{include file='common/head.html'}
<style type="text/css">
    .layui-form-label {
        width: 70px;
        text-align: left
    }

    .layui-input-block {
        padding-left: 100px
    }

    .layui-table {
        margin-top: 0
    }
</style>
<div class="layui-body">
    <div class="layui-tab layui-tab-brief" lay-filter="tab" style="padding: 0 15px;">
        {if([$index])}
        <ul class="layui-tab-title">
            <li class="layui-this" lay-id="t1">核心规则</li>
            <li lay-id="t2">附加规则<span class="layui-badge-dot upgtip hide"></span></li>
            <button type="button" onclick="importDefaultData('1', '确认要重置所有规则吗？');" class="layui-btn layui-btn-danger layui-btn-sm" style="float: right;margin-top:5px">初始规则</button>
        </ul>
        <div class="layui-tab-content">
            <div class="layui-tab-item layui-show">
                <form action="{url./admin/Waf/mod/action/config/tab/1}" method="post" class="layui-form">
                    <input type="hidden" name="formcheck" value="{$formcheck}">
                    <table class="layui-table" lay-skin="line">
                        <thead>
                            <tr>
                                <th>名称</th>
                                <th>描述</th>
                                <th>响应</th>
                                <th>状态</th>
                                <th>操作</th>
                            </tr>
                        </thead>
                        <tbody>
                            {foreach $waf_list(key,value)}
                            <tr>
                                <td>{php}echo $value['title'];{/php}</td>
                                <td>{php}echo $value['desc'];{/php}</td>
                                <td class="table-input"><input type="text" lay-ignore class="layui-input" name="code[{php}echo $key;{/php}]" value="{php}echo $value['code'];{/php}"></td>
                                <td><input type="checkbox" value="1" name="status[{php}echo $key;{/php}]" lay-skin="switch" lay-filter="switchTest" title="开|关" {php} if($value['status']=='1' ){ echo 'checked' ;}{/php}></td>
                                <td><a href="{url./admin/Waf/index/action/list/rule}/{php}echo $value['name'];{/php}" class="layui-font-green">规则</a></td>
                            </tr>
                            {/foreach}
                        </tbody>
                    </table>
                    <div class="layui-form-item" style="float:left;">
                        <button class="layui-btn" lay-submit>立即提交</button>
                        <button type="reset" class="layui-btn layui-btn-primary">重置</button>
                    </div>
                </form>
            </div>
            <div class="layui-tab-item">
                <form action="{url./admin/Waf/mod/action/config/tab/2}" method="post" class="layui-form">
                    <input type="hidden" name="formcheck" value="{$formcheck}">
                    <div class="layui-form-item">
                        <label class="layui-form-label">WAF版本</label>
                        <div class="layui-form-mid layui-text-em">
                            <span style="color: var(--color);">{$waf_config.version}</span>
                            <a class="layui-btn layui-btn-danger layui-btn-xs upgtip hide" onclick="importDefaultData('2', '确认要更新吗？这将重置所有核心规则！');">发现更新</a>
                        </div>
                    </div>
                    <div class="layui-form-item">
                        <label class="layui-form-label">拦截界面</label>
                        <div class="layui-input-block">
                            <input type="radio" name="ext_waf_hide_msg" value="0" {if([$waf_config.waf_hide_msg]=='0' || [$waf_config.waf_hide_msg]=='' )} checked="checked" {/if} title="显示">
                            <input type="radio" name="ext_waf_hide_msg" value="1" {if([$waf_config.waf_hide_msg]=='1' )} checked="checked" {/if} title="隐藏">
                            <span class="layui-icon layui-icon-about tips" data-content="隐藏后触发拦截规则直接返回403状态"></span>
                        </div>
                    </div>
                    <div class="layui-form-item">
                        <label class="layui-form-label">拦截页主题</label>
                        <div class="layui-input-inline">
                            <select name="ext_waf_block_tpl">
                                <option value="">请选择拦截页主题</option>
                                {foreach $tipspagetpl(key,value)}
                                {if(strtolower(strrchr($value, '.')) == '.html')}
                                <option value="[value]" {if([$waf_config.waf_block_tpl]==$value)}selected{/if}>[value]</option>
                                {/if}
                                {/foreach}
                            </select>
                        </div>
                        <span class="layui-icon layui-icon-about tips" data-content="自定义WAF拦截页主题，更新不覆盖<br>写法参考内置主题，主题放置目录为：<br>/core/waf/html"></span>
                    </div>
                    <div class="layui-form-item">
                        <label class="layui-form-label">日志记录</label>
                        <div class="layui-input-block">
                            <input type="radio" name="ext_waf_block_log" value="1" {if([$waf_config.waf_block_log]=='1' )} checked="checked" {/if} title="启用">
                            <input type="radio" name="ext_waf_block_log" value="0" {if([$waf_config.waf_block_log]=='0' || [$waf_config.waf_block_log]=='' )} checked="checked" {/if} title="关闭">
                            <span class="layui-icon layui-icon-about tips" data-content="启用后所有触发拦截规则的行为将会被记录到/runtime/waf目录下<br>注意：记录日志对性能有轻微影响，且日志文件设定为手动清理，如需清理请自行删除/runtime/waf文件夹"></span>
                        </div>
                    </div>
                    <div class="layui-form-item">
                        <label class="layui-form-label">URL防溢出</label>
                        <div class="layui-input-inline">
                            <input type="number" name="ext_url_max_length" value="{$waf_config.url_max_length}" placeholder="请输入URL允许的最大长度" class="layui-input">
                        </div>
                        <span class="layui-icon layui-icon-about tips" data-content="超出设定长度的URL将会被拦截!"></span>
                    </div>
                    <div class="layui-form-item">
                        <label class="layui-form-label">URL看门狗</label>
                        <div class="layui-input-block">
                            <input type="radio" name="ext_url_check_ages" value="1" {if([$waf_config.url_check_ages]=='1' ||[$waf_config.url_check_ages]=='' )} checked="checked" {/if} title="启用">
                            <input type="radio" name="ext_url_check_ages" value="0" {if([$waf_config.url_check_ages]=='0' )} checked="checked" {/if} title="禁用">
                            <span class="layui-icon layui-icon-about tips" data-content="启用后，拦截URL中所有非白名单参数！"></span>
                        </div>
                        <div class="layui-form-mid layui-word-aux">注意：如果前台搜索定义了搜索字段或条件，请把携带的参数都添加到白名单中</div>
                    </div>
                    <div class="layui-form-item ext_url_check_ages" {if([$waf_config.url_check_ages]=='0' )}style="display: none;" {/if}>
                        <label class="layui-form-label">看门方式</label>
                        <div class="layui-input-block">
                            <input type="radio" name="ext_url_guard_method" value="0" {if([$waf_config.url_guard_method]=='0' ||[$waf_config.url_guard_method]=='' )} checked="checked" {/if} title="净化">
                            <input type="radio" name="ext_url_guard_method" value="1" {if([$waf_config.url_guard_method]=='1' )} checked="checked" {/if} title="拦截">
                            <span class="layui-icon layui-icon-about tips" data-content="净化：移除非白名单参数并跳转移除后页面<br>拦截：拦截非白名单参数并阻断后续的请求"></span>
                        </div>
                    </div>
                    <div class="layui-form-item ext_url_check_ages" {if([$waf_config.url_check_ages]=='0' )}style="display: none;" {/if}>
                        <label class="layui-form-label">参数白名单</label>
                        <div class="layui-input-inline input-md">
                            <textarea name="ext_url_allow_args" placeholder="请输入需要放行的URL参数，多个之间竖杠隔开" class="layui-textarea">{$waf_config.url_allow_args}</textarea>
                        </div>
                        <span class="layui-icon layui-icon-about tips" data-content="白名单中的参数不会被拦截!"></span>
                    </div>
                    <!-- <div class="layui-form-item">
                        <label class="layui-form-label">缓存目录</label>
                        <div class="layui-input-inline">
                            <input type="text" name="ext_run_path_name" value="{if([$waf_config.run_path_name]=='default.html')}{$waf_config.run_path_name}{else}runtime{/if}" placeholder="请输入缓存目录名称" class="layui-input">
                            <input type="hidden" name="ext_run_path_name_old" value="{if([$waf_config.run_path_name]=='default.html')}{$waf_config.run_path_name}{else}runtime{/if}">
                        </div>
                        <div class="layui-form-mid layui-text-em">
                            缓存目录名称，留空默认runtime
                        </div>
                    </div> -->
                    <hr>
                    <div class="layui-form-item">
                        <div class="layui-input-block">
                            <button class="layui-btn" lay-submit name="submit">立即提交</button>
                            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
                        </div>
                    </div>
                </form>
            </div>
        </div>
        <script>
            $.ajax({
                type: 'GET',
                url: '{fun=get_config("server_host")}/upgrade.php?upgrade=checkwaf',
                dataType: 'text',
                success: function(version) {
                    if (version > '{$waf_config.version}') {
                        $('.upgtip').css('display', 'inline-block');
                    }
                }
            });

            function importDefaultData(type, str) {
