Phpcc attack defense and defense quick code refresh
- // Directly exit the proxy IP address
- Empty ($ _ SERVER ['http _ vean']) or exit ('Access Denied ');
- // Prevents quick refresh
- Session_start ();
- $ Seconds = '3'; // time period [seconds]
- $ Refresh = '5'; // Number of Refreshes
- // Set monitoring variables
- $ Cur_time = time ();
- If (isset ($ _ SESSION ['last _ time']) {
- $ _ SESSION ['refresh_times '] + = 1;
- } Else {
- $ _ SESSION ['refresh_times '] = 1;
- $ _ SESSION ['last _ time'] = $ cur_time;
- }
- // Process monitoring results
- If ($ cur_time-$ _ SESSION ['last _ time'] <$ seconds ){
- If ($ _ SESSION ['refresh_times ']> = $ refresh ){
- // Jump to the attacker's server address
- Header (sprintf ('Location: % s', 'http: // 127.0.0.1 '));
- Exit ('Access Denied ');
- }
- } Else {
- $ _ SESSION ['refresh_times '] = 0;
- $ _ SESSION ['last _ time'] = $ cur_time;
- }
- ?>
|
