486 lines
25 KiB
PHP
486 lines
25 KiB
PHP
<?php
|
||
/**
|
||
* admin/visits.php —— 风控管理
|
||
* 访问日志查询（精简 / 完整两种模式 + IP / 关键词筛选 + 分页）与 IP 黑名单管理。
|
||
* 黑名单命中规则后前台与后台（含登录页）请求均被直接拒绝（与前台同一风控提示页）。
|
||
*/
|
||
$P = '../';
|
||
require_once __DIR__ . '/_guard.php';
|
||
require_once __DIR__ . '/_visits_lib.php';
|
||
|
||
$pdo = db();
|
||
|
||
function settings_set(string $key, string $value): void
|
||
{
|
||
$st = db()->prepare('INSERT INTO settings (key, value) VALUES (?, ?)
|
||
ON CONFLICT(key) DO UPDATE SET value = excluded.value');
|
||
$st->execute([$key, $value]);
|
||
}
|
||
|
||
/* 批量删除黑名单（按 id 列表），同步清除单 IP 规则的风控计数；返回删除条数 */
|
||
function bl_delete_ids(PDO $pdo, array $ids): int
|
||
{
|
||
$ids = array_values(array_unique(array_filter(array_map('intval', $ids), function ($v) {
|
||
return $v > 0;
|
||
})));
|
||
if (!$ids)
|
||
return 0;
|
||
$ph = implode(',', array_fill(0, count($ids), '?'));
|
||
$st = $pdo->prepare('SELECT rule FROM ip_blacklist WHERE id IN (' . $ph . ')');
|
||
$st->execute($ids);
|
||
$rules = $st->fetchAll();
|
||
$pdo->prepare('DELETE FROM ip_blacklist WHERE id IN (' . $ph . ')')->execute($ids);
|
||
foreach ($rules as $r) {
|
||
if (filter_var((string) $r['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
|
||
risk_clear_for_ip((string) $r['rule']);
|
||
}
|
||
}
|
||
return count($rules);
|
||
}
|
||
|
||
/* ---------- POST：黑名单增删 / 清空日志 / 风控规则 ---------- */
|
||
$msgKind = '';
|
||
$msgText = '';
|
||
$banChanged = false;
|
||
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||
if (!csrf_verify()) {
|
||
$msgKind = 'err';
|
||
$msgText = '安全校验失败，请刷新页面重试。';
|
||
} else {
|
||
$act = (string) ($_POST['act'] ?? '');
|
||
switch ($act) {
|
||
case 'ban_add':
|
||
$rule = trim((string) ($_POST['rule'] ?? ''));
|
||
$note = trim((string) ($_POST['note'] ?? ''));
|
||
if ($rule === '') {
|
||
$msgKind = 'err';
|
||
$msgText = '请填写要拦截的 IP / 网段。';
|
||
break;
|
||
}
|
||
$parsed = blacklist_parse_rule($rule);
|
||
if (!$parsed[0]) {
|
||
$msgKind = 'err';
|
||
$msgText = $parsed[3];
|
||
break;
|
||
}
|
||
$st = $pdo->prepare('INSERT INTO ip_blacklist (rule, note, created_at, source) VALUES (?,?,?,?)');
|
||
$st->execute([$rule, $note, date('Y-m-d H:i:s'), 'manual']);
|
||
$banChanged = true;
|
||
$msgKind = 'ok';
|
||
$msgText = '黑名单规则已添加，匹配的访问将立即被拒绝。';
|
||
break;
|
||
case 'ban_del':
|
||
$id = max(0, (int) ($_POST['id'] ?? 0));
|
||
if ($id > 0) {
|
||
$bs = $pdo->prepare('SELECT rule FROM ip_blacklist WHERE id = ? LIMIT 1');
|
||
$bs->execute([$id]);
|
||
$brow = $bs->fetch();
|
||
$pdo->prepare('DELETE FROM ip_blacklist WHERE id = ?')->execute([$id]);
|
||
// 解封单 IP 时同步清除其风控计数，避免“刚解封又被历史计数封回”
|
||
if ($brow && filter_var((string) $brow['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
|
||
risk_clear_for_ip((string) $brow['rule']);
|
||
}
|
||
$banChanged = true;
|
||
$msgKind = 'ok';
|
||
$msgText = '黑名单规则已移除。';
|
||
} else {
|
||
$msgKind = 'err';
|
||
$msgText = '无效的黑名单记录。';