                layui.use(['layer'], function() {
                    var layer = layui.layer;
                    layer.confirm(str, {
                        con: 3,
                        btn: ['确定', '取消'] //按钮
                    }, function() {
                        layer.load();
                        $.post('{url./admin/Waf/importDefaultData}', {
                            formcheck: "{$formcheck}",
                            type: type
                        }, function(data) {
                            layer.closeAll('loading');
                            if (data.code) {
                                layer.msg(data.data, {
                                    icon: 1
                                });
                                setTimeout(function() {
                                    window.location.reload();
                                }, 1000);
                            } else {
                                layer.msg(data.data, {
                                    icon: 5
                                });
                            }
                        }, 'json');
                    });
                });
            };

            layui.use('form', function() {
                var form = layui.form;
                // 关联项自动隐藏显示
                form.on('radio', function(data) {
                    let x = data.elem.getAttribute("name");
                    let v = $('input[name=' + x + ']:checked').val();
                    if (v >= 1) {
                        $("." + x).stop().slideDown();
                    } else {
                        $("." + x).stop().slideUp();
                    }
                    form.render();
                });
            });
        </script>
        {/if}
        {if([$list])}
        <div class="layui-tab layui-tab-brief" style="padding: 0;">
            <ul class="layui-tab-title">
                <li class="layui-this">{$ruletitle}</li>
            </ul>
            <div class="layui-tab-content">
                <div class="layui-tab-item layui-show">
                    {if([$rulename] == 'url')}
                    <div class="ant-alert ant-alert-info">
                        <i class="fa fa-info-circle anticon ant-alert-icon" aria-hidden="true"></i><span class="ant-alert-message">注意：要禁止静态资源被直接访问，须依赖服务器配置来实施访问控制，PHP无法直接拦截或处理对静态资源的直接请求。</span>
                    </div>
                    {/if}
                    <form action="{url./admin/Waf/mod/rule}/{$rulename}/action/rule" method="post" class="layui-form">
                        <input type="hidden" name="formcheck" value="{$formcheck}">
                        <table class="layui-table" lay-skin="line">
                            <colgroup>
                                <col>
                                <col width="200">
                                <col width="60">
                            </colgroup>
                            <thead>
                                <tr>
                                    <th>规则</th>
                                    <th>说明</th>
                                    <th>状态</th>
                                </tr>
                            </thead>
                            <tbody>
                                {foreach $rule(key,value)}
                                <tr>
                                    <td><input type="text" class="layui-input" name="rule_args[{php}echo $key;{/php}]" value="{php}echo htmlentities($value[1]);{/php}" style="min-width:150px;height:30px;"></td>
                                    <td><input type="text" class="layui-input" name="rule_desc[{php}echo $key;{/php}]" value="{php}echo $value[2];{/php}" style="max-width:150px;height:30px;"></td>
                                    <td><input type="checkbox" value="1" name="rule_status[{php}echo $key;{/php}]" lay-skin="switch" lay-filter="switchTest" title="开|关" {php} if($value[0]=='1' ){ echo 'checked' ;}{/php}></td>
                                </tr>
                                {/foreach}
                                <tr>
                                    <td><input type="text" class="layui-input" name="rule_args[{$count}]" value="" placeholder="规则内容，请使用正则表达式" style="min-width:150px;height:30px;"></td>
                                    <td><input type="text" class="layui-input" name="rule_desc[{$count}]" value="" placeholder="说明" style="max-width:150px;height:30px;"></td>
                                    <td><input type="checkbox" value="1" name="rule_status[{$count}]" lay-skin="switch" lay-filter="switchTest" title="开|关"></td>
                                </tr>
                            </tbody>
                        </table>
                        <div class="layui-form-item">
                            <button class="layui-btn" lay-submit>立即提交</button>
                            <button type="reset" class="layui-btn layui-btn-primary">重置</button>
                            {fun=get_btn_back()}
                        </div>
                    </form>
                </div>
            </div>
        </div>
        {/if}
        {if([$list2])}
