杀毒软件 防火墙 PHPIDS制作php网站服务器三位一体宙斯盾安防

杀毒软件 防火墙 PHPIDS打造php网站服务器三位一体宙斯盾安防

安装步骤：

1、下载phpids ，我测试用的是版本7.

http://www.open-open.com/news/view/cc55a2

2、解压phpids至网站根目录

    3、如果无法解压至根目录可使用mod_rewrite

        RewriteEngine On

        RewriteCond %{REQUEST_URI} ^/phpids(.*)

        RewriteRule ^(.+)$ - [F]

配置使用：

1、编辑config/config.ini.php自定义配置。 无非是设置邮箱，发送邮箱，很简单。

2、 ; die();?>

3、  

4、 ; PHPIDS Config.ini

5、  

6、 ; General configuration settings

7、  

8、  

9、 [General]

10、  

11、     ; basic settings - customize to make the PHPIDS work at all

12、     filter_type     = xml

13、  

14、     ;base_path       = /full/path/to/IDS/

15、     use_base_path   = false

16、  

17、     filter_path     = default_filter.xml

18、     tmp_path        = tmp

19、     scan_keys       = false

20、  

21、     ; in case you want to use a different HTMLPurifier source, specify it here

22、     ; By default, those files are used that are being shipped with PHPIDS

23、     HTML_Purifier_Path   = vendors/htmlpurifier/HTMLPurifier.auto.php

24、     HTML_Purifier_Cache = vendors/htmlpurifier/HTMLPurifier/DefinitionCache/Serializer

25、  

26、     ; define which fields contain html and need preparation before

27、     ; hitting the PHPIDS rules (new in PHPIDS 0.5)

28、     ;html[]          = POST.__wysiwyg

29、  

30、     ; define which fields contain JSON data and should be treated as such

31、     ; for fewer false positives (new in PHPIDS 0.5.3)

32、     ;json[]          = POST.__jsondata

33、  

34、     ; define which fields shouldn't be monitored (a[b]=c should be referenced via a.b)

35、     exceptions[]    = GET.__utmz

36、     exceptions[]    = GET.__utmc

37、  

38、     ; you can use regular expressions for wildcard exceptions - example: /.*foo/i

39、  

40、     ; PHPIDS should run with PHP 5.1.2 but this is untested - set

41、     ; this value to force compatibilty with minor versions

42、     min_php_version = 5.1.6

43、  

44、 ; If you use the PHPIDS logger you can define specific configuration here

45、  

46、 [Logging]

47、  

48、     ; file logging

49、     path            = tmp/phpids_log.txt

50、  

51、     ; email logging

52、  

53、     ; note that enabling safemode you can prevent spam attempts,

54、     ; see documentation

55、     recipients[]    = test@test.com.invalid

56、     subject         = "PHPIDS detected an intrusion attempt!"

57、     header           = "From: info@phpids.org"

58、     envelope        = ""

59、     safemode        = true

60、     urlencode       = true

61、     allowed_rate    = 15

62、  

63、     ; database logging

64、  

65、     wrapper         = "mysql:host=localhost;port=3306;dbname=phpids"

66、     user            = phpids_user

67、     password        = 123456

68、     table           = intrusions

69、  

70、 ; If you would like to use other methods than file caching you can configure them here

71、  

72、 [Caching]

73、  

74、     ; caching:      session|file|database|memcached|none

75、     caching         = file

76、     expiration_time = 600

77、  

78、     ; file cache

79、     path            = tmp/default_filter.cache

80、  

81、     ; database cache

82、     wrapper         = "mysql:host=localhost;port=3306;dbname=phpids"

83、     user            = phpids_user

84、     password        = 123456

85、     table           = cache

86、  

87、     ; memcached

88、     ;host           = localhost

89、     ;port           = 11211

90、     ;key_prefix     = PHPIDS

91、     复制到lib目录下，更名为ids.php

92、

93、  

94、 /**  张迅雷原创，欢迎加qq―― 158393237 讨论

95、  *PHPIDS

96、  *Requirements:PHP5,SimpleXML

97、  *

98、  *Copyright(c)2010PHPIDSgroup(https://phpids.org)

99、  *

100、      *Thisprogramisfreesoftware;youcanredistributeitand/ormodify

101、      *itunderthetermsoftheGNUGeneralPublicLicenseaspublishedby

102、      *theFreeSoftwareFoundation;version2ofthelicense.

