PHP 프로그램이 ddos, dns, 집단 서버 공격을 방지하는 해결 방법을 간단히 분석하다.

잔말 말고 코드를 붙여라

 
  
 
  //    IP
$ip =$_SERVER['REMOTE_ADDR']; 
  
$fileht=".htaccess2"; 
  
if(!file_exists($fileht)) 
  
 file_put_contents($fileht,""); 
  
$filehtarr=@file($fileht); 
  
if(in_array($ip."\r
",$filehtarr)) 
  
 die("Warning:"."
"."Your IP address are forbided by some reason, IF you have any question Pls emill to [email protected]!"); 
  
 
  //    IP
$time=time(); 
  
$fileforbid="log/forbidchk.dat"; 
  
if(file_exists($fileforbid)) { 
  
 if($time-filemtime($fileforbid)>60) 
  
  unlink($fileforbid); 
  
 else { 
  
  $fileforbidarr=@file($fileforbid); 
  
  if($ip==substr($fileforbidarr[0],0,strlen($ip))) { 
  
   if($time-substr($fileforbidarr[1],0,strlen($time))>600) 
  
    unlink($fileforbid); 
  
   elseif($fileforbidarr[2]>600) { 
  
    file_put_contents($fileht,$ip."\r
",FILE_APPEND); 
  
    unlink($fileforbid); 
  
   } else { 
  
    $fileforbidarr[2]++; 
  
    file_put_contents($fileforbid,$fileforbidarr); 
  
   } 
  
  } 
  
 } 
  
} 
  
 
  //   
$str=""; 
  
$file="log/ipdate.dat"; 
  
if(!file_exists("log")&&!is_dir("log")) 
  
 mkdir("log",0777); 
  
if(!file_exists($file)) 
  
 file_put_contents($file,""); 
  
$allowTime = 120;//      
  
$allowNum=10;//      
  
$uri=$_SERVER['REQUEST_URI']; 
  
$checkip=md5($ip); 
  
$checkuri=md5($uri); 
  
$yesno=true; 
  
$ipdate=@file($file); 
  
foreach($ipdate as $k=>$v) { 
  
 $iptem=substr($v,0,32); 
  
 $uritem=substr($v,32,32); 
  
 $timetem=substr($v,64,10); 
  
 $numtem=substr($v,74); 
  
 if($time-$timetem  if($iptem!=$checkip) 
  
   $str.=$v; 
  
  else { 
  
   $yesno=false; 
  
   if($uritem!=$checkuri) 
  
    $str.=$iptem.$checkuri.$time."1\r
"; 
  
   elseif($numtem    $str.=$iptem.$uritem.$timetem.($numtem+1)."\r
"; 
  
   else { 
  
    if(!file_exists($fileforbid)) { 
  
     $addforbidarr=array($ip."\r
",time()."\r
",1); 
  
     file_put_contents($fileforbid,$addforbidarr); 
  
    } 
  
    file_put_contents("log/forbided_ip.log",$ip."--".date("Y-m-d H:i:s",time())."--".$uri."\r
",FILE_APPEND); 
  
    $timepass=$timetem+$allowTime-$time; 
  
    die("Warning:"."
"."Sorry,you are forbided by refreshing frequently too much, Pls wait for ".$timepass." seconds to continue!"); 
  
   } 
  
  } 
  
 } 
  
} 
  
if($yesno) $str.=$checkip.$checkuri.$time."1\r
"; 
  
file_put_contents($file,$str); 
  
?>