1158 lines
55 KiB
PHP
1158 lines
55 KiB
PHP
<?php
|
||
/**==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==*==**/
|
||
|
||
/**
|
||
* 日志页二次风控解析专用(与 byApiRisk 逻辑对齐,仅供 FpRiskExplain 复算展示,不参与线上判定)。
|
||
*
|
||
* 与 cloakjs.php 的 hdata 字段对齐:
|
||
* - 基础模式 (risk_enhanced=false): canvas/webgl/browser/fonts 等为 null,仅跑轻量规则
|
||
* - 加强模式 (risk_enhanced=true): 完整 Canvas/WebGL/WebGPU/字体/UAParser 规则
|
||
*
|
||
* 判定逻辑(API 侧): risk_level >= risk_number → 拦截 (result=false)
|
||
*/
|
||
class LogRiskAnalyzer {
|
||
public $countries;
|
||
public $countriesByContinent;
|
||
public $langLabels;
|
||
public $countryLangMap;
|
||
public $commonResolutions;
|
||
public $timezones;
|
||
public $countryTimezoneMap;
|
||
public $unqiePixels;
|
||
|
||
private $riskLevel = 0;
|
||
private $riskFactors = [];
|
||
private $fingerprint;
|
||
private $fingerprintData;
|
||
/** @var bool 是否加强判断模式 */
|
||
private $enhanced = false;
|
||
/** @var array<string,int> 各类别已计分,用于封顶防叠加 */
|
||
private $categoryScores = [];
|
||
|
||
/** 各类别单次 analyze 内加分上限 */
|
||
private const CATEGORY_CAPS = [
|
||
'ua_bot' => 40,
|
||
'webgl_virtual' => 35,
|
||
'webgl_params' => 15,
|
||
'geo_lang_tz' => 15,
|
||
'screen' => 35,
|
||
'hardware' => 15,
|
||
'hostname' => 25,
|
||
];
|
||
|
||
public function __construct($data) {
|
||
$this->fingerprintData = $data;
|
||
$this->enhanced = $this->detectEnhancedMode($data);
|
||
}
|
||
|
||
/**
|
||
* 优先读 hdata.risk_enhanced;其次根据 canvas/webgl/browser 是否齐全推断
|
||
*/
|
||
private function detectEnhancedMode(array $data): bool {
|
||
if (!empty($data['risk_enhanced'])) {
|
||
return true;
|
||
}
|
||
return !empty($data['canvas']) && is_array($data['canvas'])
|
||
&& !empty($data['webgl']) && is_array($data['webgl'])
|
||
&& !empty($data['browser']) && is_array($data['browser']);
|
||
}
|
||
|
||
/**
|
||
* 带类别封顶的加分
|
||
*/
|
||
private function addRisk(string $category, int $points, string $reason, ?int $cap = null): void {
|
||
if ($points === 0) {
|
||
return;
|
||
}
|
||
$max = $cap ?? (self::CATEGORY_CAPS[$category] ?? 100);
|
||
$used = $this->categoryScores[$category] ?? 0;
|
||
|
||
if ($points > 0) {
|
||
$room = max(0, $max - $used);
|
||
$applied = min($points, $room);
|
||
if ($applied <= 0) {
|
||
return;
|
||
}
|
||
$this->categoryScores[$category] = $used + $applied;
|
||
} else {
|
||
$applied = $points;
|
||
}
|
||
|
||
$this->riskLevel += $applied;
|
||
$this->riskFactors[] = $reason;
|
||
}
|
||
|
||
private function getScreenWidth(): int {
|
||
$screen = $this->fingerprintData['screen'] ?? null;
|
||
if (!is_array($screen)) {
|
||
return 0;
|
||
}
|
||
if (isset($screen['width'])) {
|
||
return (int) $screen['width'];
|
||
}
|
||
return (int) ($screen[0] ?? 0);
|
||
}
|
||
|
||
private function hasTouchscreen(): bool {
|
||
$touch = $this->fingerprintData['touchscreen'] ?? [0, false, false];
|
||
return is_array($touch) && (
|
||
($touch[0] ?? 0) > 0 || !empty($touch[1]) || !empty($touch[2])
|
||
);
|
||
}
|
||
|
||
private function uaIndicatesTablet(string $ua): bool {
|
||
return (bool) preg_match('/iPad|Tablet|SM-T|Kindle|Silk\/|PlayBook|Tab(?:let)?\b/i', $ua);
|
||
}
|
||
|
||
private function uaIndicatesMobile(string $ua): bool {
|
||
return (bool) preg_match(
|
||
'/iPhone|iPod|Android.*Mobile|Mobile\/|IEMobile|webOS|BlackBerry|Opera Mini|Mobile Safari/i',
|
||
$ua
|
||
);
|
||
}
|
||
|
||
private function platformIndicatesMobile(): bool {
|
||
$platform = (string) ($this->fingerprintData['platform'] ?? '');
|
||
if ($platform === '') {
|
||
return false;
|
||
}
|
||
return (bool) preg_match('/iPhone|iPod|Android/i', $platform);
|
||
}
|
||
|
||
private function platformIndicatesTablet(): bool {
|
||
$platform = (string) ($this->fingerprintData['platform'] ?? '');
|
||
return $platform !== '' && (bool) preg_match('/iPad/i', $platform);
|
||
}
|
||
|
||
/**
|
||
* 推断设备类型。
|
||
*
|
||
* 注意:基础模式 browser=null;iOS「请求桌面网站」会发送 Mac 形态 UA,
|
||
* 此时不能仅依赖 UAParser/UA,还需结合 platform 与 touchscreen。
|
||
*/
|
||
private function getDeviceType(): string {
|
||
$ua = (string) ($this->fingerprintData['userAgent'] ?? '');
|
||
|
||
if ($this->uaIndicatesTablet($ua) || $this->platformIndicatesTablet()) {
|
||
return 'tablet';
|
||
}
|
||
if ($this->uaIndicatesMobile($ua) || $this->platformIndicatesMobile()) {
|
||
return 'mobile';
|
||
}
|
||
|
||
$parsedType = strtolower((string) ($this->fingerprintData['browser']['device']['type'] ?? ''));
|
||
if (in_array($parsedType, ['mobile', 'tablet', 'wearable', 'smarttv', 'console', 'embedded', 'xr'], true)) {
|
||
return $parsedType;
|
||
}
|
||
|
||
// iOS 桌面模式:UA 形如 Macintosh,但 platform/touch/窄屏仍暴露为手机
|
||
if ($this->hasTouchscreen()) {
|
||
$screenWidth = $this->getScreenWidth();
|
||
if ($screenWidth > 0 && $screenWidth < 1024) {
|
||
return 'mobile';
|
||
}
|
||
}
|
||
|
||
if ($parsedType !== '') {
|
||
return $parsedType;
|
||
}
|
||
|
||
return 'desktop';
|
||
}
|
||
|
||
/**
|
||
* 是否应对其应用「桌面环境」专属启发式(如无任务栏时 availScreen === screen)。
|
||
* 移动端该等式恒成立,不能作为风险信号。
|
||
*/
|
||
private function shouldApplyDesktopScreenHeuristics(): bool {
|
||
if ($this->isMobileDeviceType($this->getDeviceType())) {
|
||
return false;
|
||
}
|
||
if ($this->hasTouchscreen()) {
|
||
return false;
|
||
}
|
||
|
||
$ua = (string) ($this->fingerprintData['userAgent'] ?? '');
|
||
if ($this->uaIndicatesMobile($ua) || $this->uaIndicatesTablet($ua)) {
|
||
return false;
|
||
}
|
||
if ($this->platformIndicatesMobile() || $this->platformIndicatesTablet()) {
|
||
return false;
|
||
}
|
||
|
||
return true;
|
||
}
|
||
|
||
private function getOsName(): ?string {
|
||
$platform = (string) ($this->fingerprintData['platform'] ?? '');
|
||
if (preg_match('/iPad|iPhone|iPod/i', $platform)) {
|
||
return 'iOS';
|
||
}
|
||
|
||
if (!empty($this->fingerprintData['browser']['os']['name'])) {
|
||
$os = (string) $this->fingerprintData['browser']['os']['name'];
|
||
if (preg_match('/macOS/i', $os) && ($this->platformIndicatesMobile() || $this->platformIndicatesTablet())) {
|
||
return 'iOS';
|
||
}
|
||
return $os;
|
||
}
|
||
|
||
$ua = (string) ($this->fingerprintData['userAgent'] ?? '');
|
||
if (preg_match('/Windows/i', $ua)) {
|
||
return 'Windows';
|
||
}
|
||
if (preg_match('/Android/i', $ua)) {
|
||
return 'Android';
|
||
}
|
||
if (preg_match('/iPhone|iPad|iOS/i', $ua)) {
|
||
return 'iOS';
|
||
}
|
||
if (preg_match('/Mac OS X|Macintosh/i', $ua)) {
|
||
if ($this->platformIndicatesMobile() || $this->platformIndicatesTablet() || $this->hasTouchscreen()) {
|
||
return 'iOS';
|
||
}
|
||
return 'macOS';
|
||
}
|
||
return null;
|
||
}
|
||
|
||
private function isMobileDeviceType(string $deviceType): bool {
|
||
return in_array($deviceType, ['mobile', 'tablet'], true);
|
||
}
|
||
|
||
// 执行完整风险评估
|
||
public function analyze() {
|
||
// === 两种模式均执行:强自动化 / 轻量环境 ===
|
||
$this->checkWebDriver();
|
||
$this->checkUserAgent();
|
||
$this->checkHardwareConcurrency();
|
||
$this->checkDeviceMemory();
|
||
$this->checkTouchscreenConsistency();
|
||
$this->checkScreenResolution();
|
||
$this->checkTimezoneAnomalies();
|
||
$this->checkLanguages();
|
||
|
||
// === 仅加强模式:深度指纹 ===
|
||
if ($this->enhanced) {
|
||
$this->hashFingerprint();
|
||
$this->checkWebGLRenderer();
|
||
$this->checkBrowserFeatures();
|
||
$this->checkFonts();
|
||
$this->checkUserAgentGpuConsistency();
|
||
$this->checkTouchscreenGpuConsistency();
|
||
}
|
||
|
||
// 反向 DNS 慢且 CDN 误伤高,两种模式均降权且仅在 IP 存在时执行
|
||
$this->checkHostname();
|
||
|
||
$this->riskLevel = min(100, max(0, $this->riskLevel));
|
||
|
||
return [
|
||
'fingerprint' => $this->fingerprint,
|
||
'risk_level' => $this->riskLevel,
|
||
'risk_factors' => $this->riskFactors,
|
||
'risk_enhanced' => $this->enhanced,
|
||
'risk_category' => $this->getRiskCategory(),
|
||
'risk_description' => $this->getRiskDescription(),
|
||
];
|
||
}
|
||
|
||
public function hashFingerprint() {
|
||
if (empty($this->fingerprintData['canvas']) || !is_array($this->fingerprintData['canvas'])) {
|
||
return;
|
||
}
|
||
if (($this->fingerprintData['canvas'][0] ?? '') === 'canvas winding:yes') {
|
||
$this->fingerprint = md5(
|
||
($this->fingerprintData['canvas'][0] ?? '') . ($this->fingerprintData['canvas'][1] ?? '')
|
||
);
|
||
} else {
|
||
$this->fingerprint = null;
|
||
$this->addRisk('canvas', 35, 'Canvas 指纹无效或 winding 异常');
|
||
}
|
||
}
|
||
|
||
private function checkWebDriver() {
|
||
if (!empty($this->fingerprintData['webdriver'])) {
|
||
// 55 分:在 risk_number=50~55 时均可单独拦截
|
||
$this->addRisk('webdriver', 55, '检测到 WebDriver,通常与自动化工具相关', 55);
|
||
}
|
||
}
|
||
|
||
private function checkUserAgent() {
|
||
if (empty($this->fingerprintData['userAgent'])) {
|
||
return;
|
||
}
|
||
|
||
$userAgent = strtolower($this->fingerprintData['userAgent']);
|
||
$botIndicators = [
|
||
'webdriver', 'selenium', 'phantom', 'headless', 'chromedriver', 'geckodriver',
|
||
'bot', 'crawl', 'spider', 'slurp', 'scrap', 'robot',
|
||
'facebookexternalhit', 'adsbot-google', 'google-adwords-instant',
|
||
'emulator', 'simulator', 'screenshot', 'monitoring',
|
||
];
|
||
|
||
$matched = false;
|
||
foreach ($botIndicators as $indicator) {
|
||
if (stripos($userAgent, $indicator) !== false) {
|
||
$matched = true;
|
||
$this->addRisk('ua_bot', 30, "User Agent 包含自动化/爬虫特征: {$indicator}");
|
||
break;
|
||
}
|
||
}
|
||
|
||
if (!$matched && stripos($userAgent, 'semrush') !== false) {
|
||
$this->addRisk('ua_bot', 25, 'User Agent 包含 SEO 爬虫特征: semrush');
|
||
}
|
||
|
||
if (stripos($userAgent, 'headlesschrome') !== false) {
|
||
$this->addRisk('ua_bot', 40, '检测到无头 Chrome,通常用于自动化', 40);
|
||
}
|
||
|
||
$browsers = ['Chrome', 'Firefox', 'Safari', 'Edge'];
|
||
$osList = ['Windows', 'Mac', 'Android', 'iOS', 'Linux'];
|
||
$browserDetected = false;
|
||
$osDetected = false;
|
||
|
||
foreach ($browsers as $browser) {
|
||
if (stripos($this->fingerprintData['userAgent'], $browser) !== false) {
|
||
$browserDetected = true;
|
||
break;
|
||
}
|
||
}
|
||
foreach ($osList as $osName) {
|
||
if (stripos($this->fingerprintData['userAgent'], $osName) !== false) {
|
||
$osDetected = true;
|
||
break;
|
||
}
|
||
}
|
||
|
||
if (!$browserDetected || !$osDetected) {
|
||
$this->addRisk('ua_bot', $this->enhanced ? 12 : 8, '异常 User Agent: 无法识别常见浏览器或操作系统');
|
||
}
|
||
|
||
if (isset($this->fingerprintData['automation']) && is_array($this->fingerprintData['automation'])) {
|
||
$auto = $this->fingerprintData['automation'];
|
||
if (!empty($auto['phantom']) || !empty($auto['selenium'])) {
|
||
$this->addRisk('automation', 35, '检测到 PhantomJS 或 Selenium 相关组件', 35);
|
||
}
|
||
if (strpos($userAgent, 'chrome') !== false && empty($auto['isChrome'])) {
|
||
$this->addRisk('automation', $this->enhanced ? 18 : 12, 'UA 声称 Chrome 但缺少 window.chrome 对象');
|
||
}
|
||
}
|
||
}
|
||
|
||
/** 加强模式:UA 解析 OS 与 GPU renderer 交叉验证 */
|
||
private function checkUserAgentGpuConsistency() {
|
||
$renderer = (string) ($this->fingerprintData['renderer'] ?? '');
|
||
$os = $this->getOsName();
|
||
if ($renderer === '' || $os === null) {
|
||
return;
|
||
}
|
||
|
||
if (preg_match('/Windows/i', $os)) {
|
||
if (stripos($renderer, 'apple') !== false) {
|
||
$this->addRisk('gpu_os', 15, 'Windows UA 但检测到 Apple GPU renderer,疑似伪造');
|
||
}
|
||
} elseif (preg_match('/macOS/i', $os)) {
|
||
if (stripos($renderer, 'nvidia') !== false) {
|
||
$this->addRisk('gpu_os', 12, 'macOS UA 但检测到 NVIDIA GPU,高度不一致');
|
||
}
|
||
if (stripos($renderer, 'direct3d') !== false) {
|
||
$this->addRisk('gpu_os', 15, 'macOS UA 但 renderer 含 Direct3D(Windows 特征)');
|
||
}
|
||
}
|
||
}
|
||
|
||
private function checkWebGLRenderer() {
|
||
if (empty($this->fingerprintData['renderer'])) {
|
||
return;
|
||
}
|
||
|
||
$renderer = (string) $this->fingerprintData['renderer'];
|
||
$virtualRenderers = [
|
||
'llvmpipe', 'swiftshader', 'software renderer', 'virtualbox', 'vmware',
|
||
'qemu', 'parallels', 'hyper-v', 'headless', 'mesa offscreen',
|
||
];
|
||
|
||
foreach ($virtualRenderers as $virt) {
|
||
if (stripos($renderer, $virt) !== false) {
|
||
$this->addRisk('webgl_virtual', 35, "检测到虚拟/软件渲染器: {$renderer}");
|
||
break;
|
||
}
|
||
}
|
||
|
||
if (empty($this->fingerprintData['webgl']) || !is_array($this->fingerprintData['webgl'])) {
|
||
return;
|
||
}
|
||
|
||
$webgl = $this->fingerprintData['webgl'];
|
||
$extensionsRaw = isset($webgl[1]) ? (string) $webgl[1] : '';
