捕捉攻击者

最新推荐文章于 2024-10-18 00:00:00 发布

weixin_30633405

最新推荐文章于 2024-10-18 00:00:00 发布

阅读量77

点赞数

文章标签： python 数据库

原文链接：http://www.cnblogs.com/tuifeideyouran/p/4211230.html

版权

pip install django-admin-honeypot

Add admin_honeypot to INSTALLED_APPS

url(r'^admin/', include('admin_honeypot.urls', namespace='admin_honeypot')),
url(r'^secret/', include(admin.site.urls)),

生成数据库.捕捉攻击者

如果有使用代理的系统会记录127.0.0.1可通过设置中间件来实现

Why is the IP address logged as 127.0.0.1?

Django-admin-honeypot pulls the users IP address from the REMOTE_ADDR request header. If your Django app is behind a load balancer or proxy web server, this may not be set and instead you will instead have an HTTP_X_FORWARDED_FOR header which contains the IP address in a comma-separated string.

The simple solution is to use a middleware to automatically set REMOTE_ADDR to the value ofHTTP_X_FORWARDED_FOR, like so:

class RemoteAddrMiddleware(object):
    def process_request(self, request):
        if 'HTTP_X_FORWARDED_FOR' in request.META:
            ip = request.META['HTTP_X_FORWARDED_FOR'].split(',')[0].strip()
            request.META['REMOTE_ADDR'] = ip

转载于:https://www.cnblogs.com/tuifeideyouran/p/4211230.html