From 1aafcd421238b31f08ea07e6f0dfd26dc2dee4a6 Mon Sep 17 00:00:00 2001
From: DAProgs <info@daprogs.com>
Date: Mon, 16 Mar 2026 02:40:12 -0400
Subject: [PATCH] 2603.1 - bug hunting

---
 blacklist.php | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/blacklist.php b/blacklist.php
index 44ccdfa..7e4e943 100644
--- a/blacklist.php
+++ b/blacklist.php
@@ -101,21 +101,18 @@
 		}
 		$reason = urldecode($_GET["reason"]);
 
-		$SQL ="INSERT INTO blacklist (ip, type, adddate, enddate, reason) VALUES ('".$ip."', ".$type.", ".$dPart.", ".$enddate.", '".$reason."')";
-		
+		$SQL = "INSERT INTO blacklist (ip, type, adddate, enddate, reason) VALUES ('".$ip."', ".$type.", ".$dPart.", ".$enddate.", '".$reason."') ON DUPLICATE KEY UPDATE enddate=".$enddate.", type=".$type.", reason='".$reason."'";
+
 		if ($con->query($SQL) === TRUE) {
 			$SQL = "UPDATE info SET last=".$dPart." WHERE list=0;";
 			$con->query($SQL);
-			echo "SUCCESS";
-		} else {
-			$SQL = "UPDATE blacklist SET enddate=".$enddate.", type=".$type.", reason='".$reason."' WHERE ip='".$ip."';";
-			if ($con->query($SQL) === TRUE) {
-				$SQL = "UPDATE info SET last=".$dPart." WHERE list=0;";
-				$con->query($SQL);
-				echo "SUCCESS UPDATE";				
+			if ($con->affected_rows == 1) {
+				echo "SUCCESS";
 			} else {
-				echo "Error: " . $SQL . "<br>" . $con->error;
+				echo "SUCCESS UPDATE";
 			}
+		} else {
+			echo "Error: " . $SQL . "<br>" . $con->error;
 		}