thinkphp5 configuration allows specified ip to access the module-ThinkPHP-php.cn

thinkphp5 configuration allows specified ip to access the module

尚

Release： 2020-04-06 09:08:36

forward

4935 people have browsed it

thinkphp5 configuration allows specified ip to access the module

Add

'allow_module_ip' => ['admin' => '*'], // Set certain IPs to be accessible in config.php Specify the module

['admin' => '*'] All IPs can access the admin module,
['admin' => ['127.0.0.1','192.168.1.100'] ] Only these two IPs can access the admin module

It is best to add it at this location

// 禁止访问模块
&#39;deny_module_list&#39;       => [&#39;common&#39;],
// 设置某些ip可以访问指定模块
&#39;allow_module_ip&#39;        => [&#39;admin&#39; => &#39;*&#39;],
// 默认控制器名
&#39;default_controller&#39;     => &#39;Index&#39;,

Copy after login

Need to modify the framework code

thinkphp/library/think/App.php

The code location is as follows

public static function module($result, $config, $convert = null) {
        if (is_string($result)) {
            $result = explode(&#39;/&#39;, $result);
        }
        $request = Request::instance();
        if ($config[&#39;app_multi_module&#39;]) {
            // 多模块部署
            $module    = strip_tags(strtolower($result[0] ?: $config[&#39;default_module&#39;]));
            $bind      = Route::getBind(&#39;module&#39;);
            $available = false;
            if ($bind) {
                // 绑定模块
                list($bindModule) = explode(&#39;/&#39;, $bind);
                if (empty($result[0])) {
                    $module    = $bindModule;
                    $available = true;
                } elseif ($module == $bindModule) {
                    $available = true;
                }
            } elseif (!in_array($module, $config[&#39;deny_module_list&#39;]) && is_dir(APP_PATH . $module)) {
                $available = true;
            }
            
            //region 设置了限制ip访问模块, 如：&#39;allow_module_ip&#39; => [&#39;admin&#39;=>[&#39;127.0.0.1&#39;]]
            if (isset($config[&#39;allow_module_ip&#39;]) && isset($config[&#39;allow_module_ip&#39;][$module])) {
                $allowIps = $config[&#39;allow_module_ip&#39;][$module];
                if (!in_array($_SERVER[&#39;REMOTE_ADDR&#39;], $allowIps) && $allowIps != &#39;*&#39;) {
                    $available = false;
                }

            }
            //end region

            // 模块初始化
            if ($module && $available) {
                // 初始化模块
                $request->module($module);
                $config = self::init($module);
                // 模块请求缓存检查
                $request->cache($config[&#39;request_cache&#39;], $config[&#39;request_cache_expire&#39;], $config[&#39;request_cache_except&#39;]);
            } else {
                throw new HttpException(404, &#39;module not exists:&#39; . $module);
            }
        } else {
            // 单一模块部署
            $module = &#39;&#39;;
            $request->module($module);
        }
        
        // ......
}

Copy after login