// Security & Machine Banning Center Page Component window.SecurityPage = function SecurityPage({ user, showToast }) { const [activeTab, setActiveTab] = React.useState('ips'); const [bannedIps, setBannedIps] = React.useState([]); const [bannedHwids, setBannedHwids] = React.useState([]); const [securityStats, setSecurityStats] = React.useState(null); const [securityLogs, setSecurityLogs] = React.useState([]); // Forms const [newIp, setNewIp] = React.useState(''); const [newIpReason, setNewIpReason] = React.useState(''); const [newHwid, setNewHwid] = React.useState(''); const [newHwidReason, setNewHwidReason] = React.useState(''); const fetchSecurityData = async () => { try { const [resBans, resStats, resLogs] = await Promise.all([ fetch('/api/security/bans', { headers: { 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` } }), fetch('/api/security/overview', { headers: { 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` } }), fetch('/api/security/logs', { headers: { 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` } }) ]); const dataBans = await resBans.json(); const dataStats = await resStats.json(); const dataLogs = await resLogs.json(); if (dataBans.success) { setBannedIps(dataBans.banned_ips || []); setBannedHwids(dataBans.banned_hwids || []); } if (dataStats.success) { setSecurityStats(dataStats.stats); } if (dataLogs.success) { const filtered = (dataLogs.logs || []).filter(l => l.action && (l.action.includes('SECURITY') || l.action.includes('FAIL') || l.action.includes('BLOCK') || l.action.includes('BAN')) ); setSecurityLogs(filtered); } } catch (err) { console.error('Security fetch error:', err); } }; React.useEffect(() => { fetchSecurityData(); }, []); const handleBanIp = async (e) => { e.preventDefault(); if (!newIp.trim()) return; try { const res = await fetch('/api/security/ban-ip', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` }, body: JSON.stringify({ ip: newIp.trim(), reason: newIpReason }) }); const data = await res.json(); if (data.success) { showToast(data.message, 'success'); setNewIp(''); setNewIpReason(''); fetchSecurityData(); } else { showToast(data.message, 'error'); } } catch (err) { showToast('Error banning IP', 'error'); } }; const handleUnbanIp = async (ip) => { if (!confirm(`ปลดแบน IP address '${ip}'?`)) return; try { const res = await fetch('/api/security/unban-ip', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` }, body: JSON.stringify({ ip }) }); const data = await res.json(); if (data.success) { showToast(data.message, 'success'); fetchSecurityData(); } else { showToast(data.message, 'error'); } } catch (err) { showToast('Error unbanning IP', 'error'); } }; const handleBanHwid = async (e) => { e.preventDefault(); if (!newHwid.trim()) return; try { const res = await fetch('/api/security/ban-hwid', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` }, body: JSON.stringify({ hwid: newHwid.trim(), reason: newHwidReason }) }); const data = await res.json(); if (data.success) { showToast(data.message, 'success'); setNewHwid(''); setNewHwidReason(''); fetchSecurityData(); } else { showToast(data.message, 'error'); } } catch (err) { showToast('Error banning HWID', 'error'); } }; const handleUnbanHwid = async (hwid) => { if (!confirm(`ปลดแบน Machine HWID '${hwid}'?`)) return; try { const res = await fetch('/api/security/unban-hwid', { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${localStorage.getItem('icex_token')}` }, body: JSON.stringify({ hwid }) }); const data = await res.json(); if (data.success) { showToast(data.message, 'success'); fetchSecurityData(); } else { showToast(data.message, 'error'); } } catch (err) { showToast('Error unbanning HWID', 'error'); } }; const handleDownloadBackup = () => { window.open('/api/security/backup', '_blank'); showToast('กำลังดาวน์โหลด Backup ฐานข้อมูล...', 'info'); }; return (
{/* Header */}

ศูนย์ความปลอดภัย & จัดการแบนเครื่อง (Security Center)

แบน IP เครื่อง, แบน Hardware ID, ระบบป้องกันการดักฟัง (HMAC-SHA256) และสำรองฐานข้อมูล

{/* Defense Status Cards */}
BANNED IPS
{bannedIps.length}
BANNED HWIDS
{bannedHwids.length}
BLOCKED ATTACKS
{securityStats?.blocked_attempts || 0}
RATE LIMITER
10 Tries / 15m
{/* Tabs */}
{/* TAB 1: BANNED IPS */} {activeTab === 'ips' && (
setNewIp(e.target.value)} placeholder="เช่น 192.168.1.50 หรือ 1.2.3.4" className="w-full px-3.5 py-2.5 rounded-none bg-[#080C14] border border-[#1E2D4A] text-sm text-white focus:border-purple-500 outline-none font-mono" />
setNewIpReason(e.target.value)} placeholder="เช่น พยายามเดารหัสผ่าน, ยิงสแปม" className="w-full px-3.5 py-2.5 rounded-none bg-[#080C14] border border-[#1E2D4A] text-sm text-white focus:border-purple-500 outline-none" />
{bannedIps && bannedIps.length > 0 ? ( bannedIps.map((b, idx) => { const ipStr = typeof b === 'string' ? b : b.ip; const reason = typeof b === 'object' ? b.reason : 'Manual Ban'; const date = typeof b === 'object' && b.banned_at ? new Date(b.banned_at).toLocaleString() : '-'; const by = typeof b === 'object' ? b.banned_by : 'admin'; return ( ); }) ) : ( )}
BANNED IP เหตุผล วันที่แบน ผู้สั่งแบน จัดการ
{ipStr} {reason} {date} {by}
ไม่มี IP ที่ถูกแบนในระบบ
)} {/* TAB 2: BANNED HWIDS */} {activeTab === 'hwids' && (
setNewHwid(e.target.value)} placeholder="เช่น PC-HWID-XXXX หรือ Hardware SHA256" className="w-full px-3.5 py-2.5 rounded-none bg-[#080C14] border border-[#1E2D4A] text-sm text-white focus:border-purple-500 outline-none font-mono" />
setNewHwidReason(e.target.value)} placeholder="เช่น แชร์คีย์, ดักแกะโปรแกรม" className="w-full px-3.5 py-2.5 rounded-none bg-[#080C14] border border-[#1E2D4A] text-sm text-white focus:border-purple-500 outline-none" />
{bannedHwids && bannedHwids.length > 0 ? ( bannedHwids.map((b, idx) => { const hwidStr = typeof b === 'string' ? b : b.hwid; const reason = typeof b === 'object' ? b.reason : 'Machine Ban'; const date = typeof b === 'object' && b.banned_at ? new Date(b.banned_at).toLocaleString() : '-'; const by = typeof b === 'object' ? b.banned_by : 'admin'; return ( ); }) ) : ( )}
MACHINE HWID เหตุผล วันที่แบน ผู้สั่งแบน จัดการ
{hwidStr} {reason} {date} {by}
ไม่มี Machine HWID ที่ถูกแบนในระบบ
)} {/* TAB 3: AUDIT LOGS */} {activeTab === 'audit' && (
{securityLogs && securityLogs.length > 0 ? ( securityLogs.map((log) => ( )) ) : ( )}
TIMESTAMP ACTION TARGET DETAILS SOURCE IP
{new Date(log.timestamp).toLocaleString()} {log.action} {log.username} {log.details} {log.ip}
ไม่พบประวัติดักจับการโจมตี
)}
); };