root
592 lines
20 KiB
PHP
Executable File
592 lines
20 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* 模拟测试访问：重建请求环境并跑完整判定链（含二次风控）
|
|
*/
|
|
require_once dirname(__DIR__, 2) . '/config/ConfigLoader.php';
|
|
require_once __DIR__ . '/SimulationRouteResolver.php';
|
|
require_once __DIR__ . '/FCheckHandler.php';
|
|
require_once __DIR__ . '/DomainRepository.php';
|
|
|
|
class VisitorSimulationRunner
|
|
{
|
|
const REASON_PREFIX = '[模拟测试]';
|
|
|
|
/**
|
|
* @param array $input
|
|
* @return array
|
|
*/
|
|
public static function runManual(array $input)
|
|
{
|
|
$context = self::normalizeManualInput($input);
|
|
if (!empty($context['error'])) {
|
|
return ['ok' => false, 'message' => $context['error']];
|
|
}
|
|
return self::execute($context, null);
|
|
}
|
|
|
|
/**
|
|
* @param int $logId
|
|
* @return array
|
|
*/
|
|
public static function replayFromLog($logId)
|
|
{
|
|
$row = self::fetchLogRow((int) $logId);
|
|
if ($row === null) {
|
|
return ['ok' => false, 'message' => '日志不存在'];
|
|
}
|
|
$context = self::contextFromLogRow($row);
|
|
if (!empty($context['error'])) {
|
|
return ['ok' => false, 'message' => $context['error']];
|
|
}
|
|
return self::execute($context, (int) $logId);
|
|
}
|
|
|
|
/**
|
|
* @param int $logId
|
|
* @return array
|
|
*/
|
|
public static function prefillFromLog($logId)
|
|
{
|
|
$row = self::fetchLogRow((int) $logId);
|
|
if ($row === null) {
|
|
return ['ok' => false, 'message' => '日志不存在'];
|
|
}
|
|
$context = self::contextFromLogRow($row);
|
|
if (!empty($context['error'])) {
|
|
return ['ok' => false, 'message' => $context['error']];
|
|
}
|
|
return [
|
|
'ok' => true,
|
|
'log_id' => (int) $logId,
|
|
'prefill' => [
|
|
'config_name' => $context['config_name'],
|
|
'ip' => $context['ip'],
|
|
'domain' => $context['domain'],
|
|
'page_url' => $context['page_url'],
|
|
'referer' => $context['referer'],
|
|
'user_agent' => $context['user_agent'],
|
|
'accept_language' => $context['accept_language'],
|
|
'visit_md5_code' => $context['visit_md5_code'],
|
|
'cookies_json' => $context['cookies_json'],
|
|
'fp_hdata' => $context['fp_hdata_raw'],
|
|
'device' => $context['device_override'],
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param string $reason
|
|
* @return string
|
|
*/
|
|
public static function tagReason($reason)
|
|
{
|
|
$reason = trim((string) $reason);
|
|
if ($reason === '') {
|
|
return self::REASON_PREFIX;
|
|
}
|
|
if (strpos($reason, self::REASON_PREFIX) === 0) {
|
|
return $reason;
|
|
}
|
|
return self::REASON_PREFIX . ' ' . $reason;
|
|
}
|
|
|
|
/**
|
|
* @param array $input
|
|
* @return array
|
|
*/
|
|
private static function normalizeManualInput(array $input)
|
|
{
|
|
$configName = ConfigLoader::sanitizeConfigName($input['config_name'] ?? '');
|
|
if (trim((string) ($input['config_name'] ?? '')) === '') {
|
|
return ['error' => '请选择配置'];
|
|
}
|
|
