@ -865,6 +865,357 @@ function back_css(v) {
}
}
//查看网站日志
function siteWafLog ( siteName ) {
var loadT = layer . msg ( '正在处理，请稍候..' , { icon : 16 , time : 0 } ) ;
owPost ( 'get_logs_list' , { siteName : siteName } , function ( data ) {
var tmp = $ . parseJSON ( data . data ) ;
var rdata = tmp . data ;
var selectLogDay = "" ;
var day = rdata [ 0 ] ;
for ( var i = 0 ; i < rdata . length ; i ++ ) {
selectLogDay += '<option value="' + rdata [ i ] + '">' + rdata [ i ] + '</option>' ;
}
if ( rdata == "" ) {
layer . msg ( "暂无日志记录" , { icon : 6 , shade : 0.3 , time : 1000 } ) ;
return
}
layer . open ( {
type : 1 ,
title : "日志【" + siteName + "】" ,
area : [ '880px' , '500px' ] ,
closeBtn : 2 ,
shadeClose : false ,
content : ' < div class = "lib-box pd15 lib-box-log" > \
< div class = "lib-con-title" style = "height:40px" > < select id = "selectLogDay" class = "bt-input-text" onchange = "siteLogCon(\''+ siteName + '\',this.options[this.options.selectedIndex].value,1)" > ' + selectLogDay + ' < / s e l e c t > < / d i v > \
< div class = "lib-con" > \
< div class = "divtable" > \
< div id = "site_waf_log" style = "max-height:400px;overflow:auto;border:#ddd 1px solid" > \
< table class = "table table-hover" style = "border:none;" > \
< thead > < tr > < th width = "150" > 时间 < / t h > < t h w i d t h = " 1 2 0 " > 用 户 I P < / t h > < t h w i d t h = " 7 0 " > 类 型 < / t h > < t h > U R I 地 址 < / t h > < t h c l a s s = " t d h i d e " > U s e r - A g e n t < / t h > < t h w i d t h = " 6 0 " > 状 态 < / t h > < t h w i d t h = " 1 0 0 " > 过 滤 器 < / t h > < t h c l a s s = " t d h i d e " > 过 滤 规 则 < / t h > < t h w i d t h = " 1 0 0 " c l a s s = " t e x t - r i g h t " > 操 作 < / t h > < / t r > < / t h e a d > \
< tbody id = "LogDayCon" > < / t b o d y > \
< / t a b l e > \
< / d i v > \
< / d i v > \
< div class = "page pull-right" id = "size_log_page" style = "margin-top:10px" > < / d i v > \
< / d i v > \
< / d i v > '
} ) ;
siteLogCon ( siteName , day , 1 ) ;
tableFixed ( "site_waf_log" ) ;
} ) ;
}
//日志内容
function siteLogCon ( siteName , day , page ) {
if ( ! page ) page = 1 ;
var last = page - 1 ;
var next = page + 1 ;
var pagehtml = '' ;
$ ( "#site_waf_log" ) . scrollTop ( 0 ) ;
owPost ( 'get_safe_logs' , { siteName : siteName , toDate : day , p : page } , function ( data ) {
var tmp = $ . parseJSON ( data . data ) ;
if ( ! tmp . status ) {
layer . msg ( rdata . msg , { icon : rdata . status ? 1 : 2 } ) ;
return ;
}
var rdata = tmp . data ;
var con = '' ;
for ( var i = 0 ; i < rdata . length ; i ++ ) {
con += ' < tr > \
< td class = "td0" > '+ escapeHTML(rdata[i][0]) + ' < / t d > \
< td class = "td1" > < a class = "btlink" href = "javascript:add_log_ip_black(\''+ escapeHTML(rdata[i][1]) + '\');" title = "加入黑名单" > ' + escapeHTML(rdata[i][1]) + ' < / a > < / t d > \
< td class = "td2" > '+ escapeHTML(rdata[i][2]) + ' < / t d > \
< td class = "td3" > < span class = "td3txt" > '+ escapeHTML(rdata[i][3]) + ' < / s p a n > < / t d > \
< td class = "tdhide td4" > '+ escapeHTML(rdata[i][4]) + ' < / t d > < t d > 已 拦 截 < / t d > \
< td class = "td5" > < span class = "filtertext" > '+ escapeHTML(rdata[i][5]) + ' < / s p a n > < / t d > \
< td class = "tdhide td6" > '+ escapeHTML(rdata[i][6]) + ' < / t d > \
