I am currently making a simple IP banning script and I am at the stage of inserting the IP address into the database. The HTML form I created for this consists of two fields; the IP address and a reason:
<td width="70%"><h4>Ban New IP:</h4>(Enter IP to be banned)</td>
<td width="30%">
<form method="post" action="">
IP Address: <input type="text" id="ip" name="ip" autocomplete="off" maxlength="15" /><br /><br />
Enter Reason: <input type="text" id="reason" name="reason" autocomplete="off" maxlength="255" /><br /><br />
<input type="submit" id="submit" name="submit" value="Ban IP" /><br /><br />
My database contains one table titled banned_ips and three columns id, ip and reason. The insert statement I have created works perfectly however I want to check to see if the IP already exists. At the moment it will just insert the IP even if there is one matching it. This is my current query:
<?php
if ($_POST) {
if ($_POST['ip'] != '') {
if (strlen($_POST['ip']) <= 15) {
$ip = $_POST['ip'];
$ip_clean = htmlentities($ip);
if (isset($ip_clean)) {
// SQL insert
$insert_ip = $db->prepare("INSERT INTO `banned_ips` (ip) VALUES (?)");
$insert_ip->bind_param('s', $ip_clean);
if ($insert_ip->execute()) {
// Successful insert
$_SESSION['successful_insert'] = 'Success';
}
}
}
}
}
?>
What I would like to do is check to see if the IP address already exists when they go to insert a new IP. I have looked at other questions asked here on stackoverflow and a lot of the time I saw WHERE NOT EXISTS however none that I found showed any examples with prepared statements.
