Skip to content

edetmt / nginx-lua

Go to a project
Commit 16dcd08b by edetmt
Options

delete post.rule -＞１２３４５６

1 parent 38fe0955
Inline Side-by-side
Showing with 3 additions and 5 deletions
config.lua
......@@ -28,7 +28,7 @@ config_cookie_check = "on"
--enable/disable cc filtering #启用cc防御
config_cc_check = "on"
--cc rate the xxx of xxx secondsa #允许单个ip60秒内只能访问10次
config_cc_rate = "10/60"
config_cc_rate = "100/10"
--enable/disable post filtering #是否开启post检测
config_post_check = "on"
--config waf output redirect/html # 选择跳转url或者html
......@@ -40,11 +40,11 @@ config_output_html=[[
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Content-Language" content="zh-cn" />
<title>block info</title>
<title>waf block info</title>
</head>
<body>
<h1 align="center"> 403 forbidden </h1>
<p align="center"> Your behavior is considered unsafe by the system and has been blocked</p>
</body>
</html>
......
rule-config/post.rule
password=123456$
\.\./
select.+(from|limit)
(?:(union(.*?)select))
sleep\((\s*)(\d*)(\s*)\)
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!