diff --git a/backend/routes/bans.js b/backend/routes/bans.js
index 7f3875f..c02a770 100644
--- a/backend/routes/bans.js
+++ b/backend/routes/bans.js
@@ -4,6 +4,12 @@ const { authenticate, requireRole } = require('../middleware/auth');
 
 const router = express.Router();
 
+function parseDuration(d) {
+  if (!d) return 0;
+  const m = String(d).match(/(\d+)/);
+  return m ? parseInt(m[1]) : 0;
+}
+
 router.get('/', authenticate, async (req, res) => {
   const rows = await query('SELECT * FROM bans ORDER BY created_at DESC LIMIT 200');
   res.json(rows);
@@ -16,6 +22,14 @@ router.get('/active', authenticate, async (req, res) => {
 router.post('/', authenticate, requireRole('owner'), async (req, res) => {
   const { player_name, player_uid, reason, type, duration, ticket_id, expires_at } = req.body;
   if (!player_name) return res.status(400).json({ error: '玩家名为必填' });
+
+  const durDays = parseDuration(duration);
+  const prev = await getRow('SELECT * FROM bans WHERE (player_name = ? OR player_uid = ?) AND type = ? AND status = ? ORDER BY created_at DESC LIMIT 1',
+    [player_name, player_uid||'', type||'ban', 'active']);
+  if (prev && durDays > 0 && parseDuration(prev.duration) >= durDays) {
+    return res.status(400).json({ error: `该玩家已有${parseDuration(prev.duration)}天处罚记录，新处罚时长不可低于上次（需 > ${parseDuration(prev.duration)}天）` });
+  }
+
   const r = await query('INSERT INTO bans(player_name, player_uid, reason, type, duration, ticket_id, created_by, expires_at) VALUES (?,?,?,?,?,?,?,?)',
     [player_name, player_uid||'', reason||'', type||'ban', duration||'', ticket_id||null, req.user.id, expires_at||null]);
   if (ticket_id) {