mirror of
https://github.com/ProxyPanel/ProxyPanel.git
synced 2026-04-07 04:59:36 +00:00
ce9618236f
1. 全面改写项目-管理面板的路由； 2. 拆分过于Contoller； 3. 优化了按钮过多的图表的显示； 4. 初步应用 Laravel的 表单验证功能； 5. 初步应用 Laravel的 component 功能 拆分/模块化前端代码； 6. 优化部分系统的判断逻辑； 7. 针对2.4.0以前的面板，追加辅助矫正数据库的sql文件；
68 lines
2.3 KiB
PHP
68 lines
2.3 KiB
PHP
<?php
|
||
|
||
namespace App\Http\Middleware;
|
||
|
||
use Agent;
|
||
use App\Components\IP;
|
||
use Closure;
|
||
use Illuminate\Http\Request;
|
||
use Log;
|
||
use Response;
|
||
|
||
class isForbidden
|
||
{
|
||
|
||
/**
|
||
* 限制机器人、指定IP访问
|
||
*
|
||
* @param Request $request
|
||
* @param Closure $next
|
||
*
|
||
* @return mixed
|
||
*/
|
||
public function handle(Request $request, Closure $next)
|
||
{
|
||
// 拒绝机器人访问
|
||
if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
|
||
Log::info("识别到机器人访问(".IP::getClientIp().")");
|
||
|
||
return Response::view('auth.error', ['message' => trans('error.ForbiddenRobot')], 403);
|
||
}
|
||
|
||
// 拒绝通过订阅链接域名访问网站，防止网站被探测
|
||
if (false !== strpos(sysConfig('subscribe_domain'), $request->getHost())
|
||
&& !str_contains(sysConfig('subscribe_domain'), sysConfig('website_url'))) {
|
||
Log::info("识别到通过订阅链接访问，强制跳转至百度(".IP::getClientIp().")");
|
||
|
||
return redirect('https://www.baidu.com');
|
||
}
|
||
|
||
$ip = IP::getClientIP();
|
||
$ipLocation = IP::getIPInfo($ip);
|
||
|
||
// 拒绝无IP请求
|
||
if (!$ipLocation || empty(array_filter($ipLocation))) {
|
||
return Response::view('auth.error', ['message' => trans('error.ForbiddenAccess')], 403);
|
||
}
|
||
|
||
if (!in_array($ipLocation['country'], ['本机地址', '局域网'])) {
|
||
// 拒绝大陆IP访问
|
||
if (sysConfig('is_forbid_china') && in_array($ipLocation['country'], ['China', '中国'])
|
||
&& !in_array($ipLocation['province'], ['香港', '澳门', '台湾', '台湾省'])) {
|
||
Log::info('识别到大陆IP，拒绝访问：'.$ip);
|
||
|
||
return Response::view('auth.error', ['message' => trans('error.ForbiddenChina')], 403);
|
||
}
|
||
|
||
// 拒绝非大陆IP访问
|
||
if (sysConfig('is_forbid_oversea') && !in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
|
||
Log::info('识别到海外IP，拒绝访问：'.$ip.' - '.$ipLocation['country']);
|
||
|
||
return Response::view('auth.error', ['message' => trans('error.ForbiddenOversea')], 403);
|
||
}
|
||
}
|
||
|
||
return $next($request);
|
||
}
|
||
}
|