|
||
}
|
||
break;
|
||
case 'log_clear':
|
||
@file_put_contents(ACCESS_LOG_FILE, '', LOCK_EX);
|
||
$msgKind = 'ok';
|
||
$msgText = '访问日志已清空（data/vistors.log）。';
|
||
break;
|
||
case 'risk_save':
|
||
$clip = function ($v, $d) {
|
||
$raw = trim((string) ($v ?? ''));
|
||
$x = ($raw === '') ? (int) $d : (int) $raw;
|
||
return max(1, min(1000000, $x));
|
||
};
|
||
settings_set('risk_login_on', isset($_POST['r_login_on']) ? '1' : '0');
|
||
settings_set('risk_login_n', (string) $clip($_POST['r_login_n'] ?? null, 10));
|
||
settings_set('risk_404_on', isset($_POST['r_404_on']) ? '1' : '0');
|
||
settings_set('risk_404_n', (string) $clip($_POST['r_404_n'] ?? null, 100));
|
||
settings_set('risk_rate_on', isset($_POST['r_rate_on']) ? '1' : '0');
|
||
settings_set('risk_rate_n', (string) $clip($_POST['r_rate_n'] ?? null, 120));
|
||
settings_set('risk_tip_main', trim((string) ($_POST['r_tip_main'] ?? '')));
|
||
settings_set('risk_tip_sub', trim((string) ($_POST['r_tip_sub'] ?? '')));
|
||
$msgKind = 'ok';
|
||
$msgText = '风控规则已保存并即时生效。';
|
||
break;
|
||
case 'risk_clear':
|
||
risk_clear_all();
|
||
$msgKind = 'ok';
|
||
$msgText = '全部风险计数已清空（黑名单本身不受影响）。';
|
||
break;
|
||
case 'loginlog_clear':
|
||
login_log_clear();
|
||
$msgKind = 'ok';
|
||
$msgText = '登录日志已清空（含成功与失败记录）。';
|
||
break;
|
||
case 'ban_batch':
|
||
$n = bl_delete_ids($pdo, (array) ($_POST['bid'] ?? []));
|
||
$banChanged = true;
|
||
$msgKind = $n > 0 ? 'ok' : 'err';
|
||
$msgText = $n > 0 ? '已批量移除 ' . $n . ' 条黑名单规则（对应单 IP 计数已清除）。' : '未勾选任何需要移除的规则。';
|
||
break;
|
||
case 'ban_clear_auto':
|
||
$rows = $pdo->query("SELECT rule FROM ip_blacklist WHERE source = 'auto'")->fetchAll();
|
||
$cnt = count($rows);
|
||
$pdo->exec("DELETE FROM ip_blacklist WHERE source = 'auto'");
|
||
foreach ($rows as $r) {
|
||
if (filter_var((string) $r['rule'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
|
||
risk_clear_for_ip((string) $r['rule']);
|
||
}
|
||
}
|
||
blacklist_rules(true);
|
||
$banChanged = true;
|
||
$msgKind = 'ok';
|
||
$msgText = '已一键移除全部风控自动封禁（共 ' . $cnt . ' 条），相关 IP 风控计数已同步清除。';
|
||
break;
|
||
case 'ban_clear_all':
|
||
$pdo->exec('DELETE FROM ip_blacklist');
|
||
risk_clear_all();
|
||
blacklist_rules(true);
|
||
$banChanged = true;
|
||
$msgKind = 'ok';
|
||
$msgText = '已清空全部黑名单，风险计数一并清零。';
|
||
break;
|
||
default:
|
||
$msgKind = 'err';
|
||
$msgText = '未知操作。';
|
||
}
|
||
}
|
||
}
|
||
|
||
/* ---------- 概要统计（数据来源：data/vistors.log） ---------- */
|
||
$visStat = vis_stat_all();
|
||
$statTotal = $visStat['total'];
|
||
$statIps = $visStat['ips'];
|
||
$statToday = $visStat['today'];
|
||
$statBan = $visStat['ban'];
|
||
|
||
/* ---------- 筛选参数（供表单回显）与访问记录查询 ---------- */
|
||
$mode = (string) ($_GET['mode'] ?? 'full');
|
||
if (!in_array($mode, ['full', 'compact'], true)) {
|
||
$mode = 'full';
|
||
}
|
||
$ipF = substr(trim((string) ($_GET['ip'] ?? '')), 0, 64);
|
||
$q = substr(trim((string) ($_GET['q'] ?? '')), 0, 100);
|
||
