isForbidden.php 3.0 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677
  1. <?php
  2. namespace App\Http\Middleware;
  3. use Agent;
  4. use App\Components\IP;
  5. use Closure;
  6. use Illuminate\Http\Request;
  7. use Log;
  8. use Response;
  9. class isForbidden
  10. {
  11. /**
  12. * 限制机器人、指定IP访问.
  13. *
  14. * @param Request $request
  15. * @param Closure $next
  16. * @return mixed
  17. */
  18. public function handle(Request $request, Closure $next)
  19. {
  20. // 拒绝机器人访问
  21. if (sysConfig('is_forbid_robot') && Agent::isRobot()) {
  22. Log::warning('识别到机器人访问('.IP::getClientIp().')');
  23. return Response::view('auth.error', ['message' => trans('errors.forbidden.bots')], 403);
  24. }
  25. // 拒绝通过订阅链接域名访问网站,防止网站被探测
  26. if (config('app.env') === 'production' && sysConfig('website_url') && ! str_contains(sysConfig('website_url'), $request->getHost())) {
  27. Log::warning('识别到通过订阅链接访问,强制跳转至百度('.IP::getClientIp().')');
  28. return redirect('https://www.baidu.com');
  29. }
  30. $ip = IP::getClientIP();
  31. $ipLocation = IP::getIPInfo($ip);
  32. // 拒绝无IP请求
  33. if (! $ipLocation || empty(array_filter($ipLocation))) {
  34. return Response::view('auth.error', ['message' => trans('errors.forbidden.access')], 403);
  35. }
  36. if (! in_array($ipLocation['country'], ['本机地址', '局域网']) && sysConfig('forbid_mode')) {
  37. // 拒绝大陆IP访问
  38. switch (sysConfig('forbid_mode')) {
  39. case 'ban_mainland':
  40. if (in_array($ipLocation['country'], ['China', '中国']) && ! in_array($ipLocation['province'], ['香港', '澳门', '台湾', '台湾省'])) {
  41. Log::warning('识别到大陆IP,拒绝访问:'.$ip);
  42. return Response::view('auth.error', ['message' => trans('errors.forbidden.china')], 403);
  43. }
  44. break;
  45. case 'ban_china':
  46. if (in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
  47. Log::warning('识别到中国IP,拒绝访问:'.$ip);
  48. return Response::view('auth.error', ['message' => trans('errors.forbidden.china')], 403);
  49. }
  50. break;
  51. case 'ban_oversea':
  52. if (! in_array($ipLocation['country'], ['China', '中国', 'Taiwan', 'Hong Kong', 'Macao'])) {
  53. Log::warning('识别到海外IP,拒绝访问:'.$ip.' - '.$ipLocation['country']);
  54. return Response::view('auth.error', ['message' => trans('errors.forbidden.oversea')], 403);
  55. }
  56. break;
  57. default:
  58. Log::emergency('未知禁止访问模式!请在系统设置中修改【禁止访问模式】!');
  59. break;
  60. }
  61. }
  62. return $next($request);
  63. }
  64. }