neiyou_user_web/app/Http/Middleware/isForbidden.php

<?php

namespace App\Http\Middleware;

use App\Components\Helpers;
use App\Components\IPIP;
use App\Components\QQWry;
use Agent;
use Log;
use Closure;

class isForbidden
{
    /**
     * 限制机器人、指定IP访问
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     *
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        // 拒绝机器人访问
        if (Helpers::systemConfig()['is_forbid_robot']) {
            if (Agent::isRobot()) {
                Log::info("识别到机器人访问(" . getClientIp() . ")");

                return response()->view('auth.error', ['message' => trans('error.ForbiddenRobot')], 404);
            }
        }

        // 拒绝通过订阅链接域名访问网站，防止网站被探测
        if (false !== strpos(Helpers::systemConfig()['subscribe_domain'], $request->getHost())) {
            Log::info("识别到通过订阅链接访问，强制跳转至百度(" . getClientIp() . ")");

            return redirect('https://www.baidu.com');
        }

        $ip = getClientIP();
        if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
            Log::info('识别到IPv6，尝试解析：' . $ip);
            $isIPv6 = true;
            $ipInfo = getIPv6($ip);
        } else {
            $isIPv6 = false;
            $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
            if (isset($ipInfo['error'])) {
                Log::info('无法识别IPv4，尝试使用IPIP的IP库解析：' . $ip);
                $ipip = IPIP::ip($ip);
                $ipInfo = [
                    'country'  => $ipip['country_name'],
                    'province' => $ipip['region_name'],
                    'city'     => $ipip['city_name']
                ];
            } else {
                // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致，不一致则用IPIP的（因为纯真IP库的非大陆IP准确率较低）
                $ipip = IPIP::ip($ip);
                if ($ipInfo['country'] != $ipip['country_name']) {
                    $ipInfo['country'] = $ipip['country_name'];
                    $ipInfo['province'] = $ipip['region_name'];
                    $ipInfo['city'] = $ipip['city_name'];
                }
            }
        }

        // 拒绝无IP请求
        if (empty($ipInfo) || empty($ipInfo['country'])) {
            return response()->view('auth.error', ['message' => trans('error.ForbiddenAccess')], 403);
        }

        if (!in_array($ipInfo['country'], ['本机地址', '局域网'])) {
            // 拒绝大陆IP访问
            if (Helpers::systemConfig()['is_forbid_china']) {
                if (($ipInfo['country'] == '中国' && !in_array($ipInfo['province'], ['香港', '澳门', '台湾'])) || ($isIPv6 && $ipInfo['country'] == 'China')) {
                    Log::info('识别到大陆IP，拒绝访问：' . $ip);

                    return response()->view('auth.error', ['message' => trans('error.ForbiddenChina')], 403);
                }
            }

            // 拒绝非大陆IP访问
            if (Helpers::systemConfig()['is_forbid_oversea']) {
                if ($ipInfo['country'] != '中国' || in_array($ipInfo['province'], ['香港', '澳门', '台湾']) || ($isIPv6 && $ipInfo['country'] != 'China')) {
                    Log::info('识别到海外IP，拒绝访问：' . $ip . ' - ' . $ipInfo['country']);

                    return response()->view('auth.error', ['message' => trans('error.ForbiddenOversea')], 403);
                }
            }
        }

        return $next($request);
    }
}