_panel = new(usr, "unbanpanel", "Unbanning Panel", 850, 600)

unban_panel.add_stylesheet("unbanpanelcss", 'html/admin/unbanpanel.css')

var/list/output = list("<div class='searchbar'>")

output += {"<form method='get' action='?src=[REF(src)]'>[HrefTokenFormField()]

<input type='hidden' name='src' value='[REF(src)]'>

Key:<input type='text' name='searchunbankey' size='18' value='[player_key]'>

Admin Key:<input type='text' name='searchunbanadminkey' size='18' value='[admin_key]'>

IP:<input type='text' name='searchunbanip' size='12' value='[player_ip]'>

CID:<input type='text' name='searchunbancid' size='10' value='[player_cid]'>

if(player_key || admin_key || player_ip || player_cid)

var/bancount = 0

var/bansperpage = 10

page = text2num(page)

var/datum/DBQuery/query_unban_count_bans = SSdbcore.NewQuery({"

FROM [format_table_name("ban")]

"}, list(

"player_key" = ckey(player_key),

"admin_key" = ckey(admin_key),

"player_ip" = player_ip || null,

"player_cid" = player_cid || null,

))

if(!query_unban_count_bans.warn_execute())

qdel(query_unban_count_bans)

return

if(query_unban_count_bans.NextRow())

bancount = text2num(query_unban_count_bans.item[1])

qdel(query_unban_count_bans)

if(bancount > bansperpage)

output += "<b>Page: </b>"

var/pagecount = 1

var/list/pagelist = list()

while(bancount > 0)

pagelist += "<a href='?_src_=holder;[HrefToken()];unbanpagecount=[pagecount - 1];unbankey=[player_key];unbanadminkey=[admin_key];unbanip=[player_ip];unbancid=[player_cid]'>[pagecount == page ? "<b>\[[pagecount]\]</b>" : "\[[pagecount]\]"]</a>"

bancount -= bansperpage

pagecount++

output += pagelist.Join(" | ")

var/datum/DBQuery/query_unban_search_bans = SSdbcore.NewQuery({"

FROM [format_table_name("player")]

WHERE [format_table_name("player")].ckey = [format_table_name("ban")].ckey

FROM [format_table_name("player")]

WHERE [format_table_name("player")].ckey = [format_table_name("ban")].a_ckey

FROM [format_table_name("player")]

WHERE [format_table_name("player")].ckey = [format_table_name("ban")].unbanned_ckey

FROM [format_table_name("ban")]

"}, list(

"player_key" = ckey(player_key),

"admin_key" = ckey(admin_key),

"player_ip" = player_ip || null,

"player_cid" = player_cid || null,

"skip" = bansperpage * page,

"take" = bansperpage,

))

if(!query_unban_search_bans.warn_execute())

qdel(query_unban_search_bans)

return

while(query_unban_search_bans.NextRow())

var/ban_id = query_unban_search_bans.item[1]

var/ban_datetime = query_unban_search_bans.item[2]

var/ban_round_id = query_unban_search_bans.item[3]

var/role = query_unban_search_bans.item[4]

//make the href for unban here so only the search parameters are passed

var/unban_href = "<a href='?_src_=holder;[HrefToken()];unbanid=[ban_id];unbankey=[player_key];unbanadminkey=[admin_key];unbanip=[player_ip];unbancid=[player_cid];unbanrole=[role];unbanpage=[page]'>Unban</a>"

var/expiration_time = query_unban_search_bans.item[5]

//we don't cast duration as num because if the duration is large enough to be converted to scientific notation by byond then the + character gets lost when passed through href causing SQL to interpret '4.321e 007' as '4'

var/duration = query_unban_search_bans.item[6]

var/expired = query_unban_search_bans.item[7]

var/applies_to_admins = text2num(query_unban_search_bans.item[8])

var/reason = query_unban_search_bans.item[9]

player_key = query_unban_search_bans.item[10]

player_ip = query_unban_search_bans.item[11]

player_cid = query_unban_search_bans.item[12]

admin_key = query_unban_search_bans.item[13]

var/edits = query_unban_search_bans.item[14]

var/unban_datetime = query_unban_search_bans.item[15]

var/unban_key = query_unban_search_bans.item[16]

var/unban_round_id = query_unban_search_bans.item[17]

var/target = ban_target_string(player_key, player_ip, player_cid)

output += "<div class='banbox'><div class='header [unban_datetime ? "unbanned" : "banned"]'><b>[target]</b>[applies_to_admins ? " <b>ADMIN</b>" : ""] banned by <b>[admin_key]</b> from <b>[role]</b> on <b>[ban_datetime]</b> during round <b>#[ban_round_id]</b>.<br>"

if(!expiration_time)

output += "<b>Permanent ban</b>."

else

output += "Duration of <b>[DisplayTimeText(text2num(duration) MINUTES)]</b>, <b>[expired ? "expired" : "expires"]</b> on <b>[expiration_time]</b>."

if(unban_datetime)

output += "<br>Unbanned by <b>[unban_key]</b> on <b>[unban_datetime]</b> during round <b>#[unban_round_id]</b>."