|
|
$domain = self::normalizeHost($input['domain'] ?? '');
|
|
if ($domain === '') {
|
|
$domain = self::defaultHostForConfig($configName);
|
|
}
|
|
if ($domain === '') {
|
|
return ['error' => '请填写域名或绑定站点域名'];
|
|
}
|
|
|
|
$pageUrl = trim((string) ($input['page_url'] ?? ''));
|
|
if ($pageUrl === '') {
|
|
$pageUrl = 'https://' . $domain . '/' . $configName . '.php';
|
|
}
|
|
|
|
$cookies = [];
|
|
if (!empty($input['cookies_json'])) {
|
|
$decoded = json_decode((string) $input['cookies_json'], true);
|
|
if (!is_array($decoded)) {
|
|
return ['error' => 'Cookie JSON 格式无效'];
|
|
}
|
|
$cookies = $decoded;
|
|
}
|
|
|
|
$fpRaw = trim((string) ($input['fp_hdata'] ?? ''));
|
|
|
|
return [
|
|
'config_name' => $configName,
|
|
'ip' => trim((string) ($input['ip'] ?? '8.8.8.8')),
|
|
'domain' => $domain,
|
|
'page_url' => $pageUrl,
|
|
'referer' => trim((string) ($input['referer'] ?? '')),
|
|
'user_agent' => trim((string) ($input['user_agent'] ?? 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36')),
|
|
'accept_language' => trim((string) ($input['accept_language'] ?? 'en-US,en;q=0.9')),
|
|
'visit_md5_code' => trim((string) ($input['visit_md5_code'] ?? '')),
|
|
'cookies' => $cookies,
|
|
'cookies_json' => (string) ($input['cookies_json'] ?? ''),
|
|
'fp_hdata_raw' => $fpRaw,
|
|
'fp_hdata' => self::parseFpHdata($fpRaw),
|
|
'device_override' => trim((string) ($input['device'] ?? '')),
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param array $row
|
|
* @return array
|
|
*/
|
|
private static function contextFromLogRow(array $row)
|
|
{
|
|
$domain = self::normalizeHost($row['domain'] ?? '');
|
|
$pageUrl = trim((string) ($row['page'] ?? ''));
|
|
$config = self::guessConfigName($pageUrl, $domain);
|
|
|
|
if ($config === '' && $domain !== '') {
|
|
try {
|
|
$pdo = DomainRepository::pdo();
|
|
DomainRepository::ensureTable($pdo);
|
|
$domRow = DomainRepository::findByHostname($pdo, $domain);
|
|
if ($domRow && !empty($domRow['config_name'])) {
|
|
$config = trim($domRow['config_name']);
|
|
}
|
|
} catch (Throwable $e) {
|
|
}
|
|
}
|
|
if ($config === '') {
|
|
$config = 'index';
|
|
}
|
|
|
|
$referer = trim((string) ($row['http_referer'] ?? ''));
|
|
if ($referer === '') {
|
|
$referer = trim((string) ($row['referer'] ?? ''));
|
|
}
|
|
|
|
$visitCode = trim((string) ($row['visit_md5_code'] ?? ''));
|
|
$cookies = [];
|
|
if ($visitCode !== '' && $visitCode !== 'loss') {
|
|
$cookies['gfuid'] = $visitCode;
|
|
}
|
|
|
|
$fpRaw = trim((string) ($row['fp_hdata'] ?? ''));
|
|
|
|
return [
|
|
'config_name' => $config,
|
|
'ip' => trim((string) ($row['IP'] ?? '')),
|
|
'domain' => $domain !== '' ? $domain : self::defaultHostForConfig($config),
|
|
'page_url' => $pageUrl !== '' ? $pageUrl : ('https://' . ($domain ?: 'localhost') . '/' . $config . '.php'),
|
|
'referer' => $referer,
|
|