|
||
$extensions = $extensionsRaw !== '' ? explode(';', $extensionsRaw) : [];
|
||
if (count($extensions) > 0 && count($extensions) < 28) {
|
||
$this->addRisk('webgl_params', 8, 'WebGL 扩展数量较少');
|
||
}
|
||
|
||
$lineWidthRangeStr = isset($webgl[2])
|
||
? str_replace('webgl aliased line width range:', '', (string) $webgl[2])
|
||
: '';
|
||
$lineWidthRange = $lineWidthRangeStr ? json_decode($lineWidthRangeStr, true) : [0, 0];
|
||
if (is_array($lineWidthRange) && $lineWidthRange[0] == 1 && $lineWidthRange[1] == 1) {
|
||
$this->addRisk('webgl_params', 2, 'Aliased line width range 为 [1,1]');
|
||
}
|
||
|
||
$maxTexture = isset($webgl[15])
|
||
? (int) str_replace('webgl max texture size:', '', (string) $webgl[15])
|
||
: 0;
|
||
if ($maxTexture > 0 && $maxTexture < 8192) {
|
||
$this->addRisk('webgl_params', 2, "MAX_TEXTURE_SIZE 偏低 ({$maxTexture})");
|
||
}
|
||
|
||
$maxFragment = isset($webgl[12])
|
||
? (int) str_replace('webgl max fragment uniform vectors:', '', (string) $webgl[12])
|
||
: 0;
|
||
if ($maxFragment > 0 && $maxFragment < 1024) {
|
||
$this->addRisk('webgl_params', 2, "MAX_FRAGMENT_UNIFORM_VECTORS 偏低 ({$maxFragment})");
|
||
}
|
||
|
||
$maxVarying = isset($webgl[16])
|
||
? (int) str_replace('webgl max varying vectors:', '', (string) $webgl[16])
|
||
: 0;
|
||
if ($maxVarying > 0 && $maxVarying < 16) {
|
||
$this->addRisk('webgl_params', 2, "MAX_VARYING_VECTORS 偏低 ({$maxVarying})");
|
||
}
|
||
|
||
$maxViewportStr = isset($webgl[20])
|
||
? str_replace('webgl max viewport dims:', '', (string) $webgl[20])
|
||
: '';
|
||
$maxViewport = $maxViewportStr ? json_decode($maxViewportStr, true) : [0, 0];
|
||
if (is_array($maxViewport) && $maxViewport[0] > 0 && $maxViewport[0] < 8192) {
|
||
$this->addRisk('webgl_params', 2, 'MAX_VIEWPORT_DIMS 偏低');
|
||
}
|
||
|
||
$maxAniso = isset($webgl[9])
|
||
? (int) str_replace('webgl max anisotropy:', '', (string) $webgl[9])
|
||
: 0;
|
||
if ($maxAniso > 0 && $maxAniso <= 2) {
|
||
$this->addRisk('webgl_params', 4, '各向异性过滤不支持或极弱');
|
||
}
|
||
|
||
$antialiasing = isset($webgl[5])
|
||
? str_replace('webgl antialiasing:', '', (string) $webgl[5])
|
||
: '';
|
||
if ($antialiasing !== '' && $antialiasing !== 'yes') {
|
||
$this->addRisk('webgl_params', 8, '请求抗锯齿但未启用,常见于软件渲染');
|
||
}
|
||
}
|
||
|
||
private function checkHostname() {
|
||
$ip = trim((string) ($this->fingerprintData['ip'] ?? ''));
|
||
if ($ip === '' || !filter_var($ip, FILTER_VALIDATE_IP)) {
|
||
return;
|
||
}
|
||
|
||
$hostname = @gethostbyaddr($ip);
|
||
if (!$hostname || $hostname === $ip) {
|
||
return;
|
||
}
|
||
|
||
if (preg_match('/\.googlebot\.com$/i', $hostname)) {
|
||
$this->addRisk('hostname', 25, '反向 DNS 指向 Google 爬虫');
|
||
} elseif (preg_match('/\.facebook\.com$/i', $hostname)) {
|
||
$this->addRisk('hostname', 25, '反向 DNS 指向 Facebook 爬虫');
|
||
} elseif (preg_match('/\.tiktok\.com$/i', $hostname)) {
|
||
$this->addRisk('hostname', 25, '反向 DNS 指向 TikTok 爬虫');
|
||
}
|
||
}
|
||
|
||
private function checkHardwareConcurrency() {
|
||
if (empty($this->fingerprintData['hardwareConcurrency'])) {
|
||
return;
|
||
}
|
||
|
||
$cores = (int) $this->fingerprintData['hardwareConcurrency'];
|
||
if ($cores <= 1) {
|
||
$this->addRisk('hardware', $this->enhanced ? 12 : 8, "硬件并发数极低: {$cores} 核");
|
||
} elseif ($cores === 2 && $this->enhanced) {
|
||
$this->addRisk('hardware', 5, "硬件并发数偏低: {$cores} 核");
|
||
}
|
||
}
|
||
|
||
private function checkDeviceMemory() {
|
||
if (!isset($this->fingerprintData['deviceMemory']) || $this->fingerprintData['deviceMemory'] === '') {
|
||
return;
|
||
}
|
||
|
||
$memory = (float) $this->fingerprintData['deviceMemory'];
|
||
if ($memory > 0 && $memory < 2) {
|
||
$this->addRisk('hardware', $this->enhanced ? 8 : 5, "设备内存偏低: {$memory}GB");
|
||
}
|
||
}
|
||
|
||
private function checkTouchscreenConsistency() {
|
||
$deviceType = $this->getDeviceType();
|
||
$isMobile = $this->isMobileDeviceType($deviceType);
|
||
|
||
$touch = $this->fingerprintData['touchscreen'] ?? [0, false, false];
|
||
$hasTouchscreen = (is_array($touch) && (
|
||
($touch[0] ?? 0) > 0 || !empty($touch[1]) || !empty($touch[2])
|
||
));
|
||
|
||
if ($isMobile && !$hasTouchscreen) {
|
||
$this->addRisk('touch', $this->enhanced ? 18 : 12, '移动设备报告无触摸屏,可能是自动化环境');
|
||
}
|
||
|
||
if ($deviceType === 'desktop' && $hasTouchscreen) {
|
||
$screenWidth = $this->getScreenWidth();
|
||
if ($screenWidth > 0 && $screenWidth < 1024) {
|
||
$this->addRisk('touch', 5, '桌面设备有触摸屏但分辨率异常低');
|
||
}
|
||
}
|
||
|
||
if ($isMobile && !empty($this->fingerprintData['isEmulators'])) {
|
||
$this->addRisk('touch', 15, '设备可能是仿真器(无加速/陀螺仪)');
|
||
}
|
||
|
||
if ($this->enhanced && $isMobile) {
|
||
$os = $this->getOsName();
|
||
if ($os !== null && !preg_match('/Android|iOS/i', $os)) {
|
||
$this->addRisk('touch', 10, '移动端 UA 但 OS 非 Android/iOS');
|
||
}
|
||
}
|
||
}
|
||
|
||
private function checkTouchscreenGpuConsistency() {
|
||
if (empty($this->fingerprintData['renderer'])) {
|
||
return;
|
||
}
|
||
$deviceType = $this->getDeviceType();
|
||
if (!$this->isMobileDeviceType($deviceType)) {
|
||
return;
|
||
}
|
||
if (preg_match('/(nvidia|geforce|radeon)/i', (string) $this->fingerprintData['renderer'])) {
|
||
$this->addRisk('gpu_os', 12, '移动端 UA 但检测到桌面级 GPU (NVIDIA/AMD)');
|
||
}
|
||
}
|
||
|
||
private function checkScreenResolution() {
|
||
if (empty($this->fingerprintData['screen']) || !is_array($this->fingerprintData['screen'])) {
|
||
return;
|
||
}
|
||
|
||
$screenSize = $this->fingerprintData['screen'];
|
||
$screenWidth = (int) ($screenSize[0] ?? ($screenSize['width'] ?? 0));
|
||
$screenHeight = (int) ($screenSize[1] ?? ($screenSize['height'] ?? 0));
|
||
|
||
$availScreenSize = $this->fingerprintData['availScreen'] ?? [0, 0];
|
||
$availScreenWidth = (int) ($availScreenSize[0] ?? ($availScreenSize['width'] ?? 0));
|
||
$availScreenHeight = (int) ($availScreenSize[1] ?? ($availScreenSize['height'] ?? 0));
|
||
|
||
if ($screenWidth <= 0 || $screenHeight <= 0 || $availScreenWidth <= 0 || $availScreenHeight <= 0) {
|
||
$this->addRisk('screen', 40, '检测到无效或零分辨率', 40);
|
||
return;
|
||
}
|
||
|
||
