Skip to content
Toggle navigation
P
Projects
G
Groups
S
Snippets
Help
CnChunfeng
/
ichunt_lua_waf
This project
Loading...
Sign in
Toggle navigation
Go to a project
Project
Repository
Issues
0
Merge Requests
0
Pipelines
Wiki
Snippets
Settings
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Commit
5580db3f
authored
Jan 14, 2021
by
Joneq
Browse files
Options
_('Browse Files')
Download
Email Patches
Plain Diff
答应header变量
parent
1a306ac4
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
1 additions
and
4 deletions
redirect.lua
waf.lua
redirect.lua
View file @
5580db3f
...
@@ -13,7 +13,7 @@ function _ReM.checkgoogle(red)
...
@@ -13,7 +13,7 @@ function _ReM.checkgoogle(red)
dest
=
'http://passport.ichunt.com/static/login.html'
..
'?continue='
..
source_url
dest
=
'http://passport.ichunt.com/static/login.html'
..
'?continue='
..
source_url
--新增如果refer不在对应的设置里面,才计算302重定向次数
--新增如果refer不在对应的设置里面,才计算302重定向次数
if
red
:
sismember
(
'waf_urldesc_limit'
,
ngx
.
var
.
request_uri
)
~
=
0
then
if
red
:
sismember
(
'waf_urldesc_limit'
,
ngx
.
req
.
get_headers
()[
'referer'
])
=
=
0
then
--获取多少时间内同一个ip可以几次302,超过就加入黑名单
--获取多少时间内同一个ip可以几次302,超过就加入黑名单
threezerotwo_second
,
err
=
red
:
get
(
'threezerotwo_second'
)
threezerotwo_second
,
err
=
red
:
get
(
'threezerotwo_second'
)
...
...
waf.lua
View file @
5580db3f
...
@@ -39,9 +39,6 @@ red:set_timeout(1000)
...
@@ -39,9 +39,6 @@ red:set_timeout(1000)
local
ok
,
err
=
red
:
connect
(
config
.
redis_host
,
config
.
redis_port
)
local
ok
,
err
=
red
:
connect
(
config
.
redis_host
,
config
.
redis_port
)
ngx
.
say
(
ngx
.
req
.
get_headers
()[
'referer'
],
err
)
ngx
.
exit
(
ngx
.
HTTP_FORBIDDEN
)
-- 如果连接失败,跳转到label处
-- 如果连接失败,跳转到label处
if
not
ok
then
if
not
ok
then
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment