Zsoner 发表于 2020-4-16 13:10:27

Nginx免费防火墙 编码问题以及不足处

本帖最后由 Zsoner 于 2020-5-18 15:22 编辑


1.遇到非utf8编码文件如gbk扫描,基本上会报错
2.现如今 , php站点被黑后,不在仅仅 只是写入php shell ,同时有可能会出现js 修改劫持,建议对js 和html可以扫描,同时将 sfhufh2.com 加入黑名单(劫持站点影响量巨大)






===============================以下是以前写的==================================

python版本:3.7      宝塔面包:7.2.0


Traceback (most recent call last):
File "class/flask_sockets.py", line 30, in __call__
handler, values = adapter.match()
File "/www/server/panel/pyenv/lib/python3.7/site-packages/werkzeug/routing.py", line 1945, in match
raise NotFound()
werkzeug.exceptions.NotFound: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "class/panelPlugin.py", line 1715, in a
return eval(execStr)
File "", line 1, in
File "plugin/free_waf/free_waf_main.py", line 116, in san_dir
result = self.scan(file, rule)
File "plugin/free_waf/free_waf_main.py", line 71, in scan
if re.compile(r).findall(data):
UnboundLocalError: local variable 'data' referenced before assignment
我追踪了一下代码,发现是data = open(file).read()有可能读不到内容,造成后面正则匹配报错,我调整了代码使其可以继续下去




不过有一点还是不清楚,我的文件是没问题的为什么读取不到,该机子配置小只有1G1H



页: [1]
查看完整版本: Nginx免费防火墙 编码问题以及不足处