Files
ProxyPanel/app/Http/Middleware/isForbidden.php

79 lines
3.0 KiB
PHP
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<?php
namespace App\Http\Middleware;
use Agent;
use App\Components\IP;
use Closure;
use Illuminate\Http\Request;
use Log;
use Response;
class isForbidden
{
/**
* 限制机器人、指定IP访问.
*
* @param Request $request
* @param Closure $next
*
* @return mixed
*/
public function handle(Request $request, Closure $next)
{
// 拒绝机器人访问
if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
Log::info('识别到机器人访问('.IP::getClientIp().')');
return Response::view('auth.error', ['message' => trans('error.forbidden.bots')], 403);
}
// 拒绝通过订阅链接域名访问网站,防止网站被探测
if (config('app.env') === 'production' && sysConfig('website_url') && ! str_contains(sysConfig('website_url'), $request->getHost())) {
Log::info('识别到通过订阅链接访问,强制跳转至百度('.IP::getClientIp().')');
return redirect('https://www.baidu.com');
}
$ip = IP::getClientIP();
$ipLocation = IP::getIPInfo($ip);
// 拒绝无IP请求
if (! $ipLocation || empty(array_filter($ipLocation))) {
return Response::view('auth.error', ['message' => trans('error.forbidden.access')], 403);
}
if (! in_array($ipLocation['country'], ['本机地址', '局域网']) && sysConfig('forbid_mode')) {
// 拒绝大陆IP访问
switch (sysConfig('forbid_mode')) {
case 'ban_mainland':
if (in_array($ipLocation['country'], ['China', '中国']) && ! in_array($ipLocation['province'], ['香港', '澳门', '台湾', '台湾省'])) {
Log::info('识别到大陆IP拒绝访问'.$ip);
return Response::view('auth.error', ['message' => trans('error.forbidden.china')], 403);
}
break;
case 'ban_china':
if (in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
Log::info('识别到中国IP拒绝访问'.$ip);
return Response::view('auth.error', ['message' => trans('error.forbidden.china')], 403);
}
break;
case 'ban_oversea':
if (! in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
Log::info('识别到海外IP拒绝访问'.$ip.' - '.$ipLocation['country']);
return Response::view('auth.error', ['message' => trans('error.forbidden.oversea')], 403);
}
break;
default:
Log::warning('未知禁止访问模式!请在系统设置中修改【禁止访问模式】!');
break;
}
}
return $next($request);
}
}