typecho引入五秒盾，缓解服务器压力

功能是：对访客的访问频率会先一步判断，根据用户自定义的范围，将频率过高的访客跳转向127.0.0.1，而没有达到频率的访客则会进行cookies验证，这样更大程序的对恶意流量攻击进行拦截，并且有效缓解了服务器的压力。
这样，还可以一定程度上拦截，攻击者伪装成的搜索引擎蜘蛛。

PHP文件

typecho的模板目录下新建cc.php文件，内容如下：

<?php
error_reporting(0);
define('SYSTEM_ROOT', dirname(preg_replace('@\\(.*\\(.*$@', '', preg_replace('@\\(.*\\(.*$@', '', __FILE__))) . '/');
session_start();
$seconds = '3';//时间段/秒
$refresh = '5';//刷新次数
$cur_time = time();
if(isset($_SESSION['last_time'])){
 $_SESSION['refresh_times'] += 1;
}else{
 $_SESSION['refresh_times'] = 1;
 $_SESSION['last_time'] = $cur_time;
}
if($cur_time - $_SESSION['last_time'] < $seconds){
 if($_SESSION['refresh_times'] >= $refresh){
  header(sprintf('Location:%s', 'http://127.0.0.1'));
  exit('Access Denied');
 }
}else{
 $_SESSION['refresh_times'] = 0;
 $_SESSION['last_time'] = $cur_time;
}
date_default_timezone_set('Asia/Shanghai');
header('Content-Type: text/html; charset=UTF-8');
function getspider($useragent=''){
    if(CC_Defender==2)return false;
    if(!$useragent){$useragent = $_SERVER['HTTP_USER_AGENT'];}
$useragent=strtolower($useragent);
    if (strpos($useragent, 'baiduspider') !== false){return 'baiduspider';}
    if (strpos($useragent, 'googlebot') !== false){return 'googlebot';}
    if (strpos($useragent, 'soso') !== false){return 'soso';}
    if (strpos($useragent, 'bing') !== false){return 'bing';}
    if (strpos($useragent, 'yahoo') !== false){return 'yahoo';}
    if (strpos($useragent, 'sohu-search') !== false){return 'Sohubot';}
    if (strpos($useragent, 'sogou') !== false){return 'sogou';}
    if (strpos($useragent, 'youdaobot') !== false){return 'YoudaoBot';}
    if (strpos($useragent, 'yodaobot') !== false){return 'YodaoBot';}
    if (strpos($useragent, 'robozilla') !== false){return 'Robozilla';}
    if (strpos($useragent, 'msnbot') !== false){return 'msnbot';}
    if (strpos($useragent, 'lycos') !== false){return 'Lycos';}
    if (strpos($useragent, 'ia_archiver') !== false || strpos($useragent, 'iaarchiver') !== false){return 'alexa';}
    if (strpos($useragent, 'archive.org_bot') !== false){return 'Archive';}
    if (strpos($useragent, 'robozilla') !== false){return 'Robozilla';}
    if (strpos($useragent, 'sitebot') !== false){return 'SiteBot';}
    if (strpos($useragent, 'mj12bot') !== false){return 'MJ12bot';}
    if (strpos($useragent, 'gosospider') !== false){return 'gosospider';}
    if (strpos($useragent, 'gigabot') !== false){return 'Gigabot';}
    if (strpos($useragent, 'yrspider') !== false){return 'YRSpider';}
    if (strpos($useragent, 'gigabot') !== false){return 'Gigabot';}
    if (strpos($useragent, 'jikespider') !== false){return 'jikespider';}
    if (strpos($useragent, 'addsugarspiderbot') !== false){return 'AddSugarSpiderBot';/*非常少*/}
    if (strpos($useragent, 'testspider') !== false){return 'TestSpider';}
    if (strpos($useragent, 'etaospider') !== false){return 'EtaoSpider';}
    if (strpos($useragent, 'wangidspider') !== false){return 'WangIDSpider';}
    if (strpos($useragent, 'foxspider') !== false){return 'FoxSpider';}
    if (strpos($useragent, 'docomo') !== false){return 'DoCoMo';}
    if (strpos($useragent, 'yandexbot') !== false){return 'YandexBot';}
    if (strpos($useragent, 'ezooms') !== false){return 'Ezooms';/*个人*/}
    if (strpos($useragent, 'sinaweibobot') !== false){return 'SinaWeiboBot';}
    if (strpos($useragent, 'catchbot') !== false){return 'CatchBot';}
    if (strpos($useragent, 'surveybot') !== false){return 'SurveyBot';}
    if (strpos($useragent, 'dotbot') !== false){return 'DotBot';}
    if (strpos($useragent, 'purebot') !== false){return 'Purebot';}
    if (strpos($useragent, 'ccbot') !== false){return 'CCBot';}
    if (strpos($useragent, 'mlbot') !== false){return 'MLBot';}
    if (strpos($useragent, 'adsbot-google') !== false){return 'AdsBot-Google';}
    if (strpos($useragent, 'ahrefsbot') !== false){return 'AhrefsBot';}
    if (strpos($useragent, 'spbot') !== false){return 'spbot';}
    if (strpos($useragent, 'augustbot') !== false){return 'AugustBot';}
    return false;
}