103、      *

104、      *Thisprogramisdistributedinthehopethatitwillbeuseful,

105、      *butWITHOUTANYWARRANTY;withouteventheimpliedwarrantyof

106、      *MERCHANTABILITYorFITNESSFORAPARTICULARPURPOSE. Seethe

107、      *GNUGeneralPublicLicenseformoredetails.

108、      */

109、      

110、     // set the include path properly for PHPIDS

111、     set_include_path(

112、         get_include_path()

113、         . PATH_SEPARATOR

114、         . 'lib/'

115、     );

116、      

117、     if (!session_id()) {

118、         session_start();

119、     }

120、      

121、     require_once'IDS/Init.php';

122、      

123、     try {

124、      

125、         /*

126、         * It's pretty easy to get the PHPIDS running

127、         * 1. Define what to scan

128、         *

129、         * Please keep in mind what array_merge does and how this might interfer

130、         * with your variables_order settings

131、         */

132、         $request =array(

133、             'REQUEST' =>$_REQUEST,

134、             'GET' =>$_GET,

135、             'POST' =>$_POST,

136、             'COOKIE' =>$_COOKIE

137、         );

138、      

139、         $init = IDS_Init::init(dirname(__FILE__) . '/IDS/Config/Config.ini.php');

140、      

141、         /**

142、          *Youcanalsoresetthewholeconfiguration

143、          *arrayormergeinowndata

144、          *

145、          *Thisusagedoesn'toverwritealreadyexistingvalues

146、          *$config->setConfig(array('General'=>array('filter_type'=>'xml')));

147、          *

148、          *Thisdoes(see2ndparameter)

149、          *$config->setConfig(array('General'=>array('filter_type'=>'xml')),true);

150、          *

151、          *oryoucanaccesstheconfigdirectlylikehere:

152、          */

153、      

154、         $init->config['General']['base_path'] = dirname(__FILE__) .'/IDS/';

155、         $init->config['General']['use_base_path'] = true;

156、         $init->config['Caching']['caching'] = 'none';

157、      

158、         // 2. Initiate the PHPIDS and fetch the results

159、         $ids =new IDS_Monitor($request,$init);

160、         $result =$ids->run();

161、      

162、         /*

163、         * That's it - now you can analyze the results:

164、         *

165、         * In the result object you will find any suspicious

166、         * fields of the passed array enriched with additional info

167、         *

168、         * Note: it is moreover possible to dump this information by

169、         * simply echoing the result object, since IDS_Report implemented

170、         * a __toString method.

171、         */

172、         if (!$result->isEmpty()) {

173、             echo$result;

174、      

175、             /*

176、             * The following steps are optional to log the results

177、             */

178、             require_once'IDS/Log/File.php';

179、             require_once'IDS/Log/Composite.php';

180、      

181、             $compositeLog =new IDS_Log_Composite();

182、             $compositeLog->addLogger(IDS_Log_File::getInstance($init));

183、      

184、             /*

185、             * Note that you might also use different logging facilities

186、             * such as IDS_Log_Email or IDS_Log_Database

187、             *

188、             * Just uncomment the following lines to test the wrappers

189、             */

190、             /*

191、             *

192、             require_once 'IDS/Log/Email.php';

193、             require_once 'IDS/Log/Database.php';

194、      

195、             $compositeLog->addLogger(

196、                 IDS_Log_Email::getInstance($init),

197、                 IDS_Log_Database::getInstance($init)

198、             );

199、             */

200、             $compositeLog->execute($result);

201、      

202、      

203、         } else {

204、             echo'No attack detected - click for an example attack';

205、         }

206、     } catch (Exception$e) {

207、         /*

208、         * sth went terribly wrong - maybe the

209、         * filter rules weren't found?

210、         */

211、         printf(

212、             'An error occured: %s',

213、             $e->getMessage()

214、         );

215、     }

2、编辑php.ini，加入以下内容:

auto_prepend_file=”D:\MYOA\webroot\phpids\lib\ids.php”