< td class = "text-right" > < a href = "javascript:;" class = "btlink submit_msg" data - index = "'+ i +'" > 误报 < / a > | < a h r e f = " j a v a s c r i p t : ; " c l a s s = " b t l i n k b t w a f _ d e t a i l s " d a t a - i n d e x = " ' + i + ' " > 详 细 < / a > < / t d > \
< / t r > '
}
$ ( "#LogDayCon" ) . html ( con ) ;
pagehtml = '<a class="Pstart" onclick="site_log_con(\'' + siteName + '\',\'' + day + '\',1)">首页</a><a class="prevPage" onclick="site_log_con(\'' + siteName + '\',\'' + day + '\',' + last + ')">上一页</a><a class="nextPage" onclick="site_log_con(\'' + siteName + '\',\'' + day + '\',' + next + ')">下一页</a><a class="Pcount">第 ' + page + ' 页</a>' ;
$ ( "#size_log_page" ) . html ( pagehtml ) ;
if ( rdata . length < 1 ) $ ( ".nextPage" ) . hide ( ) ;
if ( last < 1 ) $ ( ".prevPage" ) . hide ( ) ;
// 发送误报请求
$ ( ".submit_msg" ) . click ( function ( ) {
var _this = $ ( this ) ;
var res = rdata [ $ ( this ) . attr ( 'data-index' ) ] ;
layer . confirm ( '是否确定提交误报反馈？' , { title : '误报反馈' , closeBtn : 2 , icon : 3 } , function ( ) {
var url _address = res [ 3 ] ;
var rule _arry = res [ 6 ] . split ( " >> " ) ;
var pdata = { url _rule : url _address } ;
var loadT = layer . msg ( '正在添加URL白名单..' , { icon : 16 , time : 0 } ) ;
$ . post ( '/plugin?action=a&name=btwaf&s=add_url_white' , pdata , function ( rdata ) {
layer . msg ( rdata . msg , { icon : rdata . status ? 1 : 2 } ) ;
layer . close ( loadT ) ;
if ( rule _arry [ 1 ] != undefined ) { $ . get ( 'https://www.bt.cn/Api/add_waf_logs?data=' + rule _arry [ 1 ] , function ( rdata ) { } , 'jsonp' ) }
} ) ;
} ) ;
} )
// 详情
$ ( ".btwaf_details" ) . click ( function ( ) {
var res = rdata [ $ ( this ) . attr ( 'data-index' ) ] ;
var time = res [ 0 ] ; //时间
var ip _address = res [ 1 ] ; //IP地址
var req _type = res [ 2 ] ; // 请求类型
var url _address = res [ 3 ] ; // 请求类型
var user _agent = res [ 4 ] ; // 请求类型
var filters = res [ 5 ] ; //过滤器
var filter _rule = '' ; //过滤规则
var rule _arry = res [ 6 ] . split ( " >> " ) ;
var incoming _value = '' , risk _value = '' ; //传入值,风险值
if ( rule _arry . length == 0 ) filter _rule = rule _arry [ 0 ]
incoming _value = rule _arry [ 1 ] == undefined ? '空' : rule _arry [ 1 ] ;
risk _value = incoming _value . match ( new RegExp ( rule _arry [ 0 ] . replace ( /\//g , '\\/' ) , 'i' ) ) ;
risk _value = risk _value ? risk _value [ 0 ] : '空' ;
layer . open ( {
type : 1 ,
title : time + "详情" ,
area : '600px' ,
closeBtn : 2 ,
shadeClose : false ,
content : ' < div class = "pd15 lib-box" > \
< table class = "table" style = "border:#ddd 1px solid; margin-bottom:10px" > \
< tbody > < tr > < th > 时间 < / t h > < t d > ' + e s c a p e H T M L ( t i m e ) + ' < / t d > < t h > 用 户 I P < / t h > < t d > < a c l a s s = " b t l i n k " h r e f = " j a v a s c r i p t : a d d _ l o g _ i p _ b l a c k ( \ ' ' + e s c a p e H T M L ( i p _ a d d r e s s ) + ' \ ' ) " t i t l e = " 加 入 黑 名 单 " > ' + e s c a p e H T M L ( i p _ a d d r e s s ) + ' < / a > < / t d > < / t r > < t r > < t h > 类 型 < / t h > < t d > ' + e s c a p e H T M L ( r e q _ t y p e ) + ' < / t d > < t h > 过 滤 器 < / t h > < t d > ' + e s c a p e H T M L ( f i l t e r s ) + ' < / t d > < / t r > < / t b o d y > < / t a b l e > \
< div > < b style = "margin-left:10px" > URI地址 < / b > < / d i v > \
< div class = "lib-con pull-left mt10" > < div class = "divpre" > '+ escapeHTML(url_address) + ' < / d i v > < / d i v > \
< div > < b style = "margin-left:10px" > User - Agent < / b > < / d i v > \
