【已解答】WAF验证码无限循环
基础信息:面板、插件版本:Linux面板11.4.1 Nginx防火墙 9.8.5系统版本:
CentOS 7.9.2009 x86_64(Py3.7.9)
问题描述:
WAF设置以下自定义规则
url 不带参数 开头为 /wp-login.php
进入wordpress后台登录页,验证码无限循环。
相关截图(日志、错误):
data:image/png;base64,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虽然显示命中次数0,但是实际已经触发验证码,多次验证之后会触发cc攻击封禁。 测试正常的
可以检查一下是否触发了其他的规则,在自定义规则优先级前面的会先执行前面的
页:
[1]