Update waf.lua

pull/136/head
weakestan 2018-08-07 08:26:01 +08:00 committed by GitHub
parent 8d69117e05
commit cded825051
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions

View File

@ -1,8 +1,12 @@
local content_length=tonumber(ngx.req.get_headers()['content-length']) local content_length=tonumber(ngx.req.get_headers()['content-length'])
local method=ngx.req.get_method() local method=ngx.req.get_method()
--ngx_lua如果是0.9.2以上版本建议正则过滤函数改为ngx.re.find匹配效率会提高三倍左右。
local ngxmatch=ngx.re.match local ngxmatch=ngx.re.match
--local ngxmatch=ngx.re.find
if whiteip() then if whiteip() then
elseif blockip() then elseif blockip() then
--检测攻击ip是否被拦截。
elseif denyhackip(1) then
elseif denycc() then elseif denycc() then
elseif ngx.var.http_Acunetix_Aspect then elseif ngx.var.http_Acunetix_Aspect then
ngx.exit(444) ngx.exit(444)
@ -42,7 +46,7 @@ elseif PostCheck then
return true return true
end end
size = size + len(data) size = size + len(data)
local m = ngxmatch(data,[[Content-Disposition: form-data;(.+)filename="(.+)\\.(.*)"]],'ijo') local m = ngxmatch(data,[[Content-Disposition: form-data;(.+)filename="(.+)\.(.*)"]],'ijo')
if m then if m then
fileExtCheck(m[3]) fileExtCheck(m[3])
filetranslate = true filetranslate = true
@ -82,7 +86,8 @@ elseif PostCheck then
end end
end end
end end
end end
else else
return return
end end