'user_agent' => trim((string) ($row['user_agent'] ?? 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36')),
|
|
'accept_language' => trim((string) ($row['accept_language_raw'] ?? $row['language'] ?? 'en-US,en;q=0.9')),
|
|
'visit_md5_code' => $visitCode,
|
|
'cookies' => $cookies,
|
|
'cookies_json' => $cookies !== [] ? json_encode($cookies, JSON_UNESCAPED_UNICODE) : '',
|
|
'fp_hdata_raw' => $fpRaw,
|
|
'fp_hdata' => self::parseFpHdata($fpRaw),
|
|
'device_override' => trim((string) ($row['device'] ?? '')),
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param array $context
|
|
* @param int|null $sourceLogId
|
|
* @return array
|
|
*/
|
|
private static function execute(array $context, $sourceLogId)
|
|
{
|
|
if (!defined('DB_USERNAME')) {
|
|
require_once dirname(__DIR__, 2) . '/cong.php';
|
|
}
|
|
require_once dirname(__DIR__, 2) . '/lib/bootstrap.php';
|
|
|
|
$backup = self::backupGlobals();
|
|
|
|
try {
|
|
if (session_status() !== PHP_SESSION_ACTIVE) {
|
|
session_start();
|
|
}
|
|
$_SESSION = [];
|
|
|
|
self::injectEnvironment($context);
|
|
|
|
$configName = ConfigLoader::loadByName($context['config_name']);
|
|
|
|
$GLOBALS['__cloak_simulation_on'] = true;
|
|
$GLOBALS['__cloak_force_sync_log'] = true;
|
|
$GLOBALS['__cloak_debug_on'] = false;
|
|
|
|
CloakPipelineTimer::init();
|
|
|
|
global $v_info, $reason, $config_name;
|
|
$config_name = $configName;
|
|
$v_info = new visitorInfo();
|
|
$v_info->get_visitor_Info(COSTM_IP_SCORE, CHECK_KEY, SHOW_SITE_COUNTRY);
|
|
$reason = '';
|
|
|
|
CheckPipeline::run();
|
|
|
|
if (!isset($_SESSION['check_result']) || $_SESSION['check_result'] === '') {
|
|
$_SESSION['check_result'] = 'false';
|
|
if ($reason === '') {
|
|
$reason = '未产生判定结果，默认安全页';
|
|
}
|
|
}
|
|
$reason = cloak_finalize_reason($reason, $_SESSION['check_result']);
|
|
|
|
$model = self::detectDevice($context);
|
|
$logs = self::buildLogs($v_info, $reason, $model, $context, $sourceLogId);
|
|
|
|
$route = SimulationRouteResolver::dispatch([
|
|
'v_info' => $v_info,
|
|
'logs' => $logs,
|
|
'config_name' => $configName,
|
|
'reason' => $reason,
|
|
'model' => $model,
|
|
]);
|
|
|
|
$secondary = null;
|
|
if (!empty($route['needs_secondary'])) {
|
|
if (!empty($context['fp_hdata']) && is_array($context['fp_hdata'])) {
|
|
$secondary = self::runSecondary((int) ($route['log_id'] ?? 0), $context);
|
|
} else {
|
|
$secondary = [
|
|
'skipped' => true,
|
|
'message' => '命中二次风控但未提供 fp_hdata，日志保持 wait 状态',
|
|
];
|
|
}
|
|
}
|
|
|
|
$timing = CloakPipelineTimer::finish();
|
|
|
|
return [
|
|
'ok' => true,
|
|
'new_log_id' => $route['log_id'] ?? null,
|
|
'sim_source' => $sourceLogId,
|
|
'primary' => [
|
|
'result' => $_SESSION['check_result'] ?? '',
|
|
'reason' => $reason,
|
|
'branch' => $route['branch'] ?? '',
|
|
],
|
|
'secondary' => $secondary,
|
|
'timing' => $timing,
|
|
];
|
|
} catch (Throwable $e) {
|
|
return [
|
|
'ok' => false,
