Nginx免费防火墙 编码问题以及不足处

1.遇到非utf8编码文件如gbk扫描,基本上会报错
2.现如今 , php站点被黑后，不在仅仅 只是写入php shell ,同时有可能会出现js 修改劫持，建议对js 和html可以扫描，同时将 sfhufh2.com 加入黑名单(劫持站点影响量巨大)






===============================以下是以前写的==================================

python版本：3.7      宝塔面包：7.2.0

1. Traceback (most recent call last):
   
2. File "class/flask_sockets.py", line 30, in __call__
   
3. handler, values = adapter.match()
   
4. File "/www/server/panel/pyenv/lib/python3.7/site-packages/werkzeug/routing.py", line 1945, in match
   
5. raise NotFound()
   
6. werkzeug.exceptions.NotFound: 404 Not Found: The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.
   
7. 
   
8. During handling of the above exception, another exception occurred:
   
9. 
   
10. Traceback (most recent call last):
    
11. File "class/panelPlugin.py", line 1715, in a
    
12. return eval(execStr)
    
13. File "", line 1, in
    
14. File "plugin/free_waf/free_waf_main.py", line 116, in san_dir
    
15. result = self.scan(file, rule)
    
16. File "plugin/free_waf/free_waf_main.py", line 71, in scan
    
17. if re.compile(r).findall(data):
    
18. UnboundLocalError: local variable 'data' referenced before assignment

复制代码

我追踪了一下代码，发现是

1. data = open(file).read()

复制代码

有可能读不到内容，造成后面正则匹配报错，我调整了代码使其可以继续下去




不过有一点还是不清楚，我的文件是没问题的为什么读取不到，该机子配置小只有1G1H

to_pay.zip (875 Bytes, 下载次数: 179636)

2020-4-16 13:49 上传

点击文件名下载附件