< div class = "lib-con pull-left mt10" > < div class = "divpre" > '+ escapeHTML(user_agent) + ' < / d i v > < / d i v > \
< div > < b style = "margin-left:10px" > 过滤规则 < / b > < / d i v > \
< div class = "lib-con pull-left mt10" > < div class = "divpre" > '+ escapeHTML(rule_arry[0]) + ' < / d i v > < / d i v > \
< div > < b style = "margin-left:10px" > 传入值 < / b > < / d i v > \
< div class = "lib-con pull-left mt10" > < div class = "divpre" > '+ escapeHTML(incoming_value) + ' < / d i v > < / d i v > \
< div > < b style = "margin-left:10px" > 风险值 < / b > < / d i v > \
< div class = "lib-con pull-left mt10" > < div class = "divpre" > '+ escapeHTML(risk_value) + ' < / d i v > < / d i v > \
< / d i v > '
} )
} )
$ ( "#LogDayCon td" ) . click ( function ( ) {
$ ( this ) . parents ( "tr" ) . addClass ( "active" ) . siblings ( ) . removeClass ( "active" ) ;
} ) ;
} ) ;
}
function html _encode ( value ) {
return $ ( '<div></div>' ) . html ( value ) . text ( ) ;
}
function html _decode ( value ) {
return $ ( '<div></div>' ) . text ( value ) . html ( ) ;
}
//网站设置
function siteWafConfig ( siteName , type ) {
if ( type == undefined ) {
create _2 = layer . open ( {
type : 1 ,
title : "网站配置【" + siteName + "】" ,
area : [ '700px' , '500px' ] ,
closeBtn : 2 ,
shadeClose : false ,
content : '<div id="s_w_c"></div>'
} ) ;
}
var loadT = layer . msg ( '正在获取网站配置..' , { icon : 16 , time : 0 } ) ;
$ . post ( '/plugin?action=a&name=btwaf&s=get_site_config_byname' , { siteName : siteName } , function ( rdata ) {
nginx _config = rdata ;
layer . close ( loadT ) ;
var con = ' < div class = "pd15" > \
< div class = "lib-con-title" > \
< span > 网站防火墙开关 < / s p a n > \
< div class = "ssh-item" style = "margin-right:20px;" > \
< input class = "btswitch btswitch-ios" id = "closewaf_open" type = "checkbox" '+ (rdata.open ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closewaf_open" onclick = "set_site_obj_state(\''+ siteName + '\',\'open\')" style = "width:2.4em;height:1.4em;margin-bottom: 0" > < / l a b e l > \
< / d i v > \
< / d i v > \
< div class = "lib-con" > \
< div class = "divtable" > \
< table class = "table table-hover waftable" > \
< thead > \
< tr > \
< th > 名称 < / t h > \
< th > 描述 < / t h > \
< th width = "80" > 状态 < / t h > \
< th style = "text-align: right;" > 操作 < / t h > \
< / t r > \
< / t h e a d > \
< tbody > \
< tr > \
< td > CC防御 < / t d > \
< td > < font style = "color:red;" > '+ rdata.cc.cycle + ' < / f o n t > 秒 内 , 请 求 同 一 U R I 累 计 超 过 < f o n t s t y l e = " c o l o r : r e d ; " > ' + r d a t a . c c . l i m i t + ' < / f o n t > 次 , 封 锁 I P < f o n t s t y l e = " c o l o r : r e d ; " > ' + r d a t a . c c . e n d t i m e + ' < / f o n t > 秒 < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closecc" type = "checkbox" '+ (rdata.cc.open ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closecc" onclick = "set_site_obj_state(\''+ siteName + '\',\'cc\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_cc_rule('+ rdata.cc.cycle + ',' + rdata.cc.limit + ',' + rdata.cc.endtime + ',\'' + siteName + '\',' + rdata.cc.increase + ')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 恶意容忍设置 < / t d > \