|
|
'message' => $e->getMessage(),
|
|
];
|
|
} finally {
|
|
self::restoreGlobals($backup);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param int $logId
|
|
* @param array $context
|
|
* @return array|null
|
|
*/
|
|
private static function runSecondary($logId, array $context)
|
|
{
|
|
if ($logId <= 0) {
|
|
return ['ok' => false, 'message' => '无效 log_id，无法执行二次风控'];
|
|
}
|
|
|
|
$fp = $context['fp_hdata'];
|
|
if (!is_array($fp)) {
|
|
return ['ok' => false, 'message' => 'fp_hdata 无效'];
|
|
}
|
|
|
|
$scheme = 'https://';
|
|
$host = $context['domain'];
|
|
$fp['log_id'] = $logId;
|
|
$fp['ip'] = $context['ip'];
|
|
$fp['referer'] = $context['referer'];
|
|
if (empty($fp['domain'])) {
|
|
$fp['domain'] = $scheme . $host . '/';
|
|
}
|
|
|
|
$result = FCheckHandler::process($fp);
|
|
if (empty($result['ok'])) {
|
|
return [
|
|
'ok' => false,
|
|
'message' => $result['message'] ?? '二次风控失败',
|
|
];
|
|
}
|
|
|
|
if (!empty($GLOBALS['__cloak_simulation_on']) && isset($result['reason'])) {
|
|
self::tagReasonOnLog($logId, (string) $result['reason']);
|
|
}
|
|
|
|
return [
|
|
'ok' => true,
|
|
'result' => !empty($result['result']),
|
|
'reason' => $result['reason'] ?? '',
|
|
'link' => $result['link'] ?? '',
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param int $logId
|
|
* @param string $reason
|
|
* @param bool $passed
|
|
*/
|
|
private static function tagReasonOnLog($logId, $reason)
|
|
{
|
|
$conn = @new mysqli('localhost', DB_USERNAME, DB_PASSWORD, DB_NAME);
|
|
if (!$conn || $conn->connect_error) {
|
|
return;
|
|
}
|
|
$reasonEsc = cloak_db_escape($conn, self::tagReason($reason));
|
|
$conn->query("UPDATE `visitor_logs` SET `reason`='{$reasonEsc}' WHERE `id`=" . (int) $logId);
|
|
$conn->close();
|
|
}
|
|
|
|
/**
|
|
* @param array $context
|
|
*/
|
|
private static function injectEnvironment(array $context)
|
|
{
|
|
$host = $context['domain'];
|
|
$pageUrl = $context['page_url'];
|
|
$parts = parse_url($pageUrl);
|
|
$path = $parts['path'] ?? ('/' . $context['config_name'] . '.php');
|
|
$query = $parts['query'] ?? '';
|
|
|
|
$_GET = [];
|
|
if ($query !== '') {
|
|
parse_str($query, $_GET);
|
|
}
|
|
$_REQUEST = $_GET;
|
|
$_COOKIE = is_array($context['cookies']) ? $context['cookies'] : [];
|
|
|
|
$visitCode = $context['visit_md5_code'];
|
|
if ($visitCode === '' || $visitCode === 'loss') {
|
|
$visitCode = md5($context['ip'] . microtime(true));
|
|
}
|
|
$_COOKIE['gfuid'] = $visitCode;
|
|
$_SESSION['gcuid'] = $visitCode;
|
|
$_SESSION['gcu_ip'] = $context['ip'];
|
|
|
|
$_SERVER['HTTP_HOST'] = $host;
|
|
$_SERVER['SERVER_NAME'] = $host;
|
|
$_SERVER['REMOTE_ADDR'] = $context['ip'];
|
|
$_SERVER['HTTP_USER_AGENT'] = $context['user_agent'];
|
|
$_SERVER['HTTP_REFERER'] = $context['referer'];
|
|
$_SERVER['HTTP_ACCEPT_LANGUAGE'] = $context['accept_language'];
|
|
$_SERVER['HTTPS'] = 'on';
|
|
