{"id":9225,"date":"2019-11-18T07:36:00","date_gmt":"2019-11-17T23:36:00","guid":{"rendered":"https:\/\/www.npc.ink\/?p=9225"},"modified":"2019-11-18T22:44:48","modified_gmt":"2019-11-18T14:44:48","slug":"block-bad-queries-%e9%98%bb%e6%ad%a2%e4%b8%8d%e8%89%af%e6%9f%a5%e8%af%a2","status":"publish","type":"post","link":"https:\/\/www.npc.ink\/9225.html","title":{"rendered":"Block Bad Queries - \u963b\u6b62\u4e0d\u826f\u67e5\u8be2"},"content":{"rendered":"\n
\u662f\u4e00\u4e2a\u7b80\u5355\uff0c\u8d85\u5feb\u901f\u7684\u63d2\u4ef6\uff0c\u53ef\u4fdd\u62a4\u60a8\u7684\u7f51\u7ad9\u514d\u906d\u6076\u610fURL\u8bf7\u6c42\u3002\u70e7\u70e4\u68c0\u67e5\u6240\u6709\u4f20\u5165\u6d41\u91cf\uff0c\u5e76\u6084\u6084\u5757\u574f\u8bf7\u6c42\u5305\u542b\u8ba8\u538c\u7684\u4e1c\u897f\u4e00\u6837 \u5f88\u68d2\u7684\u529f\u80fd<\/strong><\/p>\n\n\n\n \u9690\u79c1<\/strong><\/p>\n\n\n\n \u8be5\u63d2\u4ef6\u4e0d\u6536\u96c6\u6216\u5b58\u50a8\u4efb\u4f55\u7528\u6237\u6570\u636e\u3002\u5b83\u4e0d\u4f1a\u8bbe\u7f6e\u4efb\u4f55cookie\uff0c\u4e5f\u4e0d\u4f1a\u8fde\u63a5\u5230\u4efb\u4f55\u7b2c\u4e09\u65b9\u4f4d\u7f6e\u3002\u56e0\u6b64\uff0c\u6b64\u63d2\u4ef6\u4e0d\u4f1a\u4ee5\u4efb\u4f55\u65b9\u5f0f\u5f71\u54cd\u7528\u6237\u9690\u79c1\u3002<\/p>\n\n\n\n \u65e0\u8bba\u662f\u5426\u4f7f\u7528Gutenberg\u5757\u7f16\u8f91\u5668\uff0c\u5747\u53ef\u5b8c\u7f8e\u8fd0\u884c<\/p><\/blockquote>\n\n\n\n \u4e13\u4e1a\u7248<\/strong><\/p>\n\n\n\n \u8981\u83b7\u5f97\u9ad8\u7ea7\u4fdd\u62a4\u548c\u5f3a\u5927\u529f\u80fd\uff0c\u8bf7\u67e5\u770bBBQ Pro<\/a>\u3002<\/p>\n\n\n\n \u4e00\u65e6BBQ<\/abbr>\u5b89\u88c5\uff0c\u4f60\u53ef\u4ee5\u9a8c\u8bc1\u5b83\u7684\u5de5\u4f5c\u901a\u8fc7\u8bf7\u6c42\u4e0b\u5217\u7f51\u5740<\/abbr>\u4ece\u60a8\u7684\u7f51\u7ad9S\uff08 \u8fd9\u4e9b\u53ea\u662fBBQ<\/abbr>\u963b\u6b62\u7684\u5783\u573e\u7c7b\u578b\u7684\u793a\u4f8b\u3002\u5982\u679c\u60a8\u7684\u670d\u52a1\u5668\u9488\u5bf9\u8fd9\u4e9b\u793a\u4f8b\u8fd4\u56de403\u201c Forbidden\u201d\uff08\u7981\u6b62\uff09\u54cd\u5e94\uff0c\u5219BBQ<\/abbr>\u6b63\u5728\u6267\u884c\u5b83\u7684thang\u3002\u4f7f\u7528BBQ\u9632\u706b\u5899\u4e2d\u5305\u542b\u7684\u6a21\u5f0f\u53ef\u4ee5\u8fdb\u884c\u66f4\u591a\u6d4b\u8bd5\u3002<\/p>\n\n\n\n \u8fd9\u57fa\u672c\u4e0a\u662f\u6211\u79fb\u690d\u5230PHP\u7684<\/abbr>G\u7cfb\u5217<\/a> \u9ed1\u540d\u5355<\/a>\u7684\u6539\u7f16\u3002\u5b83\u901a\u8fc7\u5b9a\u4e49\u4e00\u7ec4\u5339\u914d\u5e76\u963b\u6b62\u6076\u610fURL<\/abbr>\u8bf7\u6c42\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u6765\u5de5\u4f5c\u3002BBQ<\/abbr>\u626b\u63cf\u6bcf\u4e2a\u8bf7\u6c42\u7684\u4e09\u4e2a\u90e8\u5206\uff1a<\/abbr><\/abbr><\/abbr><\/p>\n\n\n\n \u6839\u636e\u7b56\u7565\u8bbe\u8ba1\u7684\u4e00\u7ec4\u5df2\u77e5\u653b\u51fb\u6a21\u5f0f\u68c0\u67e5\u8fd9\u4e9b\u53d8\u91cf\u662f\u9632\u6b62\u6076\u610f\u653b\u51fb\u7684\u6709\u6548\u65b9\u6cd5\u3002<\/p>\n\n\n\n \u8981\u5728\u975eWP<\/abbr>\u7f51\u7ad9\u4e0a\u5b9e\u73b0BBQ<\/abbr>\u811a\u672c\uff0c\u8bf7\u4e3a\u6bcf\u4e2a\u9875\u9762\u8bf7\u6c42\uff08\u4f8b\u5982\uff0c\u5728\u6bcf\u4e2a\u7f51\u9875\u7684\u5f00\u5934\uff09\u6dfb\u52a0\u4ee5\u4e0b\u4ee3\u7801\u3002<\/abbr><\/p>\n\n\n\n \u65e0\u9700\u5bf9\u6b64\u4ee3\u7801\u8fdb\u884c\u4efb\u4f55\u66f4\u6539\uff0c\u56e0\u6b64\u60a8\u5e94\u8be5\u4e00\u5207\u987a\u5229\u3002\u8bf7\u6ce8\u610f\uff0c\u6b64\u811a\u672c\u4e0e\u5f53\u524d\u7248\u672c\u7684WP\u63d2\u4ef6\u6709\u6240\u4e0d\u540c\u3002\u5df2\u5bf9\u66f4\u65b0\u7248\u672c\u7684\u63d2\u4ef6\u8fdb\u884c\u4e86\u4f18\u5316\uff0c\u4ee5\u66f4\u597d\u5730\u4e0eWordPress\u914d\u5408\u4f7f\u7528\uff0c\u4f46\u6b64\u7248\u672c\u7684BBQ\u603b\u4f53\u4e0a\u4ecd\u7ee7\u7eed\u4fdd\u62a4\u975eWP\u7f51\u7ad9\u3002<\/p>\n\n\n\neval(<\/code>\uff0c
base64_<\/code>\u548c\u8fc7\u957f\u8bf7\u6c42\u5b57\u7b26\u4e32\u3002\u5bf9\u4e8e\u65e0\u6cd5\u4f7f\u7528\u5f3a\u5927\u7684.htaccess\u9632\u706b\u5899\u7684<\/a>\u7ad9\u70b9\uff0c\u8fd9\u662f\u4e00\u4e2a\u7b80\u5355\u800c\u53ef\u9760\u7684\u89e3\u51b3\u65b9\u6848\u3002<\/p>\n\n\n\n
\u672c\u7ad9\u4e0b\u8f7d\uff1a<\/h2>\n\n\n[zrz_file link=\"https:\/\/cdn.getimg.net\/npc\/2019\/wordpress\/plugin\/block-bad-queries.20191109.zip\" name=\"block-bad-queries.20191109.zip\" code=\"\"]\n\n\n\n
<\/figure>\n\n\n\n
\u9a8c\u8bc1\u5b83\u662f\u5426\u6b63\u5e38<\/h3>\n\n\n\n
example.com<\/code>\uff09\uff1a<\/p>\n\n\n\n
http:\/\/example.com\/proc\/self\/environ<\/code><\/li>
http:\/\/example.com\/path\/?q=%2e%2e<\/code><\/li>
http:\/\/example.com\/path\/base64_<\/code><\/li><\/ul>\n\n\n\n
\u8fd9\u4e2a\u600e\u4e48\u8fd0\u4f5c<\/h3>\n\n\n\n
BBQ\u72ec\u7acbPHP\u811a\u672c<\/h2>\n\n\n\n
<?php\n\/*\nPlugin Name: Block Bad Queries (BBQ)\nPlugin URI: https:\/\/perishablepress.com\/block-bad-queries\/\nDescription: Automatically protects WordPress against malicious URL requests.\nAuthor: Jeff Starr\nAuthor URI: https:\/\/monzillamedia.com\/\nVersion: (standalone)\nLicense: GPL v2\nUsage: No configuration necessary. Upload, activate and done. BBQ blocks bad queries automically to protect your site against malicious URL requests.\nTags: security, protect, firewall, php, eval, malicious, url, request, blacklist\n*\/\n\n$request_uri = $_SERVER['REQUEST_URI'];\n$query_string = $_SERVER['QUERY_STRING'];\n$user_agent = $_SERVER['HTTP_USER_AGENT'];\n\n\/\/ request uri\nif (\t\/\/strlen($request_uri) > 255 || \n\tstripos($request_uri, 'eval(') || \n\tstripos($request_uri, 'CONCAT') || \n\tstripos($request_uri, 'UNION+SELECT') || \n\tstripos($request_uri, '(null)') || \n\tstripos($request_uri, 'base64_') || \n\tstripos($request_uri, '\/localhost') || \n\tstripos($request_uri, '\/pingserver') || \n\tstripos($request_uri, '\/config.') || \n\tstripos($request_uri, '\/wwwroot') || \n\tstripos($request_uri, '\/makefile') || \n\tstripos($request_uri, 