$page = max(1, (int) ($_GET['page'] ?? 1));
|
||
$perPage = 30;
|
||
$visAccess = vis_query_access($mode, $ipF, $q, $page, $perPage);
|
||
|
||
/* ---------- 当前访问者信息（用于黑名单自查提示） ---------- */
|
||
$curIp = client_ip();
|
||
if ($curIp === '') {
|
||
$curIp = '未知';
|
||
}
|
||
$curHit = null;
|
||
if ($curIp !== '未知') {
|
||
if ($banChanged) {
|
||
blacklist_rules(true);
|
||
}
|
||
$curHit = blacklist_ip_hit($curIp);
|
||
}
|
||
|
||
/* ---------- 自动风控规则配置与当前 IP 计数 ---------- */
|
||
$rcfg = risk_rule_cfg();
|
||
$curRisk = ($curIp !== '未知') ? risk_row($curIp) : null;
|
||
|
||
/* ---------- 登录信息：当前会话 / 历史成功登录 / 登录失败按「IP × 日期」聚合 ---------- */
|
||
$lgStat = login_log_stat();
|
||
$lgRecent = login_log_recent_ok(15);
|
||
$lgFailF = substr(trim((string) ($_GET['lf'] ?? '')), 0, 64);
|
||
$lgFailData = vis_query_loginfail($lgFailF, 200);
|
||
$curAdmin = (string) ($_SESSION['admin'] ?? '');
|
||
$curLoginAt = (string) ($_SESSION['login_at'] ?? '');
|
||
$curLoginIp = (string) ($_SESSION['login_ip'] ?? ($curIp !== '未知' ? $curIp : ''));
|
||
$curLoginUa = (string) ($_SESSION['login_ua'] ?? '');
|
||
$curLoginDevice = (string) ($_SESSION['login_device'] ?? '');
|
||
if ($curLoginDevice === '') {
|
||
$curLoginDevice = login_ua_brief((string) ($_SERVER['HTTP_USER_AGENT'] ?? ''));
|
||
}
|
||
|
||
/* ---------- 黑名单规则（直接读表展示，便于核对备注与来源） ---------- */
|
||
$banRows = $pdo->query('SELECT id, rule, note, created_at, source FROM ip_blacklist ORDER BY id DESC')->fetchAll();
|
||
$banAutoCount = 0;
|
||
foreach ($banRows as $b) {
|
||
if (((string) ($b['source'] ?? 'manual')) === 'auto')
|
||
$banAutoCount++;
|
||
}
|
||
|
||
layout_head('风控管理');
|
||
admin_topbar('visits');
|
||
?>
|
||
<main class="page-main">
|
||
<div class="wrap page-body">
|
||
<div class="admin-head">
|
||
<div class="ah-main">
|
||
<h2 class="ah-title">风控管理</h2>
|
||
<p class="ah-sub">记录访客对本站的动态请求（含后台），完整模式逐条展示访问明细，精简模式按 IP 汇总次数；黑名单 / 自动风控对所有访问统一生效，命中即返回 403 风控提示页，后台与登录页不例外。
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
<?php if ($msgText !== ''): ?>
|
||
<script>window.hpToastMsg = <?= json_encode(['kind' => $msgKind === 'ok' ? 'ok' : 'err', 'text' => $msgText], JSON_UNESCAPED_UNICODE | JSON_HEX_TAG | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_HEX_AMP); ?>;</script>
|
||
<?php endif; ?>
|
||
|
||
<!-- 概要统计 -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">访问概况</div>
|
||
<div class="vis-stats">
|
||
<div class="vis-stat"><b><?= $statTotal ?></b><span>累计访问</span></div>
|
||
<div class="vis-stat"><b><?= $statIps ?></b><span>独立 IP</span></div>
|
||
<div class="vis-stat"><b><?= $statToday ?></b><span>今日访问</span></div>
|
||
<div class="vis-stat"><b><?= $statBan ?></b><span>黑名单规则</span></div>
|
||
</div>
|
||
<form method="post" data-confirm="确认清空全部访问日志？此操作不可恢复。" style="margin-top:14px">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="log_clear">
|
||
<button type="submit" class="btn btn-sm btn-danger">清空访问日志</button>
|
||