if ($screenWidth < 300 || $screenHeight < 400) {
|
||
$this->addRisk('screen', 15, '分辨率宽或高过小');
|
||
}
|
||
|
||
// 仅真实桌面环境:手机/平板 screen 与 availScreen 相同是正常现象
|
||
if ($this->enhanced && $this->shouldApplyDesktopScreenHeuristics()) {
|
||
if ($screenWidth === $availScreenWidth && $screenHeight === $availScreenHeight) {
|
||
$this->addRisk('screen', 10, '桌面可用分辨率与屏幕分辨率完全相同(常见于无界面自动化)');
|
||
}
|
||
|
||
$widthDiff = $screenWidth - $availScreenWidth;
|
||
$heightDiff = $screenHeight - $availScreenHeight;
|
||
if ($widthDiff < 10 && $heightDiff < 10 && $screenWidth > 1000) {
|
||
$this->addRisk('screen', 8, '桌面可用区域与屏幕尺寸差异过小');
|
||
}
|
||
}
|
||
|
||
$dpr = $this->fingerprintData['devicePixelRatio'] ?? null;
|
||
if ($dpr !== null && ($dpr < 0.5 || $dpr > 5)) {
|
||
$this->addRisk('screen', $this->enhanced ? 18 : 12, "异常设备像素比: {$dpr}");
|
||
}
|
||
|
||
if (
|
||
isset($this->fingerprintData['scale'], $this->fingerprintData['visualViewportOffset'])
|
||
&& is_array($this->fingerprintData['visualViewportOffset'])
|
||
) {
|
||
if ($this->fingerprintData['scale'] != 1 || ($this->fingerprintData['visualViewportOffset'][0] ?? 0) != 0) {
|
||
$this->addRisk('screen', -8, '视口存在缩放或偏移,降低自动化嫌疑');
|
||
}
|
||
}
|
||
}
|
||
|
||
private function checkBrowserFeatures() {
|
||
if (!$this->enhanced) {
|
||
return;
|
||
}
|
||
|
||
$deviceType = $this->getDeviceType();
|
||
$webglSupported = !empty($this->fingerprintData['webgl']);
|
||
$isModernBrowser = preg_match(
|
||
'/chrome\/(8[0-9]|9[0-9]|1[0-9]{2})|firefox\/(7[5-9]|8[0-9]|9[0-9]|1[0-9]{2})/i',
|
||
(string) ($this->fingerprintData['userAgent'] ?? '')
|
||
);
|
||
|
||
if ($isModernBrowser && !$webglSupported) {
|
||
$this->addRisk('browser_feat', 10, '现代浏览器但不支持 WebGL,可能是受限环境');
|
||
}
|
||
|
||
$webrtcSupported = !empty($this->fingerprintData['experimental'][0]['isWebRTCSupported']);
|
||
if (!$webrtcSupported) {
|
||
$this->addRisk('browser_feat', 5, '不支持 WebRTC(弱信号,隐私浏览器亦可能)');
|
||
}
|
||
|
||
$webGPUSupported = !empty($this->fingerprintData['webGPU']);
|
||
if ($webGPUSupported && !empty($this->fingerprintData['webGpuData']) && is_array($this->fingerprintData['webGpuData'])) {
|
||
$webGPU = $this->fingerprintData['webGpuData'];
|
||
$desc = (string) ($webGPU['adapterInfo']['description'] ?? '');
|
||
if ($desc !== '' && stripos($desc, 'SwiftShader') !== false) {
|
||
$this->addRisk('browser_feat', 45, 'WebGPU 检测到 SwiftShader 软件渲染', 45);
|
||
} elseif ($desc !== '' && preg_match('/(VMware|VirtualBox|Parallels)/i', $desc)) {
|
||
$this->addRisk('browser_feat', 30, 'WebGPU 检测到虚拟机 GPU', 30);
|
||
}
|
||
$duration = (float) ($webGPU['benchmark']['durationMs'] ?? -1);
|
||
if ($duration > 800) {
|
||
$this->addRisk('browser_feat', 25, 'WebGPU 基准测试耗时过长,疑似软件渲染');
|
||
}
|
||
} elseif ($deviceType === 'desktop' && $webGPUSupported === false) {
|
||
$this->addRisk('browser_feat', 5, '桌面环境未暴露 WebGPU(弱信号)');
|
||
}
|
||
}
|
||
|
||
private function checkLanguages() {
|
||
if (empty($this->fingerprintData['languages']) || empty($this->fingerprintData['ciso'])) {
|
||
return;
|
||
}
|
||
|
||
$supportLangs = $this->getSupportLang($this->fingerprintData['ciso']);
|
||
if (empty($supportLangs)) {
|
||
return;
|
||
}
|
||
|
||
$intersect = !empty(array_intersect(
|
||
$supportLangs,
|
||
array_map('strtolower', (array) $this->fingerprintData['languages'])
|
||
));
|
||
|
||
if (!$intersect) {
|
||
$this->addRisk('geo_lang_tz', $this->enhanced ? 8 : 5, '浏览器语言与 IP 国家常见语言不匹配');
|
||
}
|
||
}
|
||
|
||
private function checkTimezoneAnomalies() {
|
||
if (empty($this->fingerprintData['timezone']) || !isset($this->fingerprintData['timezoneOffset'])) {
|
||
return;
|
||
}
|
||
|
||
$offsetHours = ($this->fingerprintData['timezoneOffset'] / 60) * -1;
|
||
$expectedTimezones = $this->getTimezonesByOffset($offsetHours);
|
||
|
||
$found = false;
|
||
foreach ($expectedTimezones as $tz) {
|
||
if (stripos($this->fingerprintData['timezone'], $tz) !== false) {
|
||
$found = true;
|
||
break;
|
||
}
|
||
}
|
||
|
||
if (!$found && !empty($expectedTimezones)) {
|
||
$this->addRisk('geo_lang_tz', 4, '时区名称与 offset 不完全匹配');
|
||
}
|
||
|
||
$timezoneOffset = abs((int) $this->fingerprintData['timezoneOffset']);
|
||
if ($timezoneOffset % 60 !== 0 && $timezoneOffset % 60 !== 30 && $timezoneOffset % 60 !== 45) {
|
||
$this->addRisk('geo_lang_tz', 6, "异常时区偏移: {$timezoneOffset} 分钟");
|
||
}
|
||
|
||
if (!empty($this->fingerprintData['ciso'])) {
|
||
$supportTZ = $this->getSupportTZ($this->fingerprintData['ciso']);
|
||
if (!empty($supportTZ) && !in_array(strtolower($this->fingerprintData['timezone']), $supportTZ, true)) {
|
||
$this->addRisk('geo_lang_tz', $this->enhanced ? 8 : 5, '时区不属于 IP 所在国家常见时区');
|
||
}
|
||
}
|
||
}
|
||
|
||
// 根据时区偏移获取可能的时区
|
||
private function getTimezonesByOffset($offset) {
|
||
$timezones = [
|
||
'-12' => ['Pacific/Kwajalein'],
|
||
'-11' => ['Pacific/Midway', 'Pacific/Niue', 'Pacific/Pago_Pago'],
|
||
'-10' => ['Pacific/Honolulu', 'Pacific/Rarotonga', 'Pacific/Tahiti'],
|
||
'-9' => ['America/Anchorage', 'Pacific/Gambier'],
|
||
'-8.5' => ['Pacific/Marquesas'],
|
||
'-8' => ['America/Vancouver', 'America/Tijuana', 'America/Los_Angeles', 'Pacific/Pitcairn', 'America/Whitehorse'],
|
||
'-7' => [ 'America/Dawson_Creek', 'America/Denver', 'America/Phoenix', 'America/Edmonton', 'America/Hermosillo', 'America/Mazatlan', 'America/Yellowknife'],
|
||
'-6' => ['America/Chicago', 'America/Winnipeg', 'America/Belize', 'America/Mexico_City', 'America/Chihuahua', 'America/Costa_Rica', 'America/Regina', 'America/El_Salvador', 'America/Tegucigalpa', 'America/Managua', 'America/Guatemala', 'Pacific/Galapagos'],
|
||
'-5' => ['America/New_York', 'America/Bogota', 'America/Nassau', 'America/Lima', 'America/Jamaica', 'America/Iqaluit', 'America/Havana', 'America/Guayaquil', 'America/Cayman', 'America/Cancun', 'Pacific/Easter', 'America/Toronto', 'America/Rio_Branco', 'America/Port-au-Prince', 'America/Panama'],
|
||
'-4' => ['America/Curacao','America/Martinique','America/Manaus','America/La_Paz','America/Halifax','America/Guyana','America/Grand_Turk','America/Port_of_Spain','America/Santo_Domingo','America/Thule','America/Boa_Vista','America/Barbados','Atlantic/Bermuda','America/Puerto_Rico','America/Porto_Velho'],
