Web インターフェイスのセキュリティを向上させるための Linux サーバー展開戦略。

# 允许来自特定IP的HTTP请求
iptables -A INPUT -p tcp -s 192.168.0.1 -m tcp --dport 80 -j ACCEPT

# 允许来自特定IP的HTTPS请求
iptables -A INPUT -p tcp -s 192.168.0.1 -m tcp --dport 443 -j ACCEPT

# 默认情况下拒绝所有其他访问
iptables -A INPUT -j DROP

server {
    listen 443 ssl;

    ssl_certificate /path/to/certificate.crt;
    ssl_certificate_key /path/to/private.key;

    // 其他配置项...

    location / {
        // Web接口配置...
    }
}

location / {
    allow 192.168.0.1;
    deny all;

    // Web接口配置...
}

from flask import Flask, request, jsonify
from hashlib import sha256

app = Flask(__name__)

# 模拟存储用户密码的数据库
users = {
    "admin": {
        "password": "12e684baad164527e318650080fab40f3cd0559a54ef9e80bbe326df4461c032",
        "salt": "abcd1234"
    }
}

@app.route('/login', methods=['POST'])
def login():
    data = request.get_json()
    username = data['username']
    password = data['password']

    # 从数据库获取用户信息
    user = users.get(username)

    if user is None:
        return jsonify({'message': 'Invalid username'}), 401

    # 计算密码哈希值
    password_hash = sha256((password + user['salt']).encode()).hexdigest()

    if password_hash != user['password']:
        return jsonify({'message': 'Invalid password'}), 401

    return jsonify({'message': 'Login success'})

if __name__ == '__main__':
    app.run()