这是个类似Cloudflare的防cc功能，利用的是五秒盾的原理，经过检测得到cookie的浏览器才能正常的访问你的网站了，当然了，面对数以万计的肉鸡，这代码还是无能为力的，所以说做人就要低调，别到处装逼，到时候被打了惨的还是自己，下面分享给需要的同学。
这是个类似 Cloudflare 的防 cc功能，利用的是五秒盾的原理，经过检测得到 cookie 的浏览器才能正常的访问你的网站了，当然了，面对数以万计的肉鸡，这代码还是无能为力的，所以说做人就要低调，别到处装逼，到时候被打了惨的还是自己，下面分享给需要的同学。
更多的关于网站安全和优化，这里有：
1、 Nginx lua waf 简单防御 CC 攻击
2、Cloudflare 自动脚本提交攻击(恶意)IP 到防火墙[修改版]
3、Nginx 使用 CDN(CloudFlare)获取网站日志真实 IP 地址
首先建个 cc.php 文件代码如下：
<?php
define('SYSTEM_ROOT',dirname(preg_replace('@\(.*\(.*[email protected]','',preg_replace('@\(.*\(.*[email protected]',__FILE__))) . '/');
session_start();
date_default_timezone_set('Asia/Shanghai');
header('Content-Type: text/html; charset=UTF-8');
function getspider($useragent=''){
if(CC_Defender==2)return false;
if(!$useragent){$useragent = $_SERVER['HTTP_USER_AGENT'];}
$useragent=strtolower($useragent);
if (strpos($useragent,'baiduspider') !== false){return 'baiduspider';}
if (strpos($useragent,'googlebot') !== false){return 'googlebot';}
if (strpos($useragent,'soso') !== false){return 'soso';}
if (strpos($useragent,'bing') !== false){return 'bing';}
if (strpos($useragent,'yahoo') !== false){return 'yahoo';}
if (strpos($useragent,'sohu-search') !== false){return 'Sohubot';}
if (strpos($useragent,'sogou') !== false){return 'sogou';}
if (strpos($useragent,'youdaobot') !== false){return 'YoudaoBot';}
if (strpos($useragent,'yodaobot') !== false){return 'YodaoBot';}
if (strpos($useragent,'robozilla') !== false){return 'Robozilla';}
if (strpos($useragent,'msnbot') !== false){return 'msnbot';}
if (strpos($useragent,'lycos') !== false){return 'Lycos';}
if (strpos($useragent,'ia_archiver') !== false || strpos($useragent,'iaarchiver') !== false){return 'alexa';}
if (strpos($useragent,'archive.org_bot') !== false){return 'Archive';}
if (strpos($useragent,'sitebot') !== false){return 'SiteBot';}
if (strpos($useragent,'mj12bot') !== false){return 'MJ12bot';}
if (strpos($useragent,'gosospider') !== false){return 'gosospider';}
if (strpos($useragent,'gigabot') !== false){return 'Gigabot';}
if (strpos($useragent,'yrspider') !== false){return 'YRSpider';}
if (strpos($useragent,'jikespider') !== false){return 'jikespider';}
if (strpos($useragent,'addsugarspiderbot') !== false){return 'AddSugarSpiderBot';/*非常少*/}
if (strpos($useragent,'testspider') !== false){return 'TestSpider';}
if (strpos($useragent,'etaospider') !== false){return 'EtaoSpider';}
if (strpos($useragent,'wangidspider') !== false){return 'WangIDSpider';}
if (strpos($useragent,'foxspider') !== false){return 'FoxSpider';}
if (strpos($useragent,'docomo') !== false){return 'DoCoMo';}
if (strpos($useragent,'yandexbot') !== false){return 'YandexBot';}
if (strpos($useragent,'ezooms') !== false){return 'Ezooms';/*个人*/}
if (strpos($useragent,'sinaweibobot') !== false){return 'SinaWeiboBot';}
if (strpos($useragent,'catchbot') !== false){return 'CatchBot';}
if (strpos($useragent,'surveybot') !== false){return 'SurveyBot';}
if (strpos($useragent,'dotbot') !== false){return 'DotBot';}
if (strpos($useragent,'purebot') !== false){return 'Purebot';}
if (strpos($useragent,'ccbot') !== false){return 'CCBot';}
if (strpos($useragent,'mlbot') !== false){return 'MLBot';}
if (strpos($useragent,'adsbot-google') !== false){return 'AdsBot-Google';}
if (strpos($useragent,'ahrefsbot') !== false){return 'AhrefsBot';}
if (strpos($useragent,'spbot') !== false){return 'spbot';}
if (strpos($useragent,'augustbot') !== false){return 'AugustBot';}
return false;
}
if($_GET['rand'] && $_SESSION['rand_session']!=$_GET['rand']){
@header('Content-Type: text/html; charset=UTF-8');
exit('<b>浏览器不支持 COOKIE 或者不正常访问！</b>');
}
if(!$_SESSION['rand_session'] && $nosecu!=true){
if(!getspider()){
$rand_session=md5(uniqid().rand(1,1000));
$_SESSION['rand_session']=$rand_session;
exit("<!DOCTYPE HTML>
<html>
<head>
<meta charset="UTF-8"/>
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />
<title>安全检查中...</title>
<script> var i = 5;
var intervalid;
intervalid = setInterval("fun()",1000);
function fun() {
if (i == 0) {
window.location.href = "?{$_SERVER['QUERY_STRING']}&rand={$rand_session}";
clearInterval(intervalid);
}
document.getElementById("mes").innerHTML = i;
i--;
}
</script>
<style>
html,body {width: 100%; height: 100%; margin: 0; padding: 0;}
body {background-color: #ffffff; font-family: Helvetica,Arial,sans-serif; font-size: 100%;}
h1 {font-size: 1.5em; color: #404040; text-align: center;}
p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}
#spinner {margin: 0 auto 30px auto; display: block;}
.attribution {margin-top: 20px;}
</style>
</head>
<body>
<table width="100%" height="100%" cellpadding="20">
<tr>
<td align="center" valign="middle">
<noscript><h2>请打开浏览器的 javascript，然后刷新浏览器</h2></noscript>
<h1><span data-translate="checking_browser">浏览器安全检查中...</span></h1>
<p data-translate="process_is_automatic"></p>
<p data-translate="allow_5_secs">还剩 <span id="mes">5</span> 秒</p>
</div>
</div>
</td>
</tr>
</table></body></html>");}}
WordPress 上传到主题/template/cc.php ;
调用代码
PHP 通用调用，在头部或主要文件内文件加入：
<?php include 'cc.php'; ?>
WordPress 调用，主题/header.php 第一行添加代码：
<?php get_template_part( 'template/cc' ); ?>
首次访问网站检测浏览器 cookie 通过才能正常的访问你的网站，搜索引擎蜘蛛已经过滤，不影响收录，还有未加上的可以自己补充。平时没攻击的时候建议不要开启，影响网站体验，配合《Nginx lua waf 简单防御 CC 攻击》效果更佳。
加载中,请稍侯......
网友评论