if($_GET['rand'] && $_SESSION['rand_session']!=$_GET['rand']){
    @header('Content-Type: text/html; charset=UTF-8');
exit('<b>浏览器不支持COOKIE或者不正常访问！</b>');
}
if(!$_SESSION['rand_session'] && $nosecu!=true){
    if(!getspider()){
        $rand_session=md5(uniqid().rand(1,1000));
    $_SESSION['rand_session']=$rand_session;
        exit("<!DOCTYPE HTML>
        <html>
        <head>
        <meta charset=\"UTF-8\"/>
        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1\" />

        <title>安全检查中...</title>
     <script> var i = 5;
  var intervalid;
  intervalid = setInterval(\"fun()\", 1000);
function fun() {
if (i == 0) {
window.location.href = \"?{$_SERVER['QUERY_STRING']}&rand={$rand_session}\";
clearInterval(intervalid);
}
document.getElementById(\"mes\").innerHTML = i;
i--;
}
</script>
<style>
    html, body {width: 100%; height: 100%; margin: 0; padding: 0;}
    body {background-color: #ffffff; font-family: Helvetica, Arial, sans-serif; font-size: 100%;}
    h1 {font-size: 1.5em; color: #404040; text-align: center;}
    p {font-size: 1em; color: #404040; text-align: center; margin: 10px 0 0 0;}
    #spinner {margin: 0 auto 30px auto; display: block;}
    .attribution {margin-top: 20px;}
  </style>
  </head>
<body>
  <table width=\"100%\" height=\"100%\" cellpadding=\"20\">
    <tr>
      <td align=\"center\" valign=\"middle\">
    <noscript><h2>请打开浏览器的javascript，然后刷新浏览器</h2></noscript>
  <h1><span data-translate=\"checking_browser\">浏览器安全检查中...</span></h1>
    <p data-translate=\"process_is_automatic\"></p>
    <p data-translate=\"allow_5_secs\">还剩 <span id=\"mes\">5</span> 秒</p>
  </div>
</div>
  </td>
    </tr>
</table></body></html>");}}

修改function.php

后台增加开启和关闭开关。
修改模板的function.php，在themeConfig方法内，增加如下代码。

$CC= new Typecho_Widget_Helper_Form_Element_Radio('CC',array('1' => _t('关闭五秒盾'),'2' => _t('开启五秒盾')),'1',_t('PHP五秒盾'),_t("开启后对恶意访客进行拦截，在遭受流量攻击后有一定的防御效果，为了用户体验正常情况请关闭。"));
$form->addInput($CC);

修改header.php

修改模板的header.php，在顶部的第二行添加如下代码。

<?php if ($this->options->CC == '2'): ?>
<?php include 'cc.php'; ?>
<?php endif; ?>

在第二步中，模板实现控制后，就可以保存$CC这个php字段的值，所以前台就能将这个值拿出来，进行判断是否引入cc.php，就这样实现了开关控制。

以上就是typecho使用cc五秒盾的过程，但是值得注意的是，应对cc攻击最好的办法仍然是一台性能吊的服务器，配套极强的内部安全策略，我这里提供的办法仅仅可以拦截小程度的攻击，而且仍然需要手动开启，所以一般是被打了之后才能去开，造成了许多的麻烦。