Cookie 防御CC攻击（.htaccess层面实现）

最新推荐文章于 2022-01-22 09:34:41 发布

原创最新推荐文章于 2022-01-22 09:34:41 发布 · 1.6k 阅读

0 ·

CC 4.0 BY-SA版权

本文介绍了一种利用.htaccess实现CC攻击防御的方法，通过设置特定的条件规则来限制恶意请求，确保网站安全运行。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

.htaccess层面COOKIE检测代码

# Cookie 防御CC
RewriteCond %{REQUEST_URI} !^/test.html$ [NC]
RewriteCond %{HTTP_COOKIE} !.*88s5_comAllowFromIP.* [NC]
RewriteCond %{HTTP_COOKIE} !.*88s5_comAllowFromAddr.* [NC]
RewriteCond %{HTTP_USER_AGENT} !.*spider.* [NC]
RewriteCond %{HTTP_USER_AGENT} !.*bot.* [NC]
RewriteRule .*$ /Index.html [R=302,L]

其中第一行和最后一行都要改成你自己的提示页面文件名，

第二和第三三需要改成COOKIE和提示文件里生成的COOKIE值一致

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
 <head>
<title>标题</title>


  <meta name="description" content="关键字" />
<meta name="keywords" content="关键字" />

<SCRIPT LANGUAGE="JavaScript" src="http://www.queyang.com/timeline/statics/jquery-1.5.min.js"></SCRIPT>
 </head>

 <body>
  <div class="panel">

	<div class="panel-content">
	<a href='/'>页面加载中,如未跳转请点击进入</a></span>
	</div>
	<SCRIPT LANGUAGE="JavaScript">
	var phpcms_path = '/';
	var cookie_pre = '88s5_com';
	var cookie_domain = '';
	var cookie_path = '/';

	function setcookie(name, value, days)
	{
		name = cookie_pre+name;
	 var argc = setcookie.arguments.length;
	 var argv = setcookie.arguments;
	 var secure = (argc > 5) ? argv[5] : false;
	 var expire = new Date();
	 if(days==null || days==0) days=1;
	 expire.setTime(expire.getTime() + 3600000*24*days);
	 document.cookie = name + "=" + encodeURIComponent(value) + ("; path=" + cookie_path) + ((cookie_domain == '') ? "" : ("; domain=" + cookie_domain)) + ((secure == true) ? "; secure" : "") + ";expires="+expire.toGMTString();
	}

		$(function () {
			$.getScript("http://counter.sina.com.cn/ip/" , function(){
				setcookie( "AllowFromIP" , ILData[0] );
				setcookie( "AllowFromAddr" , escape(ILData[1]+"-"+ILData[2])  );
			});
		});
		setTimeout( function(){ location.href = "/index.php?" + Math.random(); } , 500 ) ;
	</SCRIPT>
 </body>
</html>