From 751866d9c133e8e63e686ae778de157935b1ac84 Mon Sep 17 00:00:00 2001 From: qing <1776177662@qq.com> Date: Wed, 29 Jul 2026 11:52:46 +0800 Subject: [PATCH] refix --- dnfs/dnfs.py | 2 +- gateway/_run.sh | 1 + waf/rules/local/custom.conf | 26 +++++++++++++------------- 3 files changed, 15 insertions(+), 14 deletions(-) diff --git a/dnfs/dnfs.py b/dnfs/dnfs.py index 8a559c8..d317e2c 100755 --- a/dnfs/dnfs.py +++ b/dnfs/dnfs.py @@ -38,7 +38,7 @@ _DBV2_ADDR = '127.0.0.1' _DBV2_PORT = 8005 # 管理员账号：删除/更新节点时豁免所有权校验（保留旧的 'admin' 以兼容历史数据） -ADMIN_USERS = ('admin', 'admin@qsont.me') +ADMIN_USERS = ('admin@qsont.me', 'qing@qsont.me') def _call_dbv2(payload: dict, timeout: int = 10) -> dict: """通过 pymsg 短连接调用 dbv2 数据库服务。 diff --git a/gateway/_run.sh b/gateway/_run.sh index df8a225..172a051 100644 --- a/gateway/_run.sh +++ b/gateway/_run.sh @@ -1,3 +1,4 @@ #!/bin/bash cd "$(dirname "$0")" || exit +sleep 1 exec ./build/gateway.out -i example.ini #1>/dev/null diff --git a/waf/rules/local/custom.conf b/waf/rules/local/custom.conf index 4f57cd9..9c858de 100644 --- a/waf/rules/local/custom.conf +++ b/waf/rules/local/custom.conf @@ -2,25 +2,25 @@ # ID 段：100000-199999 # 100001: 拦截 SQL 注入特征（UNION SELECT） -SecRule REQUEST_URI|ARGS "@rx (?i)union[\s/*]+select" \ - "id:100001,phase:1,deny,status:403,log,msg:'SQL injection: UNION SELECT'" +#SecRule REQUEST_URI|ARGS "@rx (?i)union[\s/*]+select" \ +# "id:100001,phase:1,deny,status:403,log,msg:'SQL injection: UNION SELECT'" -# 100002: 拦截 SQL 注释符 -SecRule ARGS "@rx (?i)(--|#|/\*.*\*/)" \ - "id:100002,phase:2,deny,status:403,log,msg:'SQL injection: comment'" +## 100002: 拦截 SQL 注释符 +#SecRule ARGS "@rx (?i)(--|#|/\*.*\*/)" \ +# "id:100002,phase:2,deny,status:403,log,msg:'SQL injection: comment'" # 100003: 拦截 XSS 标签 -SecRule ARGS|REQUEST_HEADERS "@rx (?i)