<span class="tip" style="margin-left:8px">日志按行追加写入 <code>data/vistors.log</code>（制表符分隔：时间 / IP / 请求方式 / 响应码 /
|
||
URL），完整保留不设上限；可自行归档或删除该文件。</span>
|
||
</form>
|
||
</div>
|
||
|
||
<!-- 登录信息（当前会话 + 历史成功登录） -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">登录信息</div>
|
||
<div class="vis-stats">
|
||
<div class="vis-stat"><b><?= he($curAdmin) ?></b><span>当前用户</span></div>
|
||
<div class="vis-stat"><b
|
||
style="font-size:15px"><?= he($curLoginAt !== '' ? $curLoginAt : '本次会话未记录') ?></b><span>本次登录时间</span></div>
|
||
<div class="vis-stat"><b style="font-size:15px"><?= he($curLoginIp !== '' ? $curLoginIp : '未知') ?></b><span>本次登录
|
||
IP</span></div>
|
||
<div class="vis-stat"><b style="font-size:15px"><?= he($curLoginDevice) ?></b><span>本次登录设备</span></div>
|
||
</div>
|
||
<p class="tip" style="margin:12px 0 4px">历史登录记录（最近 <?= count($lgRecent) ?> 条成功登录；今日成功
|
||
<?= (int) $lgStat['ok_today'] ?> 次）
|
||
</p>
|
||
<div class="v-scroll">
|
||
<table class="v-tbl">
|
||
<thead>
|
||
<tr>
|
||
<th>登录时间</th>
|
||
<th>登录 IP</th>
|
||
<th>登录设备（浏览器）</th>
|
||
<th>用户名</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
<?php if ($lgRecent): ?>
|
||
<?php foreach ($lgRecent as $r): ?>
|
||
<tr>
|
||
<td class="v-nowrap"><?= he((string) $r['created_at']) ?></td>
|
||
<td class="v-nowrap"><?= he((string) $r['ip']) ?></td>
|
||
<td><?= he(vis_device_text($r)) ?></td>
|
||
<td class="v-nowrap"><?= he((string) $r['username']) ?></td>
|
||
</tr>
|
||
<?php endforeach; ?>
|
||
<?php else: ?>
|
||
<tr>
|
||
<td colspan="4"><span class="tip">暂无成功登录记录（本次登录为首次记录）。</span></td>
|
||
</tr>
|
||
<?php endif; ?>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</div>
|
||
|
||
<!-- 登录失败日志（按 IP × 日期聚合） -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">登录失败日志</div>
|
||
<div class="vis-stats">
|
||
<div class="vis-stat"><b><?= (int) $lgStat['fail_today'] ?></b><span>今日失败次数</span></div>
|
||
<div class="vis-stat"><b><?= (int) $lgStat['fail_ips'] ?></b><span>失败涉及 IP</span></div>
|
||
<div class="vis-stat"><b><?= (int) $lgStat['ok_today'] ?></b><span>今日成功登录</span></div>
|
||
<div class="vis-stat"><b><?= (int) $lgStat['total'] ?></b><span>登录日志总数</span></div>
|
||
</div>
|
||
<form method="get" class="v-filter" style="margin-top:12px" data-vis-form="loginfail">
|
||
<input type="text" name="lf" value="<?= he($lgFailF) ?>" placeholder="按 IP 筛选，支持模糊（如 203.0）">
|
||
<button type="submit" class="btn btn-primary">筛选</button>
|
||
<a class="btn" href="visits.php" data-vis-section="loginfail" data-vis-page="">重置</a>
|
||
<span class="tip" style="align-self:center">按「IP × 日期」聚合：同一 IP 当天的失败次数与最近一次设备信息</span>
|
||
</form>
|
||
<div id="lfResults"><?= vis_render_loginfail($lgFailData) ?></div>
|
||
<form method="post" data-confirm="确认清空全部登录日志（成功与失败记录）？此操作不可恢复。" style="margin-top:12px">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="loginlog_clear">
|
||
<button type="submit" class="btn btn-sm btn-danger">清空登录日志</button>
|
||