$_SERVER['SERVER_PORT'] = '443';
|
|
$_SERVER['REQUEST_URI'] = $path . ($query !== '' ? '?' . $query : '');
|
|
$_SERVER['QUERY_STRING'] = $query;
|
|
$_SERVER['PHP_SELF'] = $path;
|
|
$_SERVER['SCRIPT_NAME'] = $path;
|
|
}
|
|
|
|
/**
|
|
* @param visitorInfo $v_info
|
|
* @param string $reason
|
|
* @param string $model
|
|
* @param array $context
|
|
* @param int|null $sourceLogId
|
|
* @return array
|
|
*/
|
|
private static function buildLogs($v_info, $reason, $model, array $context, $sourceLogId)
|
|
{
|
|
$logs = [
|
|
'site_name' => str_replace('www.', '', $context['domain']),
|
|
'customers_ip' => $v_info->v_ip,
|
|
'country' => substr((string) $v_info->v_country, 0, 2),
|
|
'v_Browser' => $v_info->v_Browser,
|
|
'v_referer' => $v_info->v_referer,
|
|
'Client' => $v_info->v_Client,
|
|
'v_PageURL' => $v_info->v_curPageURL,
|
|
'accept_language' => $v_info->accept_language,
|
|
'visit_md5_code' => $_SESSION['gcuid'] ?? $v_info->visit_md5_code,
|
|
'campagin_id' => $v_info->costm_ip_score,
|
|
'result' => $_SESSION['check_result'] ?? 'false',
|
|
'device' => $model,
|
|
'reason' => self::tagReason($reason),
|
|
'user_agent' => $context['user_agent'],
|
|
'http_referer' => $context['referer'],
|
|
'accept_language_raw' => $context['accept_language'],
|
|
'is_simulation' => 1,
|
|
];
|
|
if ($sourceLogId) {
|
|
$logs['sim_source_log_id'] = (int) $sourceLogId;
|
|
}
|
|
return $logs;
|
|
}
|
|
|
|
/**
|
|
* @param array $context
|
|
* @return string
|
|
*/
|
|
private static function detectDevice(array $context)
|
|
{
|
|
if ($context['device_override'] !== '') {
|
|
return $context['device_override'];
|
|
}
|
|
$uaPath = dirname(__DIR__, 2) . '/Mobile-Detect/src/MobileDetect.php';
|
|
if (!is_file($uaPath)) {
|
|
return 'PC';
|
|
}
|
|
require_once $uaPath;
|
|
$detect = new \Detection\MobileDetect;
|
|
$deviceType = ($detect->isMobile() ? ($detect->isTablet() ? 'tablet' : 'phone') : 'computer');
|
|
if ($deviceType === 'computer') {
|
|
return 'PC';
|
|
}
|
|
$patterns = $deviceType === 'tablet' ? $detect::getTabletDevices() : $detect::getPhoneDevices();
|
|
$model = ucfirst($deviceType);
|
|
foreach ($patterns as $brand => $pattern) {
|
|
if (preg_match('/' . $pattern . '/i', $context['user_agent'], $matches)) {
|
|
$model = $brand . ' ' . (isset($matches[1]) ? $matches[1] : '');
|
|
break;
|
|
}
|
|
}
|
|
return trim($model) !== '' ? trim($model) : 'Mobile';
|
|
}
|
|
|
|
/**
|
|
* @param string $raw
|
|
* @return array|null
|
|
*/
|
|
private static function parseFpHdata($raw)
|
|
{
|
|
$raw = trim((string) $raw);
|
|
if ($raw === '') {
|
|
return null;
|
|
}
|
|
if ($raw[0] === '{' || $raw[0] === '[') {
|
|
$decoded = json_decode($raw, true);
|
|
return is_array($decoded) ? $decoded : null;
|
|
}
|
|
$decodedString = base64_decode($raw, true);
|
|
if ($decodedString === false) {
|
|
return null;
|
|
}
|
|
