增加sql的waf功能

init.lua

@@ -1,42 +1,45 @@
-require 'config'
-require 'b64'
-require 'aes'
-require 'log'
-require '403'
-require 'tableXstring'
-require 'fileio'
-require 'randomStr'
-require 'whiteList'
+require "config"
+require "b64"
+require "aes"
+require "log"
+require "403"
+require "tableXstring"
+require "fileio"
+require "randomStr"
+require "whiteList"
+require "tools"
+require "waf/waf"
 
-local optionIsOn = function (options) return options == "on" and true or false end
+local optionIsOn = function(options)
+    return options == "on" and true or false
+end
 ToolsProtect = optionIsOn(toolsProtect)
 ShiroProtect = optionIsOn(shiroProtect)
 JsProtect = optionIsOn(jsProtect)
 JsConfuse = false
 SensitiveProtect = optionIsOn(sensitiveProtect)
 
-
 -- cookie加密
 function reqCookieParse()
     if ShiroProtect then
         local userCookieX9 = ngx.var.cookie_x9i7RDYX23
-        if not userCookieX9 then  -- 没有cookie
-            log('0-cookie 无cookie', '')
-            ngx.req.set_header('Cookie', '') -- 移除其他cookie
-        elseif #userCookieX9 < 32 then  -- 判断cookie长度
-            log('1-cookie 不符合要求', userCookieX9)
-            ngx.say('4')
+        if not userCookieX9 then -- 没有cookie
+            log("0-cookie 无cookie", "")
+            ngx.req.set_header("Cookie", "") -- 移除其他cookie
+        elseif #userCookieX9 < 32 then -- 判断cookie长度
+            log("1-cookie 不符合要求", userCookieX9)
+            ngx.say("4")
             say_html()
-        else  --有cookie
+        else --有cookie
             local result = xpcall(dencrypT, emptyPrint, userCookieX9, aesKey)
             if not result then --解密失败
-                log('2-cookie 无法解密', userCookieX9)
-                ngx.say('5')
+                log("2-cookie 无法解密", userCookieX9)
+                ngx.say("5")
                 say_html()
-            else  --解密成功
+            else --解密成功
                 local originCookie = StrToTable(dencrypT(userCookieX9, aesKey))
-                ngx.req.set_header('Cookie', transTable(originCookie))
-                log('3-cookie 解密成功', userCookieX9)
+                ngx.req.set_header("Cookie", transTable(originCookie))
+                log("3-cookie 解密成功", userCookieX9)
             end
         end
     end
@@ -46,9 +49,9 @@ function respCookieEncrypt()
     if ShiroProtect then
         local value = ngx.resp.get_headers()["Set-Cookie"]
         if value then
-            local encryptedCookie = cookieD.."="..encrypT(TableToStr(value), aesKey)
+            local encryptedCookie = cookieD .. "=" .. encrypT(TableToStr(value), aesKey)
             ngx.header["Set-Cookie"] = encryptedCookie
-            log('4-cookie 加密成功',encryptedCookie)
+            log("4-cookie 加密成功", encryptedCookie)
         end
     end
 end
@@ -58,30 +61,30 @@ function toolsInfoSpider()
     if ToolsProtect and not whiteExtCheck() then
         local clientCookieA = ngx.var.cookie_h0yGbdRv
         local clientCookieB = ngx.var.cookie_kQpFHdoh
-        if not (clientCookieA and clientCookieB) then  --没有cookieA进入reload，302至html生成cookie后再请求原地址
-            local ip = 'xxx'
-            local finalPath = 'http://'..ip..'/'..jsPath..'?origin='..encodeBase64(ngx.var.request_uri)
-            log('1-tools 无cookieA/B', '')
+        if not (clientCookieA and clientCookieB) then --没有cookieA进入reload，302至html生成cookie后再请求原地址
+            local ip = "xxx"
+            local finalPath = "http://" .. ip .. "/" .. jsPath .. "?origin=" .. encodeBase64(ngx.var.request_uri)
+            log("1-tools 无cookieA/B", "")
             ngx.redirect(finalPath, 302)
         else
             local result = xpcall(dencrypT, emptyPrint, clientCookieB, clientCookieA)
             if not result then
-                log('2-tools 解密失败', clientCookieA..', '..clientCookieB)
-                ngx.say('1')
+                log("2-tools 解密失败", clientCookieA .. ", " .. clientCookieB)
+                ngx.say("1")
                 say_html() -- 解密失败
-            else-- 可以解密，提取数据
+            else -- 可以解密，提取数据
                 local result2 = dencrypT(clientCookieB, clientCookieA)
                 if #result2 < 1 then
-                    log('3-tools 解密失败', result2)
+                    log("3-tools 解密失败", result2)
                 else
-                    local srs = split(result2, ',')
-                    local _,e = string.find(srs[1], '0')
+                    local srs = split(result2, ",")
+                    local _, e = string.find(srs[1], "0")
                     if e ~= nil then
-                        log('4-tools 工具请求', result2)
-                        ngx.say('2')
+                        log("4-tools 工具请求", result2)
+                        ngx.say("2")
                         say_html()
                     else
-                        log('0-tools 工具验证通过, 记录浏览器指纹', '', srs[2])
+                        log("0-tools 工具验证通过, 记录浏览器指纹", "", srs[2])
                     end
                 end
             end
@@ -93,7 +96,7 @@ end
 function jsExtDetect()
     if JsProtect then
         local ext = string.match(ngx.var.uri, ".+%.(%w+)$")
-        if ext == 'js' then  -- 加入检查，js文件是否存在
+        if ext == "js" then -- 加入检查，js文件是否存在
             JsConfuse = true
         end
     end
@@ -102,14 +105,14 @@ end
 function jsConfuse()
     if JsConfuse then
         local originBody = ngx.arg[1]
-        if #originBody > 200 then  -- 筛选空js
+        if #originBody > 200 then -- 筛选空js
             local s = getRandom(8)
-            local path = '/tmp/'..s
-            writefile(path, originBody, 'w+')
-            local t = io.popen('export NODE_PATH=/usr/lib/node_modules && node /gate/node/js_confuse.js  '..path)
+            local path = "/tmp/" .. s
+            writefile(path, originBody, "w+")
+            local t = io.popen("export NODE_PATH=/usr/lib/node_modules && node /gate/node/js_confuse.js  " .. path)
             local a = t:read("*all")
             ngx.arg[1] = a
-            os.execute('rm -f '..path)
+            os.execute("rm -f " .. path)
         end
         JsConfuse = false
     end
@@ -122,14 +125,3 @@ function dateReplace()
         ngx.arg[1] = replaceTelephone
     end
 end
-
-
-
-
-
-
-
-
-
-
-