<span class="tip" style="margin-left:8px">记录存于数据库 <code>login_log</code> 表（含成功与失败、时间 / 用户名 / IP / 设备）。</span>
|
||
</form>
|
||
</div>
|
||
|
||
<!-- 筛选 + 日志列表 -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">访问记录</div>
|
||
<form method="get" class="v-filter" data-vis-form="access">
|
||
<select name="mode" title="展示模式"
|
||
onchange="if(this.form.requestSubmit){this.form.requestSubmit();}else{this.form.submit();}">
|
||
<option value="full" <?= $mode === 'full' ? ' selected' : '' ?>>完整模式（逐条明细）</option>
|
||
<option value="compact" <?= $mode === 'compact' ? ' selected' : '' ?>>精简模式（按访问次数排序）</option>
|
||
</select>
|
||
<input type="text" name="ip" value="<?= he($ipF) ?>" placeholder="按 IP 筛选，支持模糊（如 203.0）">
|
||
<input type="text" name="q" class="w-s" value="<?= he($q) ?>" placeholder="关键词：地址 / 请求方式">
|
||
<button type="submit" class="btn btn-primary">筛选</button>
|
||
<a class="btn" href="visits.php" data-vis-section="access" data-vis-page="">重置</a>
|
||
</form>
|
||
|
||
<div id="visResults"><?= vis_render_access($visAccess) ?></div>
|
||
</div>
|
||
|
||
<!-- 自动风控规则 -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">风控规则</div>
|
||
<form method="post">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="risk_save">
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
|
||
<label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_login_on" value="1"
|
||
<?= $rcfg['login_fail']['on'] ? ' checked' : '' ?>> 后台登录失败封禁</label>
|
||
<span class="tip">失败次数 ≥ <input type="number" name="r_login_n" min="1" max="1000000"
|
||
value="<?= (int) $rcfg['login_fail']['n'] ?>"
|
||
style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
|
||
次 → 永久封禁（建议 5-20）</span>
|
||
</div>
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
|
||
<label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_404_on" value="1"
|
||
<?= $rcfg['not_found']['on'] ? ' checked' : '' ?>> 前台 404 封禁</label>
|
||
<span class="tip">累计次数 ≥ <input type="number" name="r_404_n" min="1" max="1000000"
|
||
value="<?= (int) $rcfg['not_found']['n'] ?>"
|
||
style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
|
||
次 → 永久封禁（建议 50-300）</span>
|
||
</div>
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:9px 0">
|
||
<label class="seg-check" style="min-width:148px"><input type="checkbox" name="r_rate_on" value="1"
|
||
<?= $rcfg['rate']['on'] ? ' checked' : '' ?>> 请求频率封禁</label>
|
||
<span class="tip">60 秒内 ≥ <input type="number" name="r_rate_n" min="1" max="1000000"
|
||
value="<?= (int) $rcfg['rate']['n'] ?>"
|
||
style="width:96px;padding:4px 8px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
|
||
次 → 永久封禁（多人共用出口 IP 时建议关闭）</span>
|
||
</div>
|
||
<p class="tip" style="margin:8px 0 6px">计数方式：404
|
||
与登录失败只要发生即累计（规则关闭也照常计数，便于后台观察）；规则启用且达到阈值时自动封禁，保存后即时生效。自动封禁在黑名单中标注“风控自动”，可随时移除解封（解封时同步清除该 IP 计数）。</p>
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:0 0 8px">
|
||
<span class="tip" style="min-width:148px">主提示（留空=默认）</span>
|
||
