| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081 |
- <?php
- namespace App\Http\Middleware;
- use Agent;
- use App\Utils\IP;
- use Closure;
- use Illuminate\Http\Request;
- use Log;
- use Response;
- class isForbidden
- {
- /**
- * 限制机器人、指定IP访问.
- *
- * @return mixed
- */
- public function handle(Request $request, Closure $next)
- { // 限制机器人、指定IP访问.
- // 拒绝机器人访问
- if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
- Log::warning('识别到机器人('.IP::getClientIp().')访问');
- return Response::view('auth.error', ['message' => trans('errors.forbidden.bots')], 403);
- }
- // 拒绝通过订阅链接域名访问网站,防止网站被探测
- if (config('app.env') === 'production' && sysConfig('website_url') && ! str_contains(sysConfig('website_url'), $request->getHost())) {
- Log::warning('识别到通过订阅链接访问,强制跳转至百度('.IP::getClientIp().') '.$request->fullUrl());
- return redirect('https://www.baidu.com');
- }
- if (sysConfig('forbid_mode')) {
- $ip = IP::getClientIP();
- $ipLocation = IP::getIPInfo($ip);
- if ($ipLocation !== false) {
- // 拒绝无IP请求
- if (empty($ipLocation) || empty(array_filter($ipLocation))) {
- Log::warning("无法识别到IP,拒绝访问:$ip");
- return Response::view('auth.error', ['message' => trans('errors.forbidden.access')], 403);
- }
- if (! in_array($ipLocation['country'], ['本机地址', '局域网'])) {
- // 拒绝大陆IP访问
- switch (sysConfig('forbid_mode')) {
- case 'ban_mainland':
- if (in_array($ipLocation['country'], ['China', '中国', 'CN']) && ! in_array($ipLocation['region'], ['Taiwan', 'Hong Kong', 'Macao', '香港', '澳门', '台湾', '台湾省'])) {
- Log::warning("识别到大陆IP,拒绝访问:$ip");
- return Response::view('auth.error', ['message' => trans('errors.forbidden.china')], 403);
- }
- break;
- case 'ban_china':
- if (in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao', '香港', '台湾', '澳门'])) {
- Log::warning("识别到中国IP,拒绝访问:$ip");
- return Response::view('auth.error', ['message' => trans('errors.forbidden.china')], 403);
- }
- break;
- case 'ban_oversea':
- if (! in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao', '香港', '台湾', '澳门'])) {
- Log::warning("识别到海外IP,拒绝访问:$ip - ".$ipLocation['country']);
- return Response::view('auth.error', ['message' => trans('errors.forbidden.oversea')], 403);
- }
- break;
- default:
- Log::emergency('未知禁止访问模式!请在系统设置中修改【禁止访问模式】!');
- break;
- }
- }
- }
- }
- return $next($request);
- }
- }
|