add protection

action.php

@@ -78,8 +78,8 @@ class action {
     }
 
     public function isBlocked($ip) {
-        $dbAction = $this->db->prepare("SELECT ip FROM list UNION SELECT ip FROM blacklist ORDER BY ip ASC");
-        $dbAction->bind_param('i',$ip);
+        $dbAction = $this->db->prepare("SELECT ip FROM list WHERE ip = ? UNION SELECT ip FROM blacklist WHERE ip = ?");
+        $dbAction->bind_param('ii',$ip,$ip);
         $dbAction->execute();
         $dbAction->store_result();
         if($dbAction->num_rows() == 0) {