Cookie 防御CC攻击 (.htaccess层面实现)

.htaccess层面COOKIE检测代码

# Cookie 防御CC
RewriteCond %{REQUEST_URI} !^/test.html$ [NC]
RewriteCond %{HTTP_COOKIE} !.*88s5_comAllowFromIP.* [NC]
RewriteCond %{HTTP_COOKIE} !.*88s5_comAllowFromAddr.* [NC]
RewriteCond %{HTTP_USER_AGENT} !.*spider.* [NC]
RewriteCond %{HTTP_USER_AGENT} !.*bot.* [NC]
RewriteRule .*$ /Index.html [R=302,L]

其中第一行和最后一行都要改成你自己的提示页面文件名,

第二和第三三需要改成COOKIE和提示文件里生成的COOKIE值一致


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
<title>标题</title>


  <meta name="description" content="关键字" />
<meta name="keywords" content="
关键字" /> 


<SCRIPT LANGUAGE="JavaScript" src="http://www.queyang.com/timeline/statics/jquery-1.5.min.js"></SCRIPT>
 </head>

 <body>
  <div class="panel">

	<div class="panel-content">
	<a href='/'>页面加载中,如未跳转请点击进入</a></span>
	</div>
	<SCRIPT LANGUAGE="JavaScript">
	var phpcms_path = '/';
	var cookie_pre = '88s5_com';
	var cookie_domain = '';
	var cookie_path = '/';

	function setcookie(name, value, days)
	{
		name = cookie_pre+name;
	 var argc = setcookie.arguments.length;
	 var argv = setcookie.arguments;
	 var secure = (argc > 5) ? argv[5] : false;
	 var expire = new Date();
	 if(days==null || days==0) days=1;
	 expire.setTime(expire.getTime() + 3600000*24*days);
	 document.cookie = name + "=" + encodeURIComponent(value) + ("; path=" + cookie_path) + ((cookie_domain == '') ? "" : ("; domain=" + cookie_domain)) + ((secure == true) ? "; secure" : "") + ";expires="+expire.toGMTString();
	}

		$(function () {
			$.getScript("http://counter.sina.com.cn/ip/" , function(){
				setcookie( "AllowFromIP" , ILData[0] );
				setcookie( "AllowFromAddr" , escape(ILData[1]+"-"+ILData[2])  );
			});
		});
		setTimeout( function(){ location.href = "/index.php?" + Math.random(); } , 500 ) ;
	</SCRIPT>
 </body>
</html>



评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值