add protection

action.php

@@ -78,7 +78,7 @@ class action {
     }
 
     public function isBlocked($ip) {
-        $dbAction = $this->db->prepare("SELECT ip FROM list WHERE ip = ? UNION SELECT ip FROM blacklist WHERE ip = ?");
+        $dbAction = $this->db->prepare("SELECT ip FROM (SELECT ip FROM list WHERE ip = ? UNION SELECT ip FROM blacklist WHERE ip = ?)");
         $dbAction->bind_param('ii',$ip,$ip);
         $dbAction->execute();
         $dbAction->store_result();