|
||
'-3.5' => ['America/Caracas'],
|
||
'-3' => ['Atlantic/Azores', 'Antarctica/Palmer', 'America/Cuiaba', 'America/Santiago', 'America/Recife', 'America/Paramaribo', 'America/Montevideo', 'America/Miquelon', 'America/Maceio', 'America/Godthab', 'America/Fortaleza', 'America/Cayenne', 'America/Belem', 'America/Bahia', 'America/Argentina/Buenos_Aires', 'America/Araguaina', 'Atlantic/Stanley', 'America/Asuncion', 'America/Campo_Grande', 'Antarctica/Rothera'],
|
||
'-2' => ['America/Sao_Paulo', 'Atlantic/South_Georgia', 'America/St_Johns', 'America/Noronha'],
|
||
'-1' => ['Atlantic/Cape_Verde', 'Atlantic/Azores', 'America/Scoresbysund'],
|
||
'0' => ['UTC', 'Europe/London', 'Africa/Bissau', 'Etc/Greenwich', 'Atlantic/Reykjavik', 'Atlantic/Faroe', 'Atlantic/Canary', 'America/Danmarkshavn', 'Africa/Monrovia', 'Africa/El_Aaiun', 'Africa/Casablanca', 'Europe/Dublin', 'Africa/Accra', 'Africa/Abidjan', 'Europe/Lisbon'],
|
||
'1' => ['Europe/Paris', 'Africa/Lagos', 'Europe/Prague', 'Europe/Rome', 'Europe/Stockholm', 'Africa/Algiers', 'Europe/Vienna', 'Europe/Warsaw', 'Europe/Zurich', 'Africa/Ceuta', 'Africa/Ndjamena', 'Africa/Tunis', 'Europe/Tirane', 'Europe/Amsterdam', 'Europe/Andorra', 'Europe/Belgrade', 'Europe/Berlin', 'Europe/Brussels', 'Europe/Budapest', 'Europe/Copenhagen', 'Europe/Gibraltar', 'Europe/Luxembourg', 'Europe/Madrid', 'Europe/Malta', 'Europe/Monaco', 'Europe/Oslo'],
|
||
'2' => ['Europe/Istanbul', 'Africa/Cairo', 'Asia/Jerusalem', 'Europe/Vilnius', 'Europe/Tallinn', 'Africa/Johannesburg', 'Africa/Maputo', 'Africa/Tripoli', 'Asia/Amman', 'Asia/Beirut', 'Asia/Damascus', 'Asia/Gaza', 'Africa/Windhoek', 'Asia/Nicosia', 'Europe/Athens', 'Europe/Bucharest', 'Europe/Chisinau', 'Europe/Helsinki', 'Europe/Kaliningrad', 'Europe/Kiev', 'Europe/Riga', 'Europe/Sofia'],
|
||
'3' => ['Europe/Moscow', 'Asia/Riyadh', 'Europe/Minsk', 'Asia/Qatar', 'Asia/Baghdad', 'Antarctica/Syowa', 'Africa/Nairobi', 'Africa/Khartoum'],
|
||
'3.5' => ['Asia/Tehran'],
|
||
'4' => ['Asia/Dubai', 'Asia/Baku', 'Indian/Mauritius', 'Indian/Mahe', 'Europe/Samara', 'Indian/Reunion', 'Asia/Tbilisi', 'Asia/Yerevan'],
|
||
'4.5' => ['Asia/Kabul'],
|
||
'5'=> ['Asia/Karachi', 'Asia/Tashkent', 'Indian/Kerguelen', 'Asia/Yekaterinburg', 'Asia/Dushanbe', 'Asia/Ashgabat', 'Asia/Aqtobe', 'Asia/Aqtau', 'Indian/Maldives', 'Antarctica/Mawson'],
|
||
'5.5' => ['Asia/Calcutta', 'Asia/Colombo', 'Asia/Kolkata'],
|
||
'5.75' => ['Asia/Kathmandu'],
|
||
'6' => ['Indian/Chagos', 'Asia/Thimphu', 'Asia/Dhaka', 'Asia/Bishkek', 'Asia/Almaty', 'Antarctica/Vostok', 'Asia/Omsk'],
|
||
'6.5' => ['Asia/Rangoon', 'Indian/Cocos'],
|
||
'7' => ['Asia/Bangkok', 'Indian/Christmas', 'Asia/Saigon', 'Asia/Krasnoyarsk', 'Asia/Jakarta', 'Asia/Hovd', 'Antarctica/Davis'],
|
||
'8' => ['Asia/Choibalsan', 'Asia/Taipei', 'Asia/Singapore', 'Australia/Perth', 'Asia/Manila', 'Asia/Makassar', 'Asia/Macau', 'Asia/Kuala_Lumpur', 'Asia/Irkutsk', 'Asia/Hong_Kong', 'Asia/Ulaanbaatar', 'Asia/Brunei', 'Antarctica/Casey', 'Asia/Shanghai', 'Asia/Beijing'],
|
||
'8.5' => ['Asia/Pyongyang'],
|
||
'9' => ['Asia/Yakutsk', 'Asia/Tokyo', 'Asia/Seoul', 'Asia/Jayapura', 'Asia/Dili', 'Pacific/Palau'],
|
||
'9.5' => ['Australia/Darwin'],
|
||
'10' => ['Pacific/Guam', 'Pacific/Chuuk', 'Asia/Vladivostok', 'Asia/Magadan', 'Antarctica/DumontDUrville', 'Pacific/Port_Moresby', 'Australia/Brisbane'],
|
||
'10.5' => ['Australia/Adelaide'],
|
||
'11' => ['Australia/Sydney', 'Asia/Magadan', 'Pacific/Noumea', 'Pacific/Kosrae', 'Pacific/Guadalcanal', 'Pacific/Efate', 'Pacific/Pohnpei', 'Australia/Hobart', 'Pacific/Norfolk'],
|
||
'12' => ['Pacific/Funafuti', 'Pacific/Nauru', 'Pacific/Tarawa', 'Pacific/Wake', 'Asia/Kamchatka', 'Pacific/Kwajalein', 'Pacific/Majuro', 'Pacific/Wallis'],
|
||
'13' => ['Pacific/Enderbury', 'Pacific/Tongatapu', 'Pacific/Fakaofo', 'Pacific/Auckland', 'Pacific/Fiji']
|
||
];
|
||
|
||
return isset($timezones["$offset"]) ? $timezones["$offset"] : [];
|
||
}
|
||
|
||
// 根据国家获取一般设置的语言
|
||
private function getSupportLang($country_code) {
|
||
$browserLanguages = [
|
||
"AF" => ["ps-af", "fa-af", "uz-af"],
|
||
"AL" => ["sq-al", "sq"],
|
||
"DZ" => ["ar-dz", "fr-dz", "ar", "fr"],
|
||
"AD" => ["ca-ad", "ca"],
|
||
"AO" => ["pt-ao", "pt"],
|
||
"AR" => ["es-ar", "es"],
|
||
"AM" => ["hy-am", "hy"],
|
||
"AU" => ["en-au", "en"],
|
||
"AT" => ["de-at", "de"],
|
||
"AZ" => ["az-latn-az", "az"],
|
||
"BH" => ["ar-bh", "ar"],
|
||
"BD" => ["bn-bd", "bn"],
|
||
"BY" => ["be-by", "ru-by", "be", "ru"],
|
||
"BE" => ["nl-be", "fr-be", "de-be", "nl", "fr", "de"],
|
||
"BZ" => ["en-bz", "es-bz", "en", "es"],
|
||
"BO" => ["es-bo", "qu-bo", "ay-bo", "es", "qu", "ay"],
|
||
"BA" => ["bs-ba", "hr-ba", "sr-ba", "bs", "hr", "sr"],
|
||
"BR" => ["pt-br", "pt"],
|
||
"BN" => ["ms-bn", "ms"],
|
||
"BG" => ["bg-bg", "bg"],
|
||
"KH" => ["km-kh", "km"],
|
||
"CA" => ["en-ca", "fr-ca", "en", "fr"],
|
||
"CL" => ["es-cl", "es"],
|
||
"CN" => ["zh-cn", "zh"],
|
||
"CO" => ["es-co", "es"],
|
||
"CR" => ["es-cr", "es"],
|
||
"HR" => ["hr-hr", "hr"],
|
||
"CU" => ["es-cu", "es"],
|
||
"CY" => ["el-cy", "tr-cy", "el", "tr"],
|
||
"CZ" => ["cs-cz", "cs"],
|
||
"DK" => ["da-dk", "da"],
|
||
"DO" => ["es-do", "es"],
|
||
"EC" => ["es-ec", "es"],
|
||
"EG" => ["ar-eg", "ar"],
|
||
"SV" => ["es-sv", "es"],
|
||
"EE" => ["et-ee", "et"],
|
||
"ET" => ["am-et", "om-et", "ti-et", "am", "om", "ti"],
|
||
"FI" => ["fi-fi", "sv-fi", "fi", "sv"],
|
||
"FR" => ["fr-fr", "fr"],
|
||
"GE" => ["ka-ge", "ka"],
|
||
"DE" => ["de-de", "de"],
|
||
"GR" => ["el-gr", "el"],
|
||
"GT" => ["es-gt", "es"],
|
||
"HN" => ["es-hn", "es"],
|
||
"HK" => ["zh-hk", "en-hk", "zh-tw", "zh", "en"],
|
||
"HU" => ["hu-hu", "hu"],
|
||
"IS" => ["is-is", "is"],
|
||
"IN" => ["hi-in", "en-in", "ta-in", "te-in", "bn-in", "hi", "en", "ta", "te", "bn"],
|
||
"ID" => ["id-id", "id"],
|
||
"IR" => ["fa-ir", "fa"],
|
||
"IQ" => ["ar-iq", "ku-iq", "ar", "ku"],
|
||
"IE" => ["en-ie", "ga-ie", "en", "ga"],
|
||
"IL" => ["he-il", "ar-il", "en-il", "he", "ar", "en"],
|
||
"IT" => ["it-it", "de-it", "it", "de"],
|
||
"JM" => ["en-jm", "en"],
|
