Method validateOneClickForm

internal/waf/captcha_validator.go:513–554

(actionConfig *CaptchaAction, policyId int64, groupId int64, setId int64, originURL string, req requests.Request, writer http.ResponseWriter, useLocalFirewall bool)

}

func (this *CaptchaValidator) validateOneClickForm(actionConfig *CaptchaAction, policyId int64, groupId int64, setId int64, originURL string, req requests.Request, writer http.ResponseWriter, useLocalFirewall bool) (allow bool) {
	var captchaId = req.WAFRaw().FormValue(captchaIdName)
	var nonce = req.WAFRaw().FormValue("nonce")
	if len(captchaId) > 0 {
		var key = "WAF_CAPTCHA:" + captchaId
		var cacheItem = ttlcache.SharedInt64Cache.Read(key)
		ttlcache.SharedInt64Cache.Delete(key)
		if cacheItem != nil {
			// 清除计数
			CaptchaDeleteCacheKey(req)

			if cacheItem.Value == types.Int64(nonce) {
				var life = CaptchaSeconds
				if actionConfig.Life > 0 {
					life = types.Int(actionConfig.Life)
				}

				// 加入到白名单
				SharedIPWhiteList.RecordIP(wafutils.ComposeIPType(setId, req), actionConfig.Scope, req.WAFServerId(), req.WAFRemoteIP(), time.Now().Unix()+int64(life), policyId, false, groupId, setId, "")

				req.ProcessResponseHeaders(writer.Header(), http.StatusSeeOther)

				// 记录到Cookie
				this.setCookie(writer, setId, life)

				http.Redirect(writer, req.WAFRaw(), originURL, http.StatusSeeOther)

				return false
			}
		} else {
			// 增加计数
			if !CaptchaIncreaseFails(req, actionConfig, policyId, groupId, setId, CaptchaPageCodeSubmit, useLocalFirewall) {
				return false
			}

			req.ProcessResponseHeaders(writer.Header(), http.StatusSeeOther)
			http.Redirect(writer, req.WAFRaw(), req.WAFRaw().URL.String(), http.StatusSeeOther)
		}
	}

	return true
}

func (this *CaptchaValidator) showSlideForm(actionConfig *CaptchaAction, req requests.Request, writer http.ResponseWriter) {
	var lang = actionConfig.Lang