You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
84 lines
2.2 KiB
84 lines
2.2 KiB
local content_length=tonumber(ngx.req.get_headers()['content-length']) |
|
local method=ngx.req.get_method() |
|
if whiteip() then |
|
elseif blockip() then |
|
elseif denycc() then |
|
elseif ngx.var.http_Acunetix_Aspect then |
|
ngx.exit(444) |
|
elseif ngx.var.http_X_Scan_Memo then |
|
ngx.exit(444) |
|
elseif whiteurl() then |
|
elseif ua() then |
|
elseif url() then |
|
elseif args() then |
|
elseif cookie() then |
|
elseif PostCheck then |
|
if method=="POST" then |
|
local boundary = get_boundary() |
|
if boundary then |
|
local len = string.len |
|
local sock, err = ngx.req.socket() |
|
if not sock then |
|
return |
|
end |
|
ngx.req.init_body(128 * 1024) |
|
sock:settimeout(0) |
|
local content_length = nil |
|
content_length=tonumber(ngx.req.get_headers()['content-length']) |
|
local chunk_size = 4096 |
|
if content_length < chunk_size then |
|
chunk_size = content_length |
|
end |
|
local size = 0 |
|
while size < content_length do |
|
local data, err, partial = sock:receive(chunk_size) |
|
data = data or partial |
|
if not data then |
|
return |
|
end |
|
ngx.req.append_body(data) |
|
if body(data) then |
|
return true |
|
end |
|
size = size + len(data) |
|
local m = ngx.re.match(data,'Content-Disposition: form-data;(.+)filename="(.+)\\.(.*)"','ijo') |
|
if m then |
|
fileExtCheck(m[3]) |
|
filetranslate = true |
|
else |
|
if ngx.re.find(data,"Content-Disposition:",'isjo') then |
|
filetranslate = false |
|
end |
|
if filetranslate==false then |
|
if body(data) then |
|
return true |
|
end |
|
end |
|
end |
|
local less = content_length - size |
|
if less < chunk_size then |
|
chunk_size = less |
|
end |
|
end |
|
ngx.req.finish_body() |
|
else |
|
ngx.req.read_body() |
|
local args = ngx.req.get_post_args() |
|
if not args then |
|
return |
|
end |
|
for key, val in pairs(args) do |
|
if type(val) == "table" or val == false then |
|
data=table.concat(val, ", ") |
|
else |
|
data=val |
|
end |
|
if data and type(data) ~= "boolean" and body(data) then |
|
return true |
|
end |
|
end |
|
end |
|
end |
|
else |
|
return |
|
end
|
|
|