||
"JP" => ["ja-jp", "ja"],
|
||
"JO" => ["ar-jo", "ar"],
|
||
"KZ" => ["kk-kz", "ru-kz", "kk", "ru"],
|
||
"KE" => ["sw-ke", "en-ke", "sw", "en"],
|
||
"KR" => ["ko-kr", "ko"],
|
||
"KW" => ["ar-kw", "ar"],
|
||
"LA" => ["lo-la", "lo"],
|
||
"LV" => ["lv-lv", "lv"],
|
||
"LB" => ["ar-lb", "fr-lb", "ar", "fr"],
|
||
"LI" => ["de-li", "de"],
|
||
"LT" => ["lt-lt", "lt"],
|
||
"LU" => ["fr-lu", "de-lu", "lb-lu", "fr", "de", "lb"],
|
||
"MO" => ["zh-mo", "pt-mo", "zh-hk", "zh", "pt"],
|
||
"MY" => ["ms-my", "en-my", "zh-my", "ms", "en", "zh"],
|
||
"MX" => ["es-mx", "es"],
|
||
"MD" => ["ro-md", "ru-md", "ro", "ru"],
|
||
"MC" => ["fr-mc", "it-mc", "fr", "it"],
|
||
"MN" => ["mn-mn", "mn"],
|
||
"MA" => ["ar-ma", "fr-ma", "ar", "fr"],
|
||
"NL" => ["nl-nl", "fy-nl", "nl", "fy"],
|
||
"NZ" => ["en-nz", "mi-nz", "en", "mi"],
|
||
"NI" => ["es-ni", "es"],
|
||
"NG" => ["en-ng", "ha-ng", "ig-ng", "yo-ng", "en", "ha", "ig", "yo"],
|
||
"NO" => ["nb-no", "nn-no", "se-no", "nb", "nn", "se"],
|
||
"OM" => ["ar-om", "ar"],
|
||
"PK" => ["ur-pk", "en-pk", "pa-pk", "ur", "en", "pa"],
|
||
"PA" => ["es-pa", "es"],
|
||
"PY" => ["es-py", "gn-py", "es", "gn"],
|
||
"PE" => ["es-pe", "qu-pe", "ay-pe", "es", "qu", "ay"],
|
||
"PH" => ["en-ph", "fil-ph", "en", "fil"],
|
||
"PL" => ["pl-pl", "pl"],
|
||
"PT" => ["pt-pt", "pt"],
|
||
"PR" => ["es-pr", "en-pr", "es", "en"],
|
||
"QA" => ["ar-qa", "ar"],
|
||
"RO" => ["ro-ro", "ro"],
|
||
"RU" => ["ru-ru", "tt-ru", "ru", "tt"],
|
||
"SA" => ["ar-sa", "ar"],
|
||
"RS" => ["sr-cyrl-rs", "sr-latn-rs", "sr"],
|
||
"SG" => ["en-sg", "zh-sg", "ms-sg", "ta-sg", "en", "zh", "ms", "ta"],
|
||
"SK" => ["sk-sk", "sk"],
|
||
"SI" => ["sl-si", "sl"],
|
||
"ZA" => ["en-za", "af-za", "zu-za", "xh-za", "en", "af", "zu", "xh"],
|
||
"ES" => ["es-es", "ca-es", "gl-es", "eu-es", "es", "ca", "gl", "eu"],
|
||
"LK" => ["si-lk", "ta-lk", "si", "ta"],
|
||
"SE" => ["sv-se", "sv"],
|
||
"CH" => ["de-ch", "fr-ch", "it-ch", "rm-ch", "de", "fr", "it", "rm"],
|
||
"SY" => ["ar-sy", "ar"],
|
||
"TW" => ["zh-tw", "zh"],
|
||
"TH" => ["th-th", "th"],
|
||
"TT" => ["en-tt", "en"],
|
||
"TN" => ["ar-tn", "fr-tn", "ar", "fr"],
|
||
"TR" => ["tr-tr", "tr"],
|
||
"UA" => ["uk-ua", "ru-ua", "uk", "ru"],
|
||
"AE" => ["ar-ae", "en-ae", "ar", "en"],
|
||
"GB" => ["en-gb", "cy-gb", "gd-gb", "en", "cy", "gd"],
|
||
"US" => ["en-us", "es-us", "en", "es"],
|
||
"UY" => ["es-uy", "es"],
|
||
"UZ" => ["uz-latn-uz", "ru-uz", "uz", "ru"],
|
||
"VE" => ["es-ve", "es"],
|
||
"VN" => ["vi-vn", "vi"],
|
||
"YE" => ["ar-ye", "ar"],
|
||
"ZW" => ["en-zw", "sn-zw", "nd-zw", "en", "sn", "nd"],
|
||
];
|
||
|
||
return isset($browserLanguages[$country_code]) ? $browserLanguages[$country_code] : [];
|
||
}
|
||
|
||
// 根据国家获取一般设置的时区
|
||
private function getSupportTZ($country_code) {
|
||
$countryTimezoneMap = [
|
||
'AD' => ['Europe/Andorra'],
|
||
'AE' => ['Asia/Dubai'],
|
||
'AF' => ['Asia/Kabul'],
|
||
'AG' => ['America/Antigua'],
|
||
'AI' => ['America/Anguilla'],
|
||
'AL' => ['Europe/Tirane'],
|
||
'AM' => ['Asia/Yerevan'],
|
||
'AO' => ['Africa/Luanda'],
|
||
'AQ' => ['Antarctica/Casey', 'Antarctica/Davis', 'Antarctica/DumontDUrville', 'Antarctica/Macquarie', 'Antarctica/Mawson', 'Antarctica/McMurdo', 'Antarctica/Palmer', 'Antarctica/Rothera', 'Antarctica/South_Pole', 'Antarctica/Syowa', 'Antarctica/Troll', 'Antarctica/Vostok'],
|
||
'AR' => ['America/Argentina/Buenos_Aires', 'America/Argentina/Catamarca', 'America/Argentina/ComodRivadavia', 'America/Argentina/Cordoba', 'America/Argentina/Jujuy', 'America/Argentina/La_Rioja', 'America/Argentina/Mendoza', 'America/Argentina/Rio_Gallegos', 'America/Argentina/Salta', 'America/Argentina/San_Juan', 'America/Argentina/San_Luis', 'America/Argentina/Tucuman', 'America/Argentina/Ushuaia', 'America/Buenos_Aires', 'America/Catamarca', 'America/Cordoba', 'America/Jujuy', 'America/Mendoza', 'America/Rosario'],
|
||
'AS' => ['Pacific/Pago_Pago', 'Pacific/Samoa', 'US/Samoa'],
|
||
'AT' => ['Europe/Vienna'],
|
||
'AU' => ['Australia/ACT', 'Australia/Adelaide', 'Australia/Brisbane', 'Australia/Broken_Hill', 'Australia/Canberra', 'Australia/Currie', 'Australia/Darwin', 'Australia/Eucla', 'Australia/Hobart', 'Australia/LHI', 'Australia/Lindeman', 'Australia/Lord_Howe', 'Australia/Melbourne', 'Australia/NSW', 'Australia/North', 'Australia/Perth', 'Australia/Queensland', 'Australia/South', 'Australia/Sydney', 'Australia/Tasmania', 'Australia/Victoria', 'Australia/West', 'Australia/Yancowinna'],
|
||
'AW' => ['America/Aruba'],
|
||
'AX' => ['Europe/Mariehamn'],
|
||
'AZ' => ['Asia/Baku'],
|
||
'BA' => ['Europe/Sarajevo'],
|
||
'BB' => ['America/Barbados'],
|
||
'BD' => ['Asia/Dacca', 'Asia/Dhaka'],
|
||
'BE' => ['Europe/Brussels'],
|
||
'BF' => ['Africa/Ouagadougou'],
|
||
'BG' => ['Europe/Sofia'],
|
||
'BH' => ['Asia/Bahrain'],
|
||
'BI' => ['Africa/Bujumbura'],
|
||
'BJ' => ['Africa/Porto-Novo'],
|
||
'BL' => ['America/St_Barthelemy'],
|
||
'BM' => ['Atlantic/Bermuda'],
|
||
'BN' => ['Asia/Brunei'],
|
||
'BO' => ['America/La_Paz'],
|
||
'BQ' => ['America/Kralendijk'],
|
||
'BR' => ['America/Araguaina', 'America/Bahia', 'America/Belem', 'America/Boa_Vista', 'America/Campo_Grande', 'America/Cuiaba', 'America/Eirunepe', 'America/Fortaleza', 'America/Maceio', 'America/Manaus', 'America/Noronha', 'America/Porto_Acre', 'America/Porto_Velho', 'America/Recife', 'America/Rio_Branco', 'America/Santarem', 'America/Sao_Paulo', 'Brazil/Acre', 'Brazil/DeNoronha', 'Brazil/East', 'Brazil/West'],
|
||
'BS' => ['America/Nassau'],
|
||
'BT' => ['Asia/Thimphu'],
|
||
'BW' => ['Africa/Gaborone'],
|
||
'BY' => ['Europe/Minsk'],
|
||
'BZ' => ['America/Belize'],
|
||
'CA' => ['America/Atikokan', 'America/Blanc-Sablon', 'America/Cambridge_Bay', 'America/Coral_Harbour', 'America/Creston', 'America/Dawson', 'America/Dawson_Creek', 'America/Edmonton', 'America/Fort_Nelson', 'America/Glace_Bay', 'America/Goose_Bay', 'America/Halifax', 'America/Inuvik', 'America/Iqaluit', 'America/Moncton', 'America/Montreal', 'America/Nipigon', 'America/Pangnirtung', 'America/Rainy_River', 'America/Rankin_Inlet', 'America/Regina', 'America/Resolute', 'America/St_Johns', 'America/Swift_Current', 'America/Thunder_Bay', 'America/Toronto', 'America/Vancouver', 'America/Whitehorse', 'America/Winnipeg', 'America/Yellowknife', 'Canada/Atlantic', 'Canada/Central', 'Canada/Eastern', 'Canada/Mountain', 'Canada/Newfoundland', 'Canada/Pacific', 'Canada/Saskatchewan', 'Canada/Yukon'],