<input type="text" name="r_tip_main" maxlength="100" value="<?= he((string) $rcfg['_tip']['raw_main']) ?>"
|
||
placeholder="例：您触发了本站风控，请稍后再访问" title="黑名单命中时提示页的大号主文案"
|
||
style="flex:1 1 300px;min-width:260px;padding:6px 10px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
|
||
</div>
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:0 0 12px">
|
||
<span class="tip" style="min-width:148px">次行说明（留空=默认）</span>
|
||
<input type="text" name="r_tip_sub" maxlength="200" value="<?= he((string) $rcfg['_tip']['raw_sub']) ?>"
|
||
placeholder="例：如为正常访问，请稍后重试；若频繁误判，请联系站点管理员处理。" title="主提示下方的次要说明文案"
|
||
style="flex:1 1 300px;min-width:260px;padding:6px 10px;border:1px solid var(--line-2);border-radius:8px;background:var(--card);color:inherit">
|
||
</div>
|
||
<button type="submit" class="btn btn-primary">保存风控规则</button>
|
||
</form>
|
||
<form method="post" data-confirm="确认清空全部风险计数？各 IP 将从 0 重新累计，不影响已封禁的黑名单。" style="margin-top:14px">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="risk_clear">
|
||
<button type="submit" class="btn btn-sm">清空全部风险计数</button>
|
||
<?php if ($curRisk): ?>
|
||
<span class="tip" style="margin-left:8px">当前访问 IP（<?= he($curIp) ?>）计数：登录失败 <?= (int) $curRisk['login_fail'] ?>
|
||
次
|
||
· 404 <?= (int) $curRisk['not_found'] ?> 次<?php if ($rcfg['rate']['on']): ?> · 本分钟请求
|
||
<?= (int) $curRisk['rate_count'] ?> 次<?php endif; ?></span>
|
||
<?php endif; ?>
|
||
</form>
|
||
</div>
|
||
|
||
<!-- IP 黑名单 -->
|
||
<div class="fieldset-card">
|
||
<div class="fs-title">黑名单管理</div>
|
||
<form method="post" class="v-filter">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="ban_add">
|
||
<input type="text" name="rule" required placeholder="如：203.0.113.7 / 203.0.113.0/24 / 203.0.113.*"
|
||
style="flex:1 1 260px;max-width:420px">
|
||
<input type="text" name="note" placeholder="备注（可选，如：恶意扫描器）" style="flex:1 1 220px;max-width:340px">
|
||
<button type="submit" class="btn btn-primary">加入黑名单</button>
|
||
</form>
|
||
<p class="tip" style="margin:10px 0 2px">
|
||
支持三种写法：单个 IP、CIDR 网段（如 <code>203.0.113.0/24</code>）、星号通配段（如 <code>203.0.113.*</code> 或
|
||
<code>192.168.*.*</code>）；
|
||
目前仅按 IPv4 匹配。黑名单即时生效且不受「站长提示」开关影响，命中 IP 的<strong>前台与后台（含登录页）访问一律被拒绝</strong>。如需解除，请从未被封禁的网络进入后台移除该规则，或直接在
|
||
data/homepage.db 的 ip_blacklist 表中删除记录。
|
||
</p>
|
||
<div style="margin:6px 0 10px">
|
||
<?php if ($curHit): ?>
|
||
<span class="vis-warn-tip">当前访问 IP：<?= he($curIp) ?> ——
|
||
命中规则「<?= he($curHit['rule']) ?>」（<?= ($curHit['note'] !== '') ? he((string) $curHit['note']) : '无备注' ?>），全站（前台与后台）访问将被拦截</span>
|
||
<?php else: ?>
|
||
<span class="vis-ok-tip">当前访问 IP：<?= he($curIp) ?> —— 未命中任何黑名单规则</span>
|
||
<?php endif; ?>
|
||
</div>
|
||
|
||
<?php if ($banRows): ?>
|
||
<div style="display:flex;flex-wrap:wrap;align-items:center;gap:10px;margin:8px 0 4px">
|
||
<form method="post" id="blBatchForm" data-confirm="确认移除选中的黑名单规则？对应单 IP 风控计数将同步清除。">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="ban_batch">
|
||
<label class="tip"
|
||
