PHP攻击网站防御代码-以及攻击代码反译

51漂泊

1. <?php  
   
2. //查询禁止IP  
   
3. $ip =$_SERVER['REMOTE_ADDR'];  
   
4. $fileht=".htaccess2";  
   
5. if(!file_exists($fileht))file_put_contents($fileht,"");  
   
6. $filehtarr=@file($fileht);  
   
7. if(in_array($ip."\r\n",$filehtarr))die("Warning:"."
   
8. "."Your IP address are forbided by some reason, IF you have any question Pls emill to shop@mydalle.com!");  
   
9. 
   
10. //加入禁止IP  
    
11. $time=time();  
    
12. $fileforbid="log/forbidchk.dat";  
    
13. if(file_exists($fileforbid))  
    
14. { if($time-filemtime($fileforbid)>60)unlink($fileforbid);  
    
15. else{  
    
16. $fileforbidarr=@file($fileforbid);  
    
17. if($ip==substr($fileforbidarr[0],0,strlen($ip)))  
    
18. {  
    
19. if($time-substr($fileforbidarr[1],0,strlen($time))>600)unlink($fileforbid);  
    
20. elseif($fileforbidarr[2]>600){file_put_contents($fileht,$ip."\r\n",FILE_APPEND);unlink($fileforbid);}  
    
21. else{$fileforbidarr[2]++;file_put_contents($fileforbid,$fileforbidarr);}  
    
22. }  
    
23. }  
    
24. }  
    
25. //防刷新  
    
26. $str="";  
    
27. $file="log/ipdate.dat";  
    
28. if(!file_exists("log")&&!is_dir("log"))mkdir("log",0777);  
    
29. if(!file_exists($file))file_put_contents($file,"");  
    
30. $allowTime = 120;//防刷新时间  
    
31. $allowNum=10;//防刷新次数  
    
32. $uri=$_SERVER['REQUEST_URI'];  
    
33. $checkip=md5($ip);  
    
34. $checkuri=md5($uri);  
    
35. $yesno=true;  
    
36. $ipdate=@file($file);  
    
37. foreach($ipdate as $k=>$v)  
    
38. { $iptem=substr($v,0,32);  
    
39. $uritem=substr($v,32,32);  
    
40. $timetem=substr($v,64,10);  
    
41. $numtem=substr($v,74);  
    
42. if($time-$timetem<$allowTime){  
    
43. if($iptem!=$checkip)$str.=$v;  
    
44. else{  
    
45. $yesno=false;  
    
46. if($uritem!=$checkuri)$str.=$iptem.$checkuri.$time."1\r\n";  
    
47. elseif($numtem<$allowNum)$str.=$iptem.$uritem.$timetem.($numtem+1)."\r\n";  
    
48. else  
    
49. {  
    
50. if(!file_exists($fileforbid)){$addforbidarr=array($ip."\r\n",time()."\r\n",1);file_put_contents($fileforbid,$addforbidarr);}  
    
51. file_put_contents("log/forbided_ip.log",$ip."--".date("Y-m-d H:i:s",time())."--".$uri."\r\n",FILE_APPEND);  
    
52. $timepass=$timetem+$allowTime-$time;  
    
53. die("Warning:"."
    
54. "."Sorry,you are forbided by refreshing frequently too much, Pls wait for ".$timepass." seconds to continue!");  
    
55. }  
    
56. }  
    
57. }  
    
58. }  
    
59. if($yesno) $str.=$checkip.$checkuri.$time."1\r\n";  
    
60. file_put_contents($file,$str);  
    
61. ?>

复制代码