网站简单的防止CC攻击(5秒盾)PHP通用

利用检测 cookie 是否为正常的值,来判断是否为正常用户访问..PHP写的所以如果攻击的人代理很多的话,效果还是不大的!所以!做人要低调!

建立个cc.php
代码:

<?php

define(‘SYSTEM_ROOT’, dirname(preg_replace(‘@\\(.*\\(.*$@’, ”, preg_replace(‘@\\(.*\\(.*$@’, ”, __FILE__))) . ‘/’);

session_start();

date_default_timezone_set(‘Asia/Shanghai’);

header(‘Content-Type: text/html; charset=UTF-8’);

function getspider($useragent=”){

if(CC_Defender==2)return false;

if(!$useragent){$useragent = $_SERVER[‘HTTP_USER_AGENT’];}

$useragent=strtolower($useragent);

if (strpos($useragent, ‘baiduspider’) !== false){return ‘baiduspider’;}

if (strpos($useragent, ‘googlebot’) !== false){return ‘googlebot’;}

if (strpos($useragent, ‘soso’) !== false){return ‘soso’;}

if (strpos($useragent, ‘bing’) !== false){return ‘bing’;}

if (strpos($useragent, ‘yahoo’) !== false){return ‘yahoo’;}

if (strpos($useragent, ‘sohu-search’) !== false){return ‘Sohubot’;}

if (strpos($useragent, ‘sogou’) !== false){return ‘sogou’;}

if (strpos($useragent, ‘youdaobot’) !== false){return ‘YoudaoBot’;}

if (strpos($useragent, ‘yodaobot’) !== false){return ‘YodaoBot’;}

if (strpos($useragent, ‘robozilla’) !== false){return ‘Robozilla’;}

if (strpos($useragent, ‘msnbot’) !== false){return ‘msnbot’;}

if (strpos($useragent, ‘lycos’) !== false){return ‘Lycos’;}

if (strpos($useragent, ‘ia_archiver’) !== false || strpos($useragent, ‘iaarchiver’) !== false){return ‘alexa’;}

if (strpos($useragent, ‘archive.org_bot’) !== false){return ‘Archive’;}

if (strpos($useragent, ‘robozilla’) !== false){return ‘Robozilla’;}

if (strpos($useragent, ‘sitebot’) !== false){return ‘SiteBot’;}

if (strpos($useragent, ‘mj12bot’) !== false){return ‘MJ12bot’;}

if (strpos($useragent, ‘gosospider’) !== false){return ‘gosospider’;}

if (strpos($useragent, ‘gigabot’) !== false){return ‘Gigabot’;}

if (strpos($useragent, ‘yrspider’) !== false){return ‘YRSpider’;}

if (strpos($useragent, ‘gigabot’) !== false){return ‘Gigabot’;}

if (strpos($useragent, ‘jikespider’) !== false){return ‘jikespider’;}

if (strpos($useragent, ‘addsugarspiderbot’) !== false){return ‘AddSugarSpiderBot’;/*非常少*/}

if (strpos($useragent, ‘testspider’) !== false){return ‘TestSpider’;}

if (strpos($useragent, ‘etaospider’) !== false){return ‘EtaoSpider’;}

if (strpos($useragent, ‘wangidspider’) !== false){return ‘WangIDSpider’;}

if (strpos($useragent, ‘foxspider’) !== false){return ‘FoxSpider’;}

if (strpos($useragent, ‘docomo’) !== false){return ‘DoCoMo’;}

if (strpos($useragent, ‘yandexbot’) !== false){return ‘YandexBot’;}

if (strpos($useragent, ‘ezooms’) !== false){return ‘Ezooms’;/*个人*/}

if (strpos($useragent, ‘sinaweibobot’) !== false){return ‘SinaWeiboBot’;}

if (strpos($useragent, ‘catchbot’) !== false){return ‘CatchBot’;}

if (strpos($useragent, ‘surveybot’) !== false){return ‘SurveyBot’;}

if (strpos($useragent, ‘dotbot’) !== false){return ‘DotBot’;}

if (strpos($useragent, ‘purebot’) !== false){return ‘Purebot’;}

if (strpos($useragent, ‘ccbot’) !== false){return ‘CCBot’;}

if (strpos($useragent, ‘mlbot’) !== false){return ‘MLBot’;}

if (strpos($useragent, ‘adsbot-google’) !== false){return ‘AdsBot-Google’;}

if (strpos($useragent, ‘ahrefsbot’) !== false){return ‘AhrefsBot’;}

if (strpos($useragent, ‘spbot’) !== false){return ‘spbot’;}

if (strpos($useragent, ‘augustbot’) !== false){return ‘AugustBot’;}

return false;

}

if($_GET[‘rand’] && $_SESSION[‘rand_session’]!=$_GET[‘rand’]){

@header(‘Content-Type: text/html; charset=UTF-8’);

exit(‘<b>浏览器不支持 COOKIE 或者不正常访问！</b>’);

}

if(!$_SESSION[‘rand_session’] && $nosecu!=true){

if(!getspider()){

$rand_session=md5(uniqid().rand(1,1000));

$_SESSION[‘rand_session’]=$rand_session;

exit(“<!DOCTYPE HTML>

<html>

<head>

<meta charset=\”UTF-8\”/>

<meta name=\”viewport\” content=\”width=device-width, initial-scale=1, maximum-scale=1\” />

<title>安全检查中…</title>

<script> var i = 5;

var intervalid;

intervalid = setInterval(\”fun()\”, 1000);

function fun() {

if (i == 0) {

window.location.href = \”?{$_SERVER[‘QUERY_STRING’]}&rand={$rand_session}\”;

clearInterval(intervalid);

}

document.getElementById(\”mes\”).innerHTML = i;

i–;

}

</script>

<style>

html, body {width: 100%; height: 100%; margin: 0; padding: 0;}

body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}

h1 {font-size: 1.5em; color: #404040; text-align: center;}

p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}

#spinner {margin: 0 auto 30px auto; display: block;}

.attribution {margin-top: 20px;}

</style>

</head>

<body>

<table width=\”100%\” height=\”100%\” cellpadding=\”20\”>

<tr>

<td align=\”center\” valign=\”middle\”>

<noscript><h2>请打开浏览器的 javascript，然后刷新浏览器</h2></noscript>

<h1><span data-translate=\”checking_browser\”>浏览器安全检查中…</span></h1>

<p data-translate=\”process_is_automatic\”></p>

<p data-translate=\”allow_5_secs\”>还剩 <span id=\”mes\”>5</span> 秒</p>

</div>

</div>

</td>

</tr>

</table></body></html>”);

}

}

调用:
网站调用，拿wordpress来举例，主题/header.php 第一行添加代码：

<?php get_template_part( ‘template/cc’ ); ?>

首次访问网站检测浏览器 cookie 通过才能正常的访问你的网站，搜索引擎蜘蛛已经过滤，不影响收录，还有未加上的可以自己补充。平时没攻击的时候建议不要开启，影响网站体验，配合 Nginx lua waf 简单防御 CC 攻击效果更佳。

内容出处：，

声明：本网站所收集的部分公开资料来源于互联网，转载的目的在于传递更多信息及用于网络分享，并不代表本站赞同其观点和对其真实性负责，也不构成任何其他建议。如果您发现网站上有侵犯您的知识产权的作品，请与我们取得联系，我们会及时修改或删除。文章链接：http://www.yixao.com/procedure/30552.html

网站简单的防止CC攻击(5秒盾)PHP通用

相关推荐

发表评论