首页 » WordPress

wp站点防止别人进行DDOS攻击

2024/07/17 WordPress 348 views

1 简介

wp站点防止别人进行DDOS攻击。

2 配置位置

位置：根目录/wp-config.php

3 配置内容

在【根目录/wp-config.php】文件的开头添加如下代码：

if(strpos($_SERVER['REQUEST_URI'], 'xmlrpc.php') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';

    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }

    header("$protocol 403 Forbidden", true, 403);
    die;
}

if(strpos($_SERVER['REQUEST_URI'], '/index.php?lang=') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/index.php?s＝') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/wp-cron.php?doing_wp_cron=') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}

if(strpos($_SERVER['REQUEST_URI'], '/backup/') !== false){
    if(strpos($_SERVER['REQUEST_URI'], '.tar.gz') !== false || strpos($_SERVER['REQUEST_URI'], '.sql.tar') !== false || strpos($_SERVER['REQUEST_URI'], '.zip') !== false || strpos($_SERVER['REQUEST_URI'], '.sql') !== false || strpos($_SERVER['REQUEST_URI'], '.rar') !== false){
	    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
   	    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
                $protocol   = 'HTTP/1.0';
    	    }
    	   header("$protocol 403 Forbidden", true, 403);
    	   die;
    }
}


if(strpos($_SERVER['REQUEST_URI'], '/backups/') !== false){
    if(strpos($_SERVER['REQUEST_URI'], '.tar.gz') !== false || strpos($_SERVER['REQUEST_URI'], '.sql.tar') !== false || strpos($_SERVER['REQUEST_URI'], '.zip') !== false || strpos($_SERVER['REQUEST_URI'], '.sql') !== false || strpos($_SERVER['REQUEST_URI'], '.rar') !== false){
	    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
   	    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
                $protocol   = 'HTTP/1.0';
    	    }
    	   header("$protocol 403 Forbidden", true, 403);
    	   die;
    }
}
if(strpos($_SERVER['REQUEST_URI'], '/back/') !== false){
    if(strpos($_SERVER['REQUEST_URI'], '.tar.gz') !== false || strpos($_SERVER['REQUEST_URI'], '.sql.tar') !== false || strpos($_SERVER['REQUEST_URI'], '.zip') !== false || strpos($_SERVER['REQUEST_URI'], '.sql') !== false || strpos($_SERVER['REQUEST_URI'], '.rar') !== false){
	    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
   	    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
                $protocol   = 'HTTP/1.0';
    	    }
    	   header("$protocol 403 Forbidden", true, 403);
    	   die;
    }
}
if(strpos($_SERVER['REQUEST_URI'], '/old/') !== false){
    if(strpos($_SERVER['REQUEST_URI'], '.tar.gz') !== false || strpos($_SERVER['REQUEST_URI'], '.sql.tar') !== false || strpos($_SERVER['REQUEST_URI'], '.zip') !== false || strpos($_SERVER['REQUEST_URI'], '.sql') !== false || strpos($_SERVER['REQUEST_URI'], '.rar') !== false){
	    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
   	    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
                $protocol   = 'HTTP/1.0';
    	    }
    	   header("$protocol 403 Forbidden", true, 403);
    	   die;
    }
}
if(strpos($_SERVER['REQUEST_URI'], '/?author＝') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/wp-json/wp/v2/') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/css/index.php') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], 'allow_url_include') !== false){
    if (strpos($_SERVER['REQUEST_URI'], 'php://input') !== false) {
        $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
        if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
            $protocol   = 'HTTP/1.0';
        }
        header("$protocol 403 Forbidden", true, 403);
        die;
    }
}
if(strpos($_SERVER['REQUEST_URI'], '/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/.DS_Store') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/css/') !== false){
    if (strpos($_SERVER['REQUEST_URI'], '.php') !== false) {
        $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
        if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
            $protocol   = 'HTTP/1.0';
        }
        header("$protocol 403 Forbidden", true, 403);
        die;
    }
}
if(strpos($_SERVER['REQUEST_URI'], '/www.sql') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/dump.sql') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/backup.sql') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/database.sql') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}
if(strpos($_SERVER['REQUEST_URI'], '/cgi-bin/luci/;stok=/locale?') !== false){
    $protocol   = $_SERVER['SERVER_PROTOCOL'] ?? '';
    if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){
        $protocol   = 'HTTP/1.0';
    }
    header("$protocol 403 Forbidden", true, 403);
    die;
}


相关推荐

  • 获取指定目录下的所有图片信息

    1 获取指定目录下的所有图片信息// 获取指定目录下的所有图片信息 public function getImagesInfo($directory) { $images = []; // 创建递归目录迭代器 $iterator = new \RecursiveIteratorIterator( new \RecursiveDirectoryIterator($directory, \RecursiveDirectoryIterator::SKIP_DOTS), \RecursiveIteratorIterator::LEAVES_ONLY ); // 遍历目录中的每个文件 foreach (

    WordPress
    2024/07/17
    查看详情 »

  • Thinkphp各版本的PHP要求

    ThinkPHP 8.0：运行环境要求PHP8.0+，兼容PHP8.3ThinkPHP 6.1：运行环境要求PHP7.2+，兼容PHP8.1ThinkPHP 6.0：运行环境要求PHP7.2+，兼容PHP8.1ThinkPHP 5.1：运行环境要求PHP5.6+，兼容PHP8.0ThinkPHP 5.0：运行环境要求PHP5.4+，兼容PHP7.3

    WordPress
    2024/07/17
    查看详情 »

  • Thinkphp5.1路径常量

    1 配置文件位置根目录/config/template.php2 配置文件内容<?php// +----------------------------------------------------------------------// | ThinkPHP [ WE CAN DO IT JUST THINK ]// +----------------------------------------------------------------------// | Copyright (c) 2006~2018 http://thinkphp.cn All rights reser

    WordPress
    2024/07/17
    查看详情 »

  • Thinkphp5.0路径常量

    1 配置文件位置根目录/application/模块名/config.php2 配置文件内容<?php//配置文件return [ // 后台视图输出字符串内容替换 'view_replace_str' => [ '__PUBLIC__' => '/', '__STATIC__' => '/static', '__CONSOLE__' => '/static/console', '__CONSOLE_CSS__' => '/static/console/css', '__CONSOLE_IMAGES__' => '/static/console/ima

    WordPress
    2024/07/17
    查看详情 »

  • wp站点防止别人进行DDOS攻击

    1 简介wp站点防止别人进行DDOS攻击。2 配置位置位置：根目录/wp-config.php3 配置内容在【根目录/wp-config.php】文件的开头添加如下代码：if(strpos($_SERVER['REQUEST_URI'], 'xmlrpc.php') !== false){ $protocol = $_SERVER['SERVER_PROTOCOL'] ?? ''; if(!in_array($protocol, ['HTTP/1.1', 'HTTP/2', 'HTTP/2.0', 'HTTP/3'], true)){ $protocol = 'HTTP/1.0'; } hea

    WordPress
    2024/07/17
    查看详情 »

  • 只读属性

    1 只读属性简介只读属性的声明方式类似于普通属性，但需要使用 readonly 关键字。2 只读属性例子class Point { public readonly float $x; public readonly float $y; public function __construct(float $x, float $y) { $this->x = $x; $this->y = $y; }}$point = new Point(3.5, 2.8);echo $point->x; // 输出: 3.5echo $point->y; // 输出: 2.8// 下面的尝

    WordPress
    2024/07/17
    查看详情 »

最近发表

标签列表

热门文章