< td > < font style = "color:red;" > '+ rdata.retry_cycle + ' < / f o n t > 秒 内 , 累 计 超 过 < f o n t s t y l e = " c o l o r : r e d ; " > ' + r d a t a . r e t r y + ' < / f o n t > 次 恶 意 请 求 , 封 锁 I P < f o n t s t y l e = " c o l o r : r e d ; " > ' + r d a t a . r e t r y _ t i m e + ' < / f o n t > 秒 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_retry('+ rdata.retry_cycle + ',' + rdata.retry + ',' + rdata.retry_time + ',\'' + siteName + '\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > GET - URI过滤 < / t d > \
< td > '+ rdata.top.get.ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closeget" type = "checkbox" '+ (rdata.get ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closeget" onclick = "set_site_obj_state(\''+ siteName + '\',\'get\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_site_obj_conf(\''+ siteName + '\',\'url\')" > 规则 < / a > < / t d > \
< / t r > \
< tr > \
< td > GET - 参数过滤 < / t d > \
< td > '+ rdata.top.get.ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closeargs" type = "checkbox" '+ (rdata.get ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closeargs" onclick = "set_site_obj_state(\''+ siteName + '\',\'get\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_site_obj_conf(\''+ siteName + '\',\'args\')" > 规则 < / a > < / t d > \
< / t r > \
< tr > \
< td > POST过滤 < / t d > \
< td > '+ rdata.top.post.ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closepost" type = "checkbox" '+ (rdata.post ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closepost" onclick = "set_site_obj_state(\''+ siteName + '\',\'post\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_site_obj_conf(\''+ siteName + '\',\'post\')" > 规则 < / a > < / t d > \
< / t r > \
< tr > \
< td > User - Agent过滤 < / t d > \
< td > '+ rdata.top[' user - agent '].ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closeua" type = "checkbox" '+ (rdata[' user - agent '] ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closeua" onclick = "set_site_obj_state(\''+ siteName + '\',\'user-agent\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_site_obj_conf(\''+ siteName + '\',\'user_agent\')" > 规则 < / a > < / t d > \
< / t r > \
< tr > \
< td > Cookie过滤 < / t d > \
< td > '+ rdata.top.cookie.ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closecookie" type = "checkbox" '+ (rdata.cookie ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closecookie" onclick = "set_site_obj_state(\''+ siteName + '\',\'cookie\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "set_site_obj_conf(\''+ siteName + '\',\'cookie\')" > 规则 < / a > < / t d > \
< / t r > \
< tr > \
< td > 禁止国外访问 < / t d > \
< td > '+ rdata.top.drop_abroad.ps + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closeabroad" type = "checkbox" '+ (rdata.drop_abroad ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closeabroad" onclick = "set_site_obj_state(\''+ siteName + '\',\'drop_abroad\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "cn_iplist()" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 常见扫描器 < / t d > < t d > ' + r d a t a . t o p . s c a n . p s + ' < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closescan" type = "checkbox" '+ (rdata.scan ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closescan" onclick = "set_site_obj_state(\''+ siteName + '\',\'scan\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "scan_rule()" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 使用CDN < / t d > \
< td > 该站点使用了CDN , 启用后方可正确获取客户IP < / t d > \