style="display:inline-flex;align-items:center;gap:4px;cursor:pointer;margin:0 4px 0 0"><input
|
||
type="checkbox" id="blCheckAll"> 全选</label>
|
||
<button type="submit" class="btn btn-sm btn-danger" id="blBatchBtn" disabled>移除选中（0）</button>
|
||
</form>
|
||
<?php if ($banAutoCount > 0): ?>
|
||
<form method="post" data-confirm="确认一键移除全部风控自动封禁（共 <?= $banAutoCount ?> 条）？相关 IP 风控计数将同步清除。">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="ban_clear_auto">
|
||
<button type="submit" class="btn btn-sm">一键移除风控自动（<?= $banAutoCount ?>）</button>
|
||
</form>
|
||
<?php endif; ?>
|
||
<form method="post" data-confirm="确认清空全部黑名单？全部风险计数将一并清零。">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="ban_clear_all">
|
||
<button type="submit" class="btn btn-sm btn-danger">清空全部</button>
|
||
</form>
|
||
</div>
|
||
<?php foreach ($banRows as $b): ?>
|
||
<div class="bl-row">
|
||
<label class="tip" style="display:inline-flex;align-items:center;margin:0" title="勾选后可在上方批量移除"><input
|
||
type="checkbox" form="blBatchForm" class="js-bl-check" name="bid[]" value="<?= (int) $b['id'] ?>"></label>
|
||
<code class="bl-rule"><?= he((string) $b['rule']) ?></code>
|
||
<?php if (((string) ($b['source'] ?? 'manual')) === 'auto'): ?>
|
||
<span class="v-tag warn" style="min-width:0">风控自动</span>
|
||
<?php else: ?>
|
||
<span class="v-tag info" style="min-width:0">手动</span>
|
||
<?php endif; ?>
|
||
<span
|
||
class="bl-note"><?= $b['note'] !== '' ? he((string) $b['note']) : '<span class="tip">（无备注）</span>' ?></span>
|
||
<span class="bl-time"><?= he((string) $b['created_at']) ?></span>
|
||
<form method="post" data-confirm="确认移除黑名单规则「<?= he((string) $b['rule']) ?>」？">
|
||
<?= csrf_field() ?><input type="hidden" name="act" value="ban_del"><input type="hidden" name="id"
|
||
value="<?= (int) $b['id'] ?>">
|
||
<button type="submit" class="btn btn-sm btn-danger">移除</button>
|
||
</form>
|
||
</div>
|
||
<?php endforeach; ?>
|
||
<?php else: ?>
|
||
<p class="tip" style="margin:6px 0 0">尚未配置黑名单规则。启用上方「自动风控」后，异常 IP 会自动记录到这里；也可在下方手动添加规则。</p>
|
||
<?php endif; ?>
|
||
</div>
|
||
</div>
|
||
</main>
|
||
|
||
<?php layout_theme_fab(); ?>
|
||
<script src="../assets/js/common.js"></script>
|
||
<script>
|
||
(function () {
|
||
var all = document.getElementById('blCheckAll');
|
||
var btn = document.getElementById('blBatchBtn');
|
||
var boxes = Array.prototype.slice.call(document.querySelectorAll('.js-bl-check'));
|
||
if (!all || !btn || !boxes.length) return;
|
||
function refresh() {
|
||
var n = boxes.filter(function (c) { return c.checked; }).length;
|
||
btn.disabled = n === 0;
|
||
btn.textContent = '移除选中（' + n + '）';
|
||
all.checked = n > 0 && n === boxes.length;
|
||
}
|
||
all.addEventListener('change', function () {
|
||
boxes.forEach(function (c) { c.checked = all.checked; });
|
||
refresh();
|
||
});
|
||
boxes.forEach(function (c) { c.addEventListener('change', refresh); });
|
||
})();
|
||
</script>
|
||
</body>
|
||
|
||
</html>
|