opensource/SamWaf
3
0
Fork 0
mirror of https://gitee.com/samwaf/SamWaf.git synced 2026-11-03 03:31:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: captcha cookies +ip bind

Browse Source 
#112
This commit is contained in:
samwaf
2025-03-28 16:04:47 +08:00
parent 7db7343ed0
commit 481da40b1e
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wafenginecore/check_captcha.go
+6 -6
View File
@@ -9,12 +9,12 @@ import (
)
// checkCaptchaToken 返回false 要验证信息 ，true 不验证信息
func (waf *WafEngine) checkCaptchaToken(r *http.Request, log innerbean.WebLog) bool {
func (waf *WafEngine) checkCaptchaToken(r *http.Request, webLog innerbean.WebLog) bool {
// 首先从Cookie中获取验证标识
cookie, err := r.Cookie("samwaf_captcha_token")
if err == nil && cookie.Value != "" {
// 检查缓存中是否存在该标识
if global.GCACHE_WAFCACHE.IsKeyExist(enums.CACHE_CAPTCHA_PASS + cookie.Value) {
if global.GCACHE_WAFCACHE.IsKeyExist(enums.CACHE_CAPTCHA_PASS + cookie.Value + webLog.SRC_IP) {
return true
}
}
@@ -23,16 +23,16 @@ func (waf *WafEngine) checkCaptchaToken(r *http.Request, log innerbean.WebLog) b
token := r.Header.Get("X-SamWaf-Captcha-Token")
if token != "" {
// 检查缓存中是否存在该标识
if global.GCACHE_WAFCACHE.IsKeyExist(enums.CACHE_CAPTCHA_PASS + token) {
if global.GCACHE_WAFCACHE.IsKeyExist(enums.CACHE_CAPTCHA_PASS + token + webLog.SRC_IP) {
return true
}
}
//是bot而且危险程度是0，那么不用进行验证码挑战
if log.IsBot == 1 {
if log.RISK_LEVEL == 0 {
if webLog.IsBot == 1 {
if webLog.RISK_LEVEL == 0 {
return true
} else {
if log.GUEST_IDENTIFICATION == "查询超时" || log.GUEST_IDENTIFICATION == "查询失败" {
if webLog.GUEST_IDENTIFICATION == "查询超时" || webLog.GUEST_IDENTIFICATION == "查询失败" {
return true
}
//伪爬虫是否开启图形验证
wafenginecore/wafcaptcha/service.go
+1 -1
View File
@@ -430,7 +430,7 @@ func (s *CaptchaService) VerifyCaptcha(w http.ResponseWriter, r *http.Request, c
// 生成验证通过的标识
captchaPassToken := uuid.NewV4().String()
// 将标识存入缓存
s.cache.SetWithTTl(enums.CACHE_CAPTCHA_PASS+captchaPassToken, "ok", time.Duration(expireTime)*time.Hour)
s.cache.SetWithTTl(enums.CACHE_CAPTCHA_PASS+captchaPassToken+webLog.SRC_IP, "ok", time.Duration(expireTime)*time.Hour)
// 设置Cookie
cookie := &http.Cookie{