<?php /* API Name:倾丞本地随机图片API Description:支持8种方式返回图片数据--https://blog.qcair.cc/cnapi.html Version:1.0.16 ForPHP:5.6+ Author:倾丞(Jochen)/瑾忆(自醉) Author Url:https://blog.qcair.cc/ Author Email:admin@qcair.cc */ //使用Curl获取远程数据模块 function get_curl($url) { $ch = curl_init(); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE); curl_setopt($ch, CURLOPT_URL, $url); $response = curl_exec($ch); curl_close($ch); //-------如果请求为空 if (empty($response)) { return false; } return $response; } //------------设置区域开始------------ $APIname = "QCAPI-CN-Wallpaper"; //此处填写API名称 $domainPrefix = 'api.ixingchen.org.cn'; //API域名设置 $Block_IP = "off"; //开启恶意IP拦截功能则填写on,反之填写off,如果你的网站开启CDN，请先浏览第80-83行后再开启该功能 $base64Times = "10"; //由于Base64转码会消耗服务器资源，此处填写每分钟限制Base64数据输出次数，例如填写10则单用户每分钟只可调用返回数据10次，填写0或负数则不限制每分钟调用次数 $img_Array = glob("images/wallpaper/*.{gif,jpg,png,jpeg,JPG,PNG,GIF,JPEG,webp}",GLOB_BRACE); //这将获得指定文件夹中所有gif，jpg和png，jpeg图像的数组 //------------设置区域结束------------ //从数组中选择随机图像 $imageFile = array_rand($img_Array); //生成返回的图像URL $imageUrl='https://'.$domainPrefix.'/'.$img_Array[$imageFile]; //反爬虫,反扫描器模块 //获取用户UA信息 $UserUA = $_SERVER['HTTP_USER_AGENT']; //将恶意USER_AGENT存入数组 $BAN_UA = array("FeedDemon", "BOT/0.1 (BOT for JCE)", "CrawlDaddy", "Java", "Feedly", "UniversalFeedParser", "ApacheBench", "Swiftbot", "ZmEu", "Indy Library", "oBot", "jaunty", "YandexBot", "AhrefsBot", "MJ12bot", "WinHttp", "EasouSpider", "HttpClient", "Microsoft URL Control", "YYSpider", "Python-urllib", "lightDeckReports Bot", "HTTrack ", "Apache-HttpClient", "Audit ", "DirBuster", "Pangolin", "Nmap", "sqln", "Hydra", "Parser", "Libwww", "BBBike", "sqlmap", "w3af", "OWASP", "Nikto", "Fimap", "Havij", "BabyKrokodil", "Netsparker", "httperf"); function is_BAN_UA($val) { $UserUA = $_SERVER['HTTP_USER_AGENT']; return stripos($UserUA, $val); } $is_BAN_UA_Arr = array_filter($BAN_UA, "is_BAN_UA"); //禁止空USER_AGENT if (!$UserUA) { header("Content-type: text/html; charset=utf-8"); die('您的访问USER_AGENT被系统判定空，已被安全模块拦截！'); } else { //判断是否为恶意UA if (count($is_BAN_UA_Arr)) { header("Content-type: text/html; charset=utf-8"); die('您的访问USER_AGENT被系统判定为恶意用户，已被安全模块拦截！'); } } //根据用户的浏览器cookie确定同一用户访问API次数 if (!isset($_COOKIE['visits'])) $_COOKIE['visits'] = 0; $visits = $_COOKIE['visits'] + 1; setcookie('visits',$visits,time()+50); //禁止恶意IP地址访问(调用Kos工具箱kostool.cn恶意IP黑名单) if ($Block_IP == 'on' && $visits > 240) { $UserIP = $_SERVER["REMOTE_ADDR"]; //普通获取访客真实IP //$UserIP = $_SERVER["HTTP_X_FORWARDED_FOR"]; //腾讯云CDN获取访客真实IP //$UserIP = $_SERVER["HTTP_CF_CONNECTING_IP"]; //CloudflareCDN获取访客真实IP //注：其他CDN获取方法需要自己查看官方文档或输出Header信息后提取头部取值，若无法理解请关闭恶意IP拦截功能以确保API的正常使用 $BanIP = "http://cloudcc.kostool.cn/kos-defense-cc-attack/KosCcBlackIP.txt"; $KosCcBlackIP_path = "./Main/KosCcBlackIP.txt"; //缓存文件不存在或者超过七天就重新更新一次 if (!file_exists($KosCcBlackIP_path) || floor((time() - filemtime($KosCcBlackIP_path)) / 86400) > 7) { $BanIPData = get_curl($BanIP); file_put_contents($KosCcBlackIP_path, $BanIPData); } else { $BanIPData = file_get_contents($KosCcBlackIP_path); } if (!$BanIPData) { die("<strong>Warning:</strong>资源文件不存在或路径名称填写错误，" . $APIname . " 运行出错位置 file:" . basename(__FILE__) . " on line " . __LINE__ ); } else { if (stripos($BanIPData, $UserIP)) { http_response_code('444'); header("HTTP/1.1 444 Bad Request"); die(); } } } //XML返回 function arrayXml($array, $wrap='RETURN', $upper=true) { // set initial value for XML string # $xml = ''; // wrap XML with $wrap TAG if ($wrap != null) { $xml = "<$wrap>\n"; } // main loop foreach ($array as $key=>$value) { // set tags in uppercase if needed if ($upper == true) { $key = strtoupper($key); } // append to XML string $xml .= "<$key>" . htmlspecialchars(urldecode(trim($value))) . "</$key>"; } // close wrap TAG if needed if ($wrap != null) { $xml .= "\n</$wrap>\n"; } // retu

1个月前