$decoded = json_decode($decodedString, true);
|
|
return is_array($decoded) ? $decoded : null;
|
|
}
|
|
|
|
/**
|
|
* @param string $pageUrl
|
|
* @param string $domain
|
|
* @return string
|
|
*/
|
|
private static function guessConfigName($pageUrl, $domain)
|
|
{
|
|
$path = parse_url($pageUrl, PHP_URL_PATH);
|
|
if (is_string($path) && $path !== '') {
|
|
$base = basename($path, '.php');
|
|
if ($base !== '' && preg_match('/^[a-zA-Z0-9_-]+$/', $base)) {
|
|
return $base;
|
|
}
|
|
}
|
|
return '';
|
|
}
|
|
|
|
/**
|
|
* @param string $configName
|
|
* @return string
|
|
*/
|
|
private static function defaultHostForConfig($configName)
|
|
{
|
|
try {
|
|
$pdo = DomainRepository::pdo();
|
|
DomainRepository::ensureTable($pdo);
|
|
$host = DomainRepository::primaryHostnameForConfig($pdo, $configName);
|
|
if ($host !== '') {
|
|
return self::normalizeHost($host);
|
|
}
|
|
} catch (Throwable $e) {
|
|
}
|
|
return self::normalizeHost($_SERVER['HTTP_HOST'] ?? 'localhost');
|
|
}
|
|
|
|
/**
|
|
* @param string $host
|
|
* @return string
|
|
*/
|
|
private static function normalizeHost($host)
|
|
{
|
|
$host = trim(strtolower((string) $host));
|
|
$host = preg_replace('#^https?://#', '', $host);
|
|
$host = explode('/', $host)[0];
|
|
return preg_replace('/^www\./', '', $host);
|
|
}
|
|
|
|
/**
|
|
* @param int $logId
|
|
* @return array|null
|
|
*/
|
|
private static function fetchLogRow($logId)
|
|
{
|
|
if ($logId <= 0) {
|
|
return null;
|
|
}
|
|
$conn = @new mysqli('localhost', DB_USERNAME, DB_PASSWORD, DB_NAME);
|
|
if (!$conn || $conn->connect_error) {
|
|
return null;
|
|
}
|
|
VisitorLogSchema::ensureColumns($conn);
|
|
$sql = 'SELECT * FROM `visitor_logs` WHERE `id`=' . (int) $logId . ' LIMIT 1';
|
|
$res = $conn->query($sql);
|
|
if (!$res || $res->num_rows === 0) {
|
|
$conn->close();
|
|
return null;
|
|
}
|
|
$row = $res->fetch_assoc();
|
|
$res->free();
|
|
$conn->close();
|
|
return $row;
|
|
}
|
|
|
|
/**
|
|
* @return array
|
|
*/
|
|
private static function backupGlobals()
|
|
{
|
|
return [
|
|
'_SERVER' => $_SERVER,
|
|
'_GET' => $_GET,
|
|
'_REQUEST' => $_REQUEST,
|
|
'_COOKIE' => $_COOKIE,
|
|
'_SESSION' => $_SESSION,
|
|
'GLOBALS' => [
|
|
'__cloak_simulation_on' => $GLOBALS['__cloak_simulation_on'] ?? null,
|
|
'__cloak_force_sync_log' => $GLOBALS['__cloak_force_sync_log'] ?? null,
|
|
'__cloak_debug_on' => $GLOBALS['__cloak_debug_on'] ?? null,
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @param array $backup
|
|
*/
|
|
private static function restoreGlobals(array $backup)
|
|
{
|
|
$_SERVER = $backup['_SERVER'];
|
|
$_GET = $backup['_GET'];
|
|
$_REQUEST = $backup['_REQUEST'];
|
|
$_COOKIE = $backup['_COOKIE'];
|
|
$_SESSION = $backup['_SESSION'];
|
|
foreach ($backup['GLOBALS'] as $key => $value) {
|
|
if ($value === null) {
|
|
unset($GLOBALS[$key]);
|
|
} else {
|
|
$GLOBALS[$key] = $value;
|
|
}
|
|
}
|
|
}
|
|
}
|