|
||
'CC' => ['Indian/Cocos'],
|
||
'CD' => ['Africa/Kinshasa', 'Africa/Lubumbashi'],
|
||
'CF' => ['Africa/Bangui'],
|
||
'CG' => ['Africa/Brazzaville'],
|
||
'CH' => ['Europe/Zurich'],
|
||
'CI' => ['Africa/Abidjan'],
|
||
'CK' => ['Pacific/Rarotonga'],
|
||
'CL' => ['America/Punta_Arenas', 'America/Santiago', 'Chile/Continental', 'Chile/EasterIsland', 'Pacific/Easter'],
|
||
'CM' => ['Africa/Douala'],
|
||
'CN' => ['Asia/Chongqing', 'Asia/Chungking', 'Asia/Harbin', 'Asia/Kashgar', 'Asia/Shanghai', 'Asia/Urumqi', 'PRC'],
|
||
'CO' => ['America/Bogota'],
|
||
'CR' => ['America/Costa_Rica'],
|
||
'CU' => ['America/Havana', 'Cuba'],
|
||
'CV' => ['Atlantic/Cape_Verde'],
|
||
'CW' => ['America/Curacao'],
|
||
'CX' => ['Indian/Christmas'],
|
||
'CY' => ['Asia/Famagusta', 'Asia/Nicosia', 'Europe/Nicosia'],
|
||
'CZ' => ['Europe/Prague'],
|
||
'DE' => ['Europe/Berlin', 'Europe/Busingen'],
|
||
'DJ' => ['Africa/Djibouti'],
|
||
'DK' => ['Europe/Copenhagen'],
|
||
'DM' => ['America/Dominica'],
|
||
'DO' => ['America/Santo_Domingo'],
|
||
'DZ' => ['Africa/Algiers'],
|
||
'EC' => ['America/Guayaquil', 'Pacific/Galapagos'],
|
||
'EE' => ['Europe/Tallinn'],
|
||
'EG' => ['Africa/Cairo', 'Egypt'],
|
||
'EH' => ['Africa/El_Aaiun'],
|
||
'ER' => ['Africa/Asmara'],
|
||
'ES' => ['Africa/Ceuta', 'Atlantic/Canary', 'Europe/Madrid'],
|
||
'ET' => ['Africa/Addis_Ababa'],
|
||
'FI' => ['Europe/Helsinki'],
|
||
'FJ' => ['Pacific/Fiji'],
|
||
'FK' => ['Atlantic/Stanley'],
|
||
'FM' => ['Pacific/Chuuk', 'Pacific/Kosrae', 'Pacific/Pohnpei', 'Pacific/Ponape', 'Pacific/Truk', 'Pacific/Yap'],
|
||
'FO' => ['Atlantic/Faeroe', 'Atlantic/Faroe'],
|
||
'FR' => ['Europe/Paris'],
|
||
'GA' => ['Africa/Libreville'],
|
||
'GB' => ['Europe/Belfast', 'Europe/London', 'GB', 'GB-Eire'],
|
||
'GD' => ['America/Grenada'],
|
||
'GE' => ['Asia/Tbilisi'],
|
||
'GF' => ['America/Cayenne'],
|
||
'GG' => ['Europe/Guernsey'],
|
||
'GH' => ['Africa/Accra'],
|
||
'GI' => ['Europe/Gibraltar'],
|
||
'GL' => ['America/Danmarkshavn', 'America/Godthab', 'America/Nuuk', 'America/Scoresbysund', 'America/Thule'],
|
||
'GM' => ['Africa/Banjul'],
|
||
'GN' => ['Africa/Conakry'],
|
||
'GP' => ['America/Guadeloupe'],
|
||
'GQ' => ['Africa/Malabo'],
|
||
'GR' => ['Europe/Athens'],
|
||
'GS' => ['Atlantic/South_Georgia'],
|
||
'GT' => ['America/Guatemala'],
|
||
'GU' => ['Pacific/Guam'],
|
||
'GW' => ['Africa/Bissau'],
|
||
'GY' => ['America/Guyana'],
|
||
'HK' => ['Asia/Hong_Kong', 'Hongkong'],
|
||
'HN' => ['America/Tegucigalpa'],
|
||
'HR' => ['Europe/Zagreb'],
|
||
'HT' => ['America/Port-au-Prince'],
|
||
'HU' => ['Europe/Budapest'],
|
||
'ID' => ['Asia/Jakarta', 'Asia/Jayapura', 'Asia/Makassar', 'Asia/Pontianak', 'Asia/Ujung_Pandang'],
|
||
'IE' => ['Eire', 'Europe/Dublin'],
|
||
'IL' => ['Asia/Jerusalem', 'Asia/Tel_Aviv', 'Israel'],
|
||
'IM' => ['Europe/Isle_of_Man'],
|
||
'IN' => ['Asia/Calcutta', 'Asia/Kolkata'],
|
||
'IO' => ['Indian/Chagos'],
|
||
'IQ' => ['Asia/Baghdad'],
|
||
'IR' => ['Asia/Tehran', 'Iran'],
|
||
'IS' => ['Atlantic/Reykjavik', 'Iceland'],
|
||
'IT' => ['Europe/Rome'],
|
||
'JE' => ['Europe/Jersey'],
|
||
'JM' => ['America/Jamaica', 'Jamaica'],
|
||
'JO' => ['Asia/Amman'],
|
||
'JP' => ['Asia/Tokyo', 'Japan'],
|
||
'KE' => ['Africa/Nairobi'],
|
||
'KG' => ['Asia/Bishkek'],
|
||
'KH' => ['Asia/Phnom_Penh'],
|
||
'KI' => ['Pacific/Enderbury', 'Pacific/Kanton', 'Pacific/Kiritimati', 'Pacific/Tarawa'],
|
||
'KM' => ['Indian/Comoro'],
|
||
'KN' => ['America/St_Kitts'],
|
||
'KP' => ['Asia/Pyongyang'],
|
||
'KR' => ['Asia/Seoul', 'ROK'],
|
||
'KW' => ['Asia/Kuwait'],
|
||
'KY' => ['America/Cayman'],
|
||
'KZ' => ['Asia/Almaty', 'Asia/Aqtau', 'Asia/Aqtobe', 'Asia/Atyrau', 'Asia/Oral', 'Asia/Qostanay', 'Asia/Qyzylorda'],
|
||
'LA' => ['Asia/Vientiane'],
|
||
'LB' => ['Asia/Beirut'],
|
||
'LC' => ['America/St_Lucia'],
|
||
'LI' => ['Europe/Vaduz'],
|
||
'LK' => ['Asia/Colombo'],
|
||
'LR' => ['Africa/Monrovia'],
|
||
'LS' => ['Africa/Maseru'],
|
||
'LT' => ['Europe/Vilnius'],
|
||
'LU' => ['Europe/Luxembourg'],
|
||
'LV' => ['Europe/Riga'],
|
||
'LY' => ['Africa/Tripoli', 'Libya'],
|
||
'MA' => ['Africa/Casablanca'],
|
||
'MC' => ['Europe/Monaco'],
|
||
'MD' => ['Europe/Chisinau', 'Europe/Tiraspol'],
|
||
'ME' => ['Europe/Podgorica'],
|
||
'MF' => ['America/Marigot'],
|
||
'MG' => ['Indian/Antananarivo'],
|
||
'MH' => ['Kwajalein', 'Pacific/Kwajalein', 'Pacific/Majuro'],
|
||
'MK' => ['Europe/Skopje'],
|
||
'ML' => ['Africa/Bamako', 'Africa/Timbuktu'],
|
||
'MM' => ['Asia/Rangoon', 'Asia/Yangon'],
|
||
'MN' => ['Asia/Choibalsan', 'Asia/Hovd', 'Asia/Ulaanbaatar', 'Asia/Ulan_Bator'],
|
||
'MO' => ['Asia/Macao', 'Asia/Macau'],
|
||
'MP' => ['Pacific/Saipan'],
|
||
'MQ' => ['America/Martinique'],
|
||
'MR' => ['Africa/Nouakchott'],
|
||
'MS' => ['America/Montserrat'],
|
||
'MT' => ['Europe/Malta'],
|
||
'MU' => ['Indian/Mauritius'],
|
||
'MV' => ['Indian/Maldives'],
|
||
'MW' => ['Africa/Blantyre'],
|
||
'MX' => ['America/Bahia_Banderas', 'America/Cancun', 'America/Chihuahua', 'America/Ciudad_Juarez', 'America/Ensenada', 'America/Hermosillo', 'America/Matamoros', 'America/Mazatlan', 'America/Merida', 'America/Mexico_City', 'America/Monterrey', 'America/Ojinaga', 'America/Santa_Isabel', 'America/Tijuana', 'Mexico/BajaNorte', 'Mexico/BajaSur', 'Mexico/General'],
|
||
'MY' => ['Asia/Kuala_Lumpur', 'Asia/Kuching'],
|
||
'MZ' => ['Africa/Maputo'],
|
||
'NA' => ['Africa/Windhoek'],
|
||
'NC' => ['Pacific/Noumea'],
|
||
'NE' => ['Africa/Niamey'],
|
||
'NF' => ['Pacific/Norfolk'],
|
||
'NG' => ['Africa/Lagos'],
|
||
'NI' => ['America/Managua'],
|
||
'NL' => ['Europe/Amsterdam'],
|
||
'NO' => ['Europe/Oslo'],
|
||
'NP' => ['Asia/Kathmandu', 'Asia/Katmandu'],
|
||
'NR' => ['Pacific/Nauru'],
|
||
'NU' => ['Pacific/Niue'],
|
||
'NZ' => ['Antarctica/McMurdo', 'Antarctica/South_Pole', 'NZ', 'NZ-CHAT', 'Pacific/Auckland', 'Pacific/Chatham'],