output += "</div><div class='container'><div class='reason'>[reason]</div><div class='edit'>"

if(!expired && !unban_datetime)

output += "<a href='?_src_=holder;[HrefToken()];editbanid=[ban_id];editbankey=[player_key];editbanip=[player_ip];editbancid=[player_cid];editbanrole=[role];editbanduration=[duration];editbanadmins=[applies_to_admins];editbanreason=[url_encode(reason)];editbanpage=[page];editbanadminkey=[admin_key]'>Edit</a><br>[unban_href]"

if(edits)

output += "<br><a href='?_src_=holder;[HrefToken()];unbanlog=[ban_id]'>Edit log</a>"

output += "</div></div></div>"

qdel(query_unban_search_bans)

output += "</div>"

unban_panel.set_content(jointext(output, ""))

unban_panel.open()

/datum/admins/proc/unban(ban_id, player_key, player_ip, player_cid, role, page, admin_key)

if(!check_rights(R_BAN))

return

if(!SSdbcore.Connect())

to_chat(usr, span_danger("Failed to establish database connection."), confidential=TRUE)

return

var/target = ban_target_string(player_key, player_ip, player_cid)

if(tgui_alert(usr, "Please confirm unban of [target] from [role].", "Unban confirmation", list("Yes", "No")) == "No")

return

var/kn = key_name(usr)

var/kna = key_name_admin(usr)

var/datum/DBQuery/query_unban = SSdbcore.NewQuery({"

UPDATE [format_table_name("ban")] SET

"}, list("ban_id" = ban_id, "admin_ckey" = usr.client.ckey, "admin_ip" = usr.client.address, "admin_cid" = usr.client.computer_id, "round_id" = GLOB.round_id))

if(!query_unban.warn_execute())

qdel(query_unban)

return

qdel(query_unban)

log_admin_private("[kn] has unbanned [target] from [role].")

message_admins("[kna] has unbanned [target] from [role].")

var/client/C = GLOB.directory[player_key]

if(C)

build_ban_cache(C)

to_chat(C, span_boldannounce("[usr.client.key] has removed a ban from [role] for your key."), confidential=TRUE)

for(var/client/i in GLOB.clients - C)

if(i.address == player_ip || i.computer_id == player_cid)

build_ban_cache(i)

to_chat(i, span_boldannounce("[usr.client.key] has removed a ban from [role] for your IP or CID."))

unban_panel(player_key, admin_key, player_ip, player_cid, page)

/datum/admins/proc/edit_ban(ban_id, player_key, ip_check, player_ip, cid_check, player_cid, use_last_connection, applies_to_admins, duration, interval, reason, mirror_edit, old_key, old_ip, old_cid, old_applies, admin_key, page, list/changes)

if(!check_rights(R_BAN))

return

if(!SSdbcore.Connect())

to_chat(usr, span_danger("Failed to establish database connection."), confidential=TRUE)

return

var/player_ckey = ckey(player_key)

var/bantime

if(player_ckey)

var/datum/DBQuery/query_edit_ban_get_player = SSdbcore.NewQuery({"

(SELECT bantime FROM [format_table_name("ban")] WHERE id = :ban_id),

FROM [format_table_name("player")]

"}, list("player_ckey" = player_ckey, "ban_id" = ban_id))

if(!query_edit_ban_get_player.warn_execute())

qdel(query_edit_ban_get_player)

return

if(query_edit_ban_get_player.NextRow())

player_key = query_edit_ban_get_player.item[1]

bantime = query_edit_ban_get_player.item[2]

if(use_last_connection)

if(ip_check)

player_ip = query_edit_ban_get_player.item[3]

if(cid_check)

player_cid = query_edit_ban_get_player.item[4]

else

if(use_last_connection)

if(tgui_alert(usr, "[player_key]/([player_ckey]) has not been seen before, unable to use IP and CID from last connection. Are you sure you want to edit a ban for them?", "Unknown key", list("Yes", "No", "Cancel")) != "Yes")

qdel(query_edit_ban_get_player)

return

else

if(tgui_alert(usr, "[player_key]/([player_ckey]) has not been seen before, are you sure you want to edit a ban for them?", "Unknown key", list("Yes", "No", "Cancel")) != "Yes")

qdel(query_edit_ban_get_player)

return

qdel(query_edit_ban_get_player)

if(applies_to_admins && (applies_to_admins != old_applies))

var/datum/DBQuery/query_check_adminban_count = SSdbcore.NewQuery({"

FROM [format_table_name("ban")]

"}, list("admin_ckey" = usr.client.ckey))

if(!query_check_adminban_count.warn_execute()) //count distinct bantime to treat rolebans made at the same time as one ban

qdel(query_check_adminban_count)

return

if(query_check_adminban_count.NextRow())

var/adminban_count = text2num(query_check_adminban_count.item[1])

var/max_adminbans = MAX_ADMINBANS_PER_ADMIN

if(check_rights(R_PERMISSIONS, FALSE)) //edit rights are a more effective way to check hierarchical rank since many non-headmins have R_PERMISSIONS now

max_adminbans = MAX_ADMINBANS_PER_HEADMIN

if(adminban_count >= max_adminbans)

to_chat(usr, span_danger("You've already logged [max_adminbans] admin ban(s) or more. Do not abuse this function!"), confidential=TRUE)

qdel(query_check_adminban_count)

return

qdel(query_check_adminban_count)

if (!(interval in list("SECOND", "MINUTE", "HOUR", "DAY", "WEEK", "MONTH", "YEAR")))