isForbidden.php 3.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Agent;
  4. use App\Components\IPIP;
  5. use App\Components\QQWry;
  6. use Closure;
  7. use Illuminate\Http\Request;
  8. use Log;
  9. use Response;
  10. class isForbidden {
  11. /**
  12. * 限制机器人、指定IP访问
  13. *
  14. * @param Request $request
  15. * @param Closure $next
  16. *
  17. * @return mixed
  18. */
  19. public function handle($request, Closure $next) {
  20. // 拒绝机器人访问
  21. if(sysConfig('is_forbid_robot') && Agent::isRobot()){
  22. Log::info("识别到机器人访问(".getClientIp().")");
  23. return Response::view('auth.error', ['message' => trans('error.ForbiddenRobot')], 403);
  24. }
  25. // 拒绝通过订阅链接域名访问网站,防止网站被探测
  26. if(false !== strpos(sysConfig('subscribe_domain'), $request->getHost())
  27. && !str_contains(sysConfig('subscribe_domain'), sysConfig('website_url'))){
  28. Log::info("识别到通过订阅链接访问,强制跳转至百度(".getClientIp().")");
  29. return redirect('https://www.baidu.com');
  30. }
  31. $ip = getClientIP();
  32. if(filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)){
  33. Log::info('识别到IPv6,尝试解析:'.$ip);
  34. $isIPv6 = true;
  35. $ipInfo = getIPInfo($ip);
  36. }else{
  37. $isIPv6 = false;
  38. $ipInfo = QQWry::ip($ip); // 通过纯真IP库解析IPv4信息
  39. if(isset($ipInfo['error'])){
  40. Log::info('无法识别IPv4,尝试使用IPIP的IP库解析:'.$ip);
  41. $ipip = IPIP::ip($ip);
  42. $ipInfo = [
  43. 'country' => $ipip['country_name'],
  44. 'province' => $ipip['region_name'],
  45. 'city' => $ipip['city_name']
  46. ];
  47. }else{
  48. // 判断纯真IP库获取的国家信息是否与IPIP的IP库获取的信息一致,不一致则用IPIP的(因为纯真IP库的非大陆IP准确率较低)
  49. $ipip = IPIP::ip($ip);
  50. if($ipInfo['country'] != $ipip['country_name']){
  51. $ipInfo['country'] = $ipip['country_name'];
  52. $ipInfo['province'] = $ipip['region_name'];
  53. $ipInfo['city'] = $ipip['city_name'];
  54. }
  55. }
  56. }
  57. // 拒绝无IP请求
  58. if(empty($ipInfo) || empty($ipInfo['country'])){
  59. return Response::view('auth.error', ['message' => trans('error.ForbiddenAccess')], 403);
  60. }
  61. if(!in_array($ipInfo['country'], ['本机地址', '局域网'])){
  62. // 拒绝大陆IP访问
  63. if(sysConfig('is_forbid_china')){
  64. if(($isIPv6 && $ipInfo['country'] === 'China')
  65. || ($ipInfo['country'] === '中国'
  66. && !in_array($ipInfo['province'], ['香港', '澳门', '台湾']))){
  67. Log::info('识别到大陆IP,拒绝访问:'.$ip);
  68. return Response::view('auth.error', ['message' => trans('error.ForbiddenChina')], 403);
  69. }
  70. }
  71. // 拒绝非大陆IP访问
  72. if(sysConfig('is_forbid_oversea')){
  73. if(($isIPv6 && $ipInfo['country'] !== 'China') || $ipInfo['country'] !== '中国'
  74. || in_array($ipInfo['province'], ['香港', '澳门', '台湾'])){
  75. Log::info('识别到海外IP,拒绝访问:'.$ip.' - '.$ipInfo['country']);
  76. return Response::view('auth.error', ['message' => trans('error.ForbiddenOversea')], 403);
  77. }
  78. }
  79. }
  80. return $next($request);
  81. }
  82. }