|
||
'OM' => ['Asia/Muscat'],
|
||
'PA' => ['America/Panama'],
|
||
'PE' => ['America/Lima'],
|
||
'PF' => ['Pacific/Gambier', 'Pacific/Marquesas', 'Pacific/Tahiti'],
|
||
'PG' => ['Pacific/Bougainville', 'Pacific/Port_Moresby'],
|
||
'PH' => ['Asia/Manila'],
|
||
'PK' => ['Asia/Karachi'],
|
||
'PL' => ['Europe/Warsaw', 'Poland'],
|
||
'PM' => ['America/Miquelon'],
|
||
'PN' => ['Pacific/Pitcairn'],
|
||
'PR' => ['America/Puerto_Rico'],
|
||
'PS' => ['Asia/Gaza', 'Asia/Hebron'],
|
||
'PT' => ['Atlantic/Azores', 'Atlantic/Madeira', 'Europe/Lisbon', 'Portugal'],
|
||
'PW' => ['Pacific/Palau'],
|
||
'PY' => ['America/Asuncion'],
|
||
'QA' => ['Asia/Qatar'],
|
||
'RE' => ['Indian/Reunion'],
|
||
'RO' => ['Europe/Bucharest'],
|
||
'RS' => ['Europe/Belgrade'],
|
||
'RU' => ['Asia/Anadyr', 'Asia/Barnaul', 'Asia/Chita', 'Asia/Irkutsk', 'Asia/Kamchatka', 'Asia/Khandyga', 'Asia/Krasnoyarsk', 'Asia/Magadan', 'Asia/Novokuznetsk', 'Asia/Novosibirsk', 'Asia/Omsk', 'Asia/Sakhalin', 'Asia/Srednekolymsk', 'Asia/Tomsk', 'Asia/Ust-Nera', 'Asia/Vladivostok', 'Asia/Yakutsk', 'Asia/Yekaterinburg', 'Europe/Astrakhan', 'Europe/Kaliningrad', 'Europe/Kirov', 'Europe/Moscow', 'Europe/Samara', 'Europe/Saratov', 'Europe/Ulyanovsk', 'Europe/Volgograd', 'W-SU'],
|
||
'RW' => ['Africa/Kigali'],
|
||
'SA' => ['Asia/Riyadh'],
|
||
'SB' => ['Pacific/Guadalcanal'],
|
||
'SC' => ['Indian/Mahe'],
|
||
'SD' => ['Africa/Khartoum'],
|
||
'SE' => ['Europe/Stockholm'],
|
||
'SG' => ['Asia/Singapore', 'Singapore'],
|
||
'SH' => ['Atlantic/St_Helena'],
|
||
'SI' => ['Europe/Ljubljana'],
|
||
'SJ' => ['Arctic/Longyearbyen', 'Atlantic/Jan_Mayen'],
|
||
'SK' => ['Europe/Bratislava'],
|
||
'SL' => ['Africa/Freetown'],
|
||
'SM' => ['Europe/San_Marino'],
|
||
'SN' => ['Africa/Dakar'],
|
||
'SO' => ['Africa/Mogadishu'],
|
||
'SR' => ['America/Paramaribo'],
|
||
'SS' => ['Africa/Juba'],
|
||
'ST' => ['Africa/Sao_Tome'],
|
||
'SV' => ['America/El_Salvador'],
|
||
'SX' => ['America/Lower_Princes'],
|
||
'SY' => ['Asia/Damascus'],
|
||
'SZ' => ['Africa/Mbabane'],
|
||
'TC' => ['America/Grand_Turk'],
|
||
'TD' => ['Africa/Ndjamena'],
|
||
'TF' => ['Indian/Kerguelen'],
|
||
'TG' => ['Africa/Lome'],
|
||
'TH' => ['Asia/Bangkok'],
|
||
'TJ' => ['Asia/Dushanbe'],
|
||
'TK' => ['Pacific/Fakaofo'],
|
||
'TL' => ['Asia/Dili'],
|
||
'TM' => ['Asia/Ashgabat', 'Asia/Ashkhabad'],
|
||
'TN' => ['Africa/Tunis'],
|
||
'TO' => ['Pacific/Tongatapu'],
|
||
'TR' => ['Asia/Istanbul', 'Europe/Istanbul', 'Turkey'],
|
||
'TT' => ['America/Port_of_Spain'],
|
||
'TV' => ['Pacific/Funafuti'],
|
||
'TW' => ['Asia/Taipei', 'ROC'],
|
||
'TZ' => ['Africa/Dar_es_Salaam'],
|
||
'UA' => ['Europe/Kiev', 'Europe/Kyiv', 'Europe/Simferopol', 'Europe/Uzhgorod', 'Europe/Zaporozhye'],
|
||
'UG' => ['Africa/Kampala'],
|
||
'UM' => ['Pacific/Johnston', 'Pacific/Midway', 'Pacific/Wake'],
|
||
'US' => ['America/Adak', 'America/Anchorage', 'America/Atka', 'America/Boise', 'America/Chicago', 'America/Denver', 'America/Detroit', 'America/Fort_Wayne', 'America/Indiana/Indianapolis', 'America/Indiana/Knox', 'America/Indiana/Marengo', 'America/Indiana/Petersburg', 'America/Indiana/Tell_City', 'America/Indiana/Vevay', 'America/Indiana/Vincennes', 'America/Indiana/Winamac', 'America/Indianapolis', 'America/Juneau', 'America/Kentucky/Louisville', 'America/Kentucky/Monticello', 'America/Knox_IN', 'America/Los_Angeles', 'America/Louisville', 'America/Menominee', 'America/Metlakatla', 'America/New_York', 'America/Nome', 'America/North_Dakota/Beulah', 'America/North_Dakota/Center', 'America/North_Dakota/New_Salem', 'America/Phoenix', 'America/Sitka', 'America/Yakutat', 'CST6CDT', 'EST5EDT', 'Navajo', 'PST8PDT', 'US/Alaska', 'US/Aleutian', 'US/Arizona', 'US/Central', 'US/East-Indiana', 'US/Eastern', 'US/Hawaii', 'US/Indiana-Starke', 'US/Michigan', 'US/Mountain', 'US/Pacific'],
|
||
'UY' => ['America/Montevideo'],
|
||
'UZ' => ['Asia/Samarkand', 'Asia/Tashkent'],
|
||
'VA' => ['Europe/Vatican'],
|
||
'VC' => ['America/St_Vincent'],
|
||
'VE' => ['America/Caracas'],
|
||
'VG' => ['America/Tortola', 'America/Virgin'],
|
||
'VI' => ['America/St_Thomas'],
|
||
'VN' => ['Asia/Ho_Chi_Minh', 'Asia/Saigon'],
|
||
'VU' => ['Pacific/Efate'],
|
||
'WF' => ['Pacific/Wallis'],
|
||
'WS' => ['Pacific/Apia'],
|
||
'YE' => ['Asia/Aden'],
|
||
'YT' => ['Indian/Mayotte'],
|
||
'ZA' => ['Africa/Johannesburg'],
|
||
'ZM' => ['Africa/Lusaka'],
|
||
'ZW' => ['Africa/Harare'],
|
||
];
|
||
|
||
return isset($countryTimezoneMap[$country_code]) ? array_map('strtolower', $countryTimezoneMap[$country_code]) : [];
|
||
}
|
||
|
||
private function checkFonts() {
|
||
if (!$this->enhanced) {
|
||
return;
|
||
}
|
||
|
||
$fonts = !empty($this->fingerprintData['fonts']) && is_array($this->fingerprintData['fonts'])
|
||
? $this->fingerprintData['fonts']
|
||
: [];
|
||
if (empty($fonts)) {
|
||
return;
|
||
}
|
||
|
||
$os = $this->getOsName();
|
||
if ($os === null) {
|
||
return;
|
||
}
|
||
|
||
if (preg_match('/Windows/i', $os)) {
|
||
if (!in_array('Calibri', $fonts, true) && !in_array('Segoe UI', $fonts, true)) {
|
||
$this->addRisk('fonts', 15, 'Windows UA 但缺少常见字体 Calibri/Segoe UI');
|
||
}
|
||
if (in_array('San Francisco', $fonts, true)) {
|
||
$this->addRisk('fonts', 15, 'Windows UA 但检测到 macOS 字体 San Francisco');
|
||
}
|
||
} elseif (preg_match('/macOS/i', $os)) {
|
||
if (!in_array('Helvetica Neue', $fonts, true) && !in_array('San Francisco', $fonts, true)) {
|
||
$this->addRisk('fonts', 15, 'macOS UA 但缺少常见 macOS 字体');
|
||
}
|
||
if (in_array('Calibri', $fonts, true)) {
|
||
$this->addRisk('fonts', 15, 'macOS UA 但检测到 Windows 字体 Calibri');
|
||
}
|
||
}
|
||
}
|
||
|
||
private function getRiskCategory() {
|
||
if ($this->riskLevel < 20) {
|
||
return '低风险';
|
||
} elseif ($this->riskLevel < 50) {
|
||
return '中等风险';
|
||
}
|
||
return '高风险';
|
||
}
|
||
|
||
private function getRiskDescription() {
|
||
switch ($this->getRiskCategory()) {
|
||
case '低风险':
|
||
return '看起来是正常的用户访问,未检测到明显的自动化工具特征';
|
||
case '中等风险':
|
||
return '检测到一些可能与自动化工具相关的特征,建议进一步观察';
|
||
case '高风险':
|
||
return '很可能是自动化工具、爬虫或恶意访问,建议采取限制措施';
|
||
default:
|
||
return '无法确定风险等级';
|
||
}
|
||
}
|
||
}
|