'crossdomain.') || \n\tstripos($request_uri, 'proc\/self\/environ') || \n\tstripos($request_uri, 'etc\/passwd') || \n\tstripos($request_uri, '\/https\/') || \n\tstripos($request_uri, '\/http\/') || \n\tstripos($request_uri, '\/ftp\/') || \n\tstripos($request_uri, '\/cgi\/') || \n\tstripos($request_uri, '.cgi') || \n\tstripos($request_uri, '.exe') || \n\tstripos($request_uri, '.sql') || \n\tstripos($request_uri, '.ini') || \n\tstripos($request_uri, '.dll') || \n\tstripos($request_uri, '.asp') || \n\tstripos($request_uri, '.jsp') || \n\tstripos($request_uri, '\/.bash') || \n\tstripos($request_uri, '\/.git') || \n\tstripos($request_uri, '\/.svn') || \n\tstripos($request_uri, '\/.tar') || \n\tstripos($request_uri, ' ') || \n\tstripos($request_uri, '<') || \n\tstripos($request_uri, '>') || \n\tstripos($request_uri, '\/=') || \n\tstripos($request_uri, '...') || \n\tstripos($request_uri, '+++') || \n\tstripos($request_uri, ':\/\/') || \n\tstripos($request_uri, '\/&&') || \n\t\/\/ query strings\n\tstripos($query_string, '?') || \n\tstripos($query_string, ':') || \n\tstripos($query_string, '[') || \n\tstripos($query_string, ']') || \n\tstripos($query_string, '..\/') || \n\tstripos($query_string, '127.0.0.1') || \n\tstripos($query_string, 'loopback') || \n\tstripos($query_string, '%0A') || \n\tstripos($query_string, '%0D') || \n\tstripos($query_string, '%22') || \n\tstripos($query_string, '%27') || \n\tstripos($query_string, '%3C') || \n\tstripos($query_string, '%3E') || \n\tstripos($query_string, '%00') || \n\tstripos($query_string, '%2e%2e') || \n\tstripos($query_string, 'union') || \n\tstripos($query_string, 'input_file') || \n\tstripos($query_string, 'execute') || \n\tstripos($query_string, 'mosconfig') || \n\tstripos($query_string, 'environ') || \n\t\/\/stripos($query_string, 'scanner') || \n\tstripos($query_string, 'path=.') || \n\tstripos($query_string, 'mod=.') || \n\t\/\/ user agents\n\tstripos($user_agent, 'binlar') || \n\tstripos($user_agent, 'casper') || \n\tstripos($user_agent, 'cmswor') || \n\tstripos($user_agent, 'diavol') || \n\tstripos($user_agent, 'dotbot') || \n\tstripos($user_agent, 'finder') || \n\tstripos($user_agent, 'flicky') || \n\tstripos($user_agent, 'libwww') || \n\tstripos($user_agent, 'nutch') || \n\tstripos($user_agent, 'planet') || \n\tstripos($user_agent, 'purebot') || \n\tstripos($user_agent, 'pycurl') || \n\tstripos($user_agent, 'skygrid') || \n\tstripos($user_agent, 'sucker') || \n\tstripos($user_agent, 'turnit') || \n\tstripos($user_agent, 'vikspi') || \n\tstripos($user_agent, 'zmeu')\n) {\n\t@header('HTTP\/1.1 403 Forbidden');\n\t@header('Status: 403 Forbidden');\n\t@header('Connection: Close');\n\t@exit;\n} ?><\/code><\/pre>\n\n\n\n