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closecdn" type = "checkbox" '+ (rdata.cdn ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closecdn" onclick = "set_site_obj_state(\''+ siteName + '\',\'cdn\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "cdn_header(\''+ siteName + '\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 禁止执行PHP的URL < / t d > \
< td > 禁止在指定URL运行PHP脚本 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_rule_admin(\''+ siteName + '\',\'disable_php_path\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 禁止访问的URL < / t d > \
< td > 禁止访问指定的URL < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_rule_admin(\''+ siteName + '\',\'disable_path\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 禁止扩展名 < / t d > \
< td > 禁止访问指定扩展名 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_rule_admin(\''+ siteName + '\',\'disable_ext\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 禁止上传的文件类型 < / t d > \
< td > 禁止上传指定的文件类型 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_rule_admin(\''+ siteName + '\',\'disable_upload_ext\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 受保护的URL < / t d > \
< td > 通过自定义参数加密URL地址 , 参数错误将被拦截 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_url_tell(\''+ siteName + '\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > URL专用过滤 < / t d > \
< td > 为特定URL地址设置过滤规则 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_url_rule(\''+ siteName + '\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > 敏感文字替换 < / t d > \
< td > 替换设置的敏感文字 < / t d > \
< td > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "body_rule_list(true,\''+ siteName + '\')" > 设置 < / a > < / t d > \
< / t r > \
< tr > \
< td > CMS专用过滤 < / t d > \
< td > 为特定CMS提供的过滤规则 < / t d > \
< td style = "text-align: left;" > & nbsp ; & nbsp ; -- < / t d > \
< td class = "text-right" > < a class = "btlink" onclick = "site_cms_rule(\''+siteName+'\')" > 设置 < / a > < / t d > \
< / t r > \
< / t b o d y > \
< / t a b l e > \
< / d i v > \
< / d i v > \
< ul class = "help-info-text c7" > \
< li > 注意 : 此处大部分配置 , 仅对当前站点有效 ! < / l i > \
< / u l > \
< / d i v > ' ;
$ ( "#s_w_c" ) . html ( con ) ;
} ) ;
}
function wafSite ( ) {
owPost ( 'get_site_config' , { } , function ( data ) {
@ -900,10 +1251,10 @@ function wafSite(){
< td > \
< div class = "ssh-item" style = "margin-left:0" > \
< input class = "btswitch btswitch-ios" id = "closeget_'+ i + '" type = "checkbox" ' + (v.open ? ' checked ' : ' ') + ' > \
< label class = "btswitch-btn" for = "closeget_'+ i + '" onclick = "set_site_obj_state(\'' + v.siteName + '\',\'open\')" > < / l a b e l > \
< label class = "btswitch-btn" for = "closeget_'+ i + '" onclick = "set_site_obj_state(\'' + k + '\',\'open\')" > < / l a b e l > \
< / d i v > \
< / t d > \
< td class = "text-right" > < a onclick = "site_waf_l og(\''+ k + '\')" class = "btlink ' + (v.log_size > 0 ? 'dot' : '') + '" > 日志 < / a > | < a o n c l i c k = " s i t e _ w a f _ c o n f i g ( \ ' ' + v . s i t e N a m e + ' \ ' ) " c l a s s = " b t l i n k " > 设 置 < / a > < / t d > \
< td class = "text-right" > < a onclick = "siteWafL og(\''+ k + '\')" class = "btlink ' + (v.log_size > 0 ? 'dot' : '') + '" > 日志 < / a > | < a o n c l i c k = " s i t e W a f C o n f i g ( \ ' ' + k + ' \ ' ) " c l a s s = " b t l i n k " > 设 置 < / a > < / t d > \
< / t r > '
} ) ;
