Table of Contents
作品简介
配置
Home Backend Development PHP Tutorial PHP级Web应用防护框架:WAFPHP

PHP级Web应用防护框架:WAFPHP

Jun 20, 2016 pm 12:45 PM

WAFPHP 项目的灵感来自于 SEnginx,由于在使用SEnginx的过程中发现有很多的不可控因素,而且对于小项目而言不希望因为开启某些功能而导致nginx负载过高影响其他核心项目,而且nginx的配置改动所需的权限远远高于PHP的代码改动,因此有了这个PHP级的Web应用防护框架。

作品简介

一个PHP级Web应用防护框架。 旨在提供一个与现有代码互不冲突干扰的PHP级Web应用防护框架,可基于此框架之上开发各种诸如防机器人恶意采集等Web应用防护插件,即插即用,乃居家旅行必备良药。

PS:当然,这只是一种思路,适用于某些特殊场景,它并不能完全替代你的专业防火墙 :)

起步:

// 为避免影响WAFPHP的输出,在加载WAFPHP之前请勿有任何html输出require_once '#your WAFPHP path#/WAFPHP.php';// 单例模式启动WAFPHP$wafPHP = WAFPHP\WAFPHP::getInstance();// 执行脚本检测$wafPHP->runCheck();#Your code#
Copy after login

或者
// 为避免影响WAFPHP的输出,在加载WAFPHP之前请勿有任何html输出require_once '#your WAFPHP path#/WAFPHP.php';// 可根据需求在调用时使用独立配置,默认使用配置文件中的配置$config = WAFPHP\WAFPHP::getCurrentConfig();// 修改特定配置参数$config['SOME_CONFIG'] = 'Your value';// 以自定义配置启动WAFPHP$wafPHP = WAFPHP\WAFPHP::getInstance($config);// 执行脚本检测$wafPHP->runCheck();#Your code#
Copy after login

配置

配置文件路径:

#your WAFPHP path#/Conf/config.default.php

详细配置请参考配置文件中的备注

项目主页:http://www.open-open.com/lib/view/home/1445865140648

Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. Best Graphic Settings
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
R.E.P.O. How to Fix Audio if You Can't Hear Anyone
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
WWE 2K25: How To Unlock Everything In MyRise
1 months ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

cURL in PHP: How to Use the PHP cURL Extension in REST APIs cURL in PHP: How to Use the PHP cURL Extension in REST APIs Mar 14, 2025 am 11:42 AM

The PHP Client URL (cURL) extension is a powerful tool for developers, enabling seamless interaction with remote servers and REST APIs. By leveraging libcurl, a well-respected multi-protocol file transfer library, PHP cURL facilitates efficient execution of various network protocols, including HTTP, HTTPS, and FTP. This extension offers granular control over HTTP requests, supports multiple concurrent operations, and provides built-in security features.

Explain JSON Web Tokens (JWT) and their use case in PHP APIs. Explain JSON Web Tokens (JWT) and their use case in PHP APIs. Apr 05, 2025 am 12:04 AM

JWT is an open standard based on JSON, used to securely transmit information between parties, mainly for identity authentication and information exchange. 1. JWT consists of three parts: Header, Payload and Signature. 2. The working principle of JWT includes three steps: generating JWT, verifying JWT and parsing Payload. 3. When using JWT for authentication in PHP, JWT can be generated and verified, and user role and permission information can be included in advanced usage. 4. Common errors include signature verification failure, token expiration, and payload oversized. Debugging skills include using debugging tools and logging. 5. Performance optimization and best practices include using appropriate signature algorithms, setting validity periods reasonably,

Explain the concept of late static binding in PHP. Explain the concept of late static binding in PHP. Mar 21, 2025 pm 01:33 PM

Article discusses late static binding (LSB) in PHP, introduced in PHP 5.3, allowing runtime resolution of static method calls for more flexible inheritance.Main issue: LSB vs. traditional polymorphism; LSB's practical applications and potential perfo

Framework Security Features: Protecting against vulnerabilities. Framework Security Features: Protecting against vulnerabilities. Mar 28, 2025 pm 05:11 PM

Article discusses essential security features in frameworks to protect against vulnerabilities, including input validation, authentication, and regular updates.

How to send a POST request containing JSON data using PHP's cURL library? How to send a POST request containing JSON data using PHP's cURL library? Apr 01, 2025 pm 03:12 PM

Sending JSON data using PHP's cURL library In PHP development, it is often necessary to interact with external APIs. One of the common ways is to use cURL library to send POST�...

Customizing/Extending Frameworks: How to add custom functionality. Customizing/Extending Frameworks: How to add custom functionality. Mar 28, 2025 pm 05:12 PM

The article discusses adding custom functionality to frameworks, focusing on understanding architecture, identifying extension points, and best practices for integration and debugging.

What exactly is the non-blocking feature of ReactPHP? How to handle its blocking I/O operations? What exactly is the non-blocking feature of ReactPHP? How to handle its blocking I/O operations? Apr 01, 2025 pm 03:09 PM

An official introduction to the non-blocking feature of ReactPHP in-depth interpretation of ReactPHP's non-blocking feature has aroused many developers' questions: "ReactPHPisnon-blockingbydefault...

See all articles