php cc攻击防御与防快速刷新代码

2. //代理IP直接退出
3. empty($_SERVER['HTTP_VIA']) or exit('Access Denied');
4. //防止快速刷新
5. session_start();
6. $seconds = '3'; //时间段[秒]
7. $refresh = '5'; //刷新次数
8. //设置监控变量
9. $cur_time = time();
10. if(isset($_SESSION['last_time'])){
11. $_SESSION['refresh_times'] += 1;
12. }else{
13. $_SESSION['refresh_times'] = 1;
14. $_SESSION['last_time'] = $cur_time;
15. }
16. //处理监控结果
17. if($cur_time - $_SESSION['last_time'] if($_SESSION['refresh_times'] >= $refresh){
18. //跳转至攻击者服务器地址
19. header(sprintf('Location:%s', 'http://127.0.0.1'));
20. exit('Access Denied');
21. }
22. }else{
23. $_SESSION['refresh_times'] = 0;
24. $_SESSION['last_time'] = $cur_time;
25. }
26. ?>

复制代码