        <div class="layui-tab layui-tab-brief" style="padding: 0;">
            <ul class="layui-tab-title">
                <li class="layui-this">{$ruletitle}</li>
            </ul>
            <div class="layui-tab-content">
                <div class="layui-tab-item layui-show">
                    <form action="{url./admin/Waf/mod/rule/scan_black}" method="post" class="layui-form">
                        <input type="hidden" name="formcheck" value="{$formcheck}">
                        <div class="layui-form-item">
                            <label class="layui-form-label">Header</label>
                            <div class="layui-input-block">
                                <textarea name="scan_black[header]" placeholder="请使用正则表达式，提交前应先备份原有表达式" class="layui-textarea">{$rule.header}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <label class="layui-form-label">Cookie</label>
                            <div class="layui-input-block">
                                <textarea name="scan_black[cookie]" placeholder="请使用正则表达式，提交前应先备份原有表达式" class="layui-textarea">{$rule.cookie}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <label class="layui-form-label">Args</label>
                            <div class="layui-input-block">
                                <textarea name="scan_black[args]" placeholder="请使用正则表达式，提交前应先备份原有表达式" class="layui-textarea">{$rule.args}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <div class="layui-input-block">
                                <button class="layui-btn" lay-submit>立即提交</button>
                                <button type="reset" class="layui-btn layui-btn-primary">重置</button>
                                {fun=get_btn_back()}
                            </div>
                        </div>
                    </form>
                </div>
            </div>
        </div>
        {/if}
        {if([$list3])}
        <div class="layui-tab layui-tab-brief" style="padding: 0;">
            <ul class="layui-tab-title">
                <li class="layui-this">{$ruletitle}</li>
            </ul>
            <div class="layui-tab-content">
                <div class="layui-tab-item layui-show">
                    <form action="{url./admin/Waf/mod/rule/char}" method="post" class="layui-form">
                        <input type="hidden" name="formcheck" value="{$formcheck}">
                        <div class="layui-form-item">
                            <label class="layui-form-label">UA过滤</label>
                            <div class="layui-input-block">
                                <textarea name="char[ua]" placeholder="UA过滤，User-Agent不允许的特殊字符，正则模型或直接写，如：\*" class="layui-textarea">{$rule.ua}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <label class="layui-form-label">GET过滤</label>
                            <div class="layui-input-block">
                                <textarea name="char[get]" placeholder="GET-URL过滤，URL不允许的特殊字符，正则模型或直接写，如：\*" class="layui-textarea">{$rule.get}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <label class="layui-form-label">POST过滤</label>
                            <div class="layui-input-block">
                                <textarea name="char[post]" placeholder="POST过滤，POST不允许的特殊字符，正则模型或直接写，如：\*" class="layui-textarea">{$rule.post}</textarea>
                            </div>
                        </div>
                        <div class="layui-form-item">
                            <div class="layui-input-block">
                                <button class="layui-btn" lay-submit>立即提交</button>
                                <button type="reset" class="layui-btn layui-btn-primary">重置</button>
                                {fun=get_btn_back()}
                            </div>
                        </div>
                    </form>
                </div>
            </div>
        </div>
        {/if}
    </div>
</div>
{if(!session('rd_unlock'))}
<script>
    $(document).ready(function() {
        layui.use("layer", function() {
            var layer = layui.layer;
            layer.ready(function() {
                layer.prompt({
                    title: '开发者密码验证',
                    formType: 1,
                    closeBtn: 0,
                    btnAlign: 'c',
                    btn: ['验证']
                }, function(value, index) {
                    $.post('{url./admin/index/developerCheck}', {
                        fm_pwd: value,
                        formcheck: '{$formcheck}'
                    }, function(data) {
                        if (data.code == '1') {
                            layer.msg(data.data, {
                                icon: 1
                            });
                            layer.close(index);
                            location.reload();
                        } else {
                            layer.msg(data.data, {
                                icon: 2
                            });
                        }
                    }, 'json');
                });
            })
        })
    });
</script>
{/if}
{include file='common/foot.html'}