isForbidden.php 3.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Agent;
  4. use App\Components\IP;
  5. use Closure;
  6. use Illuminate\Http\Request;
  7. use Log;
  8. use Response;
  9. class isForbidden
  10. {
  11. /**
  12. * 限制机器人、指定IP访问.
  13. *
  14. * @param Request $request
  15. * @param Closure $next
  16. *
  17. * @return mixed
  18. */
  19. public function handle(Request $request, Closure $next)
  20. {
  21. // 拒绝机器人访问
  22. if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
  23. Log::info('识别到机器人访问('.IP::getClientIp().')');
  24. return Response::view('auth.error', ['message' => trans('error.forbidden.bots')], 403);
  25. }
  26. // 拒绝通过订阅链接域名访问网站,防止网站被探测
  27. if (strpos(sysConfig('subscribe_domain'), $request->getHost()) !== false && strpos(sysConfig('website_url'), $request->getHost()) === false) {
  28. Log::info('识别到通过订阅链接访问,强制跳转至百度('.IP::getClientIp().')');
  29. return redirect('https://www.baidu.com');
  30. }
  31. $ip = IP::getClientIP();
  32. $ipLocation = IP::getIPInfo($ip);
  33. // 拒绝无IP请求
  34. if (! $ipLocation || empty(array_filter($ipLocation))) {
  35. return Response::view('auth.error', ['message' => trans('error.forbidden.access')], 403);
  36. }
  37. if (! in_array($ipLocation['country'], ['本机地址', '局域网']) && sysConfig('forbid_mode')) {
  38. // 拒绝大陆IP访问
  39. switch (sysConfig('forbid_mode')) {
  40. case 'ban_mainland':
  41. if (in_array($ipLocation['country'], ['China', '中国']) && ! in_array($ipLocation['province'], ['香港', '澳门', '台湾', '台湾省'])) {
  42. Log::info('识别到大陆IP,拒绝访问:'.$ip);
  43. return Response::view('auth.error', ['message' => trans('error.forbidden.china')], 403);
  44. }
  45. break;
  46. case 'ban_china':
  47. if (in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
  48. Log::info('识别到中国IP,拒绝访问:'.$ip);
  49. return Response::view('auth.error', ['message' => trans('error.forbidden.china')], 403);
  50. }
  51. break;
  52. case 'ban_oversea':
  53. if (! in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
  54. Log::info('识别到海外IP,拒绝访问:'.$ip.' - '.$ipLocation['country']);
  55. return Response::view('auth.error', ['message' => trans('error.forbidden.oversea')], 403);
  56. }
  57. break;
  58. default:
  59. Log::warning('未知禁止访问模式!请在系统设置中修改【禁止访问模式】!');
  60. break;
  61. }
  62. }
  63. return $next($request);
  64. }
  65. }