Skip to content
Toggle navigation
P
Projects
G
Groups
S
Snippets
Help
CnChunfeng
/
ichunt_lua_waf
This project
Loading...
Sign in
Toggle navigation
Go to a project
Project
Repository
Issues
0
Merge Requests
0
Pipelines
Wiki
Snippets
Settings
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Commit
a1e6aa7b
authored
Oct 19, 2020
by
Joneq
Browse files
Options
_('Browse Files')
Download
Email Patches
Plain Diff
修改代码
parent
d228e7b8
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
4 additions
and
2 deletions
waf.lua
waf.lua
View file @
a1e6aa7b
...
@@ -85,17 +85,19 @@ u_agent = ngx.req.get_headers().user_agent
...
@@ -85,17 +85,19 @@ u_agent = ngx.req.get_headers().user_agent
-- 白名单存在直接跳过
-- 白名单存在直接跳过
if
wafcheck
.
WhiteIp
(
user_ip
)
==
'exist'
or
wafcheck
.
WhiteUrl
(
temp_uri
)
==
'exist'
or
wafcheck
.
WhiteHeader
(
u
ser_ip
)
==
'exist'
then
if
wafcheck
.
WhiteIp
(
user_ip
)
==
'exist'
or
wafcheck
.
WhiteUrl
(
temp_uri
)
==
'exist'
or
wafcheck
.
WhiteHeader
(
u
_agent
)
==
'exist'
then
return
return
end
end
ngx
.
say
(
wafcheck
.
BlackIp
(
user_ip
))
ngx
.
say
(
wafcheck
.
BlackIp
(
user_ip
))
red
:
close
()
ngx
.
exit
(
ngx
.
HTTP_FORBIDDEN
)
ngx
.
exit
(
ngx
.
HTTP_FORBIDDEN
)
ngx
.
say
(
1
)
ngx
.
say
(
1
)
-- 黑名单存在直接302
-- 黑名单存在直接302
if
wafcheck
.
BlackIp
(
user_ip
)
==
'exist'
or
wafcheck
.
BlackUrl
(
temp_uri
)
==
'exist'
or
wafcheck
.
BlackHeader
(
u
ser_ip
)
==
'exist'
then
if
wafcheck
.
BlackIp
(
user_ip
)
==
'exist'
or
wafcheck
.
BlackUrl
(
temp_uri
)
==
'exist'
or
wafcheck
.
BlackHeader
(
u
_agent
)
==
'exist'
then
ngx
.
say
(
wafcheck
.
BlackIp
(
user_ip
))
ngx
.
say
(
wafcheck
.
BlackIp
(
user_ip
))
ngx
.
exit
(
ngx
.
HTTP_FORBIDDEN
)
ngx
.
exit
(
ngx
.
HTTP_FORBIDDEN
)
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment