SensitiveMiddleware.php 3.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293
  1. <?php
  2. declare(strict_types=1);
  3. namespace App\Middleware\Auth;
  4. use App\Tools\PublicData;
  5. use Hyperf\HttpServer\Contract\RequestInterface;
  6. use Hyperf\HttpServer\Contract\ResponseInterface as HttpResponse;
  7. use Psr\Container\ContainerInterface;
  8. use Psr\Http\Message\ResponseInterface;
  9. use Psr\Http\Message\ServerRequestInterface;
  10. use Psr\Http\Server\MiddlewareInterface;
  11. use Psr\Http\Server\RequestHandlerInterface;
  12. use Hyperf\HttpMessage\Stream\SwooleStream;
  13. use Hyperf\Di\Annotation\Inject;
  14. use Hyperf\Redis\Redis;
  15. //use Swoole\Http\Request;
  16. class SensitiveMiddleware implements MiddlewareInterface
  17. {
  18. protected ContainerInterface $container;
  19. protected RequestInterface $request;
  20. protected HttpResponse $response;
  21. #[Inject]
  22. protected Redis $redis;
  23. const STREAM_URL = [
  24. '/news/addArticle',
  25. '/news/updateArticle'
  26. ];
  27. public function __construct( RequestInterface $request, HttpResponse $response)
  28. {
  29. $this->request = $request;
  30. $this->response = $response;
  31. }
  32. public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
  33. {
  34. $uri = $request->getUri();
  35. // var_dump("222:",$uri);
  36. // 获取接口路径(不包含查询参数)
  37. $path = $uri->getPath();
  38. // var_dump("3333:",$path);
  39. // var_dump("获取接口地址L:",$path);
  40. try {
  41. var_dump("测试:",$path);
  42. if($path && in_array($path,self::STREAM_URL)){
  43. $badWords = $this->redis->sMembers('black_word'); //黑名单
  44. $whiteWords = $this->redis->sMembers('white_word');//白名单
  45. // 获取所有请求参数并拼接成文本
  46. $params = $this->request->all();
  47. $concatenated = "";
  48. if($params){
  49. foreach ($params as $value) {
  50. if (is_array($value)) {
  51. // 如果值是数组,将数组元素用逗号连接
  52. $concatenated.= json_encode($value);
  53. } else {
  54. // 如果不是数组,直接拼接
  55. $concatenated.= $value;
  56. }
  57. }
  58. }
  59. // 遍历违禁词,检查是否在文本中存在
  60. foreach ($badWords as $badWord) {
  61. // 判断该违禁词是否在白名单中,如果在则跳过
  62. if (in_array($badWord, $whiteWords)) {
  63. continue;
  64. }
  65. if (str_contains($concatenated, $badWord)) {
  66. // 处理找到违禁词的情况,例如返回错误信息
  67. $message = '发现违禁词: '. $badWord;
  68. return $this->response->json(
  69. [
  70. 'code' => 0,
  71. 'data' => [$message],
  72. 'message' => "该内容存在非法信息,请修改后重新发布"
  73. ]
  74. );
  75. }
  76. }
  77. }else{
  78. // var_dump("测试:",$request);
  79. return $handler->handle($request);
  80. }
  81. }catch (\Exception $e){
  82. var_dump("错误消息:",$e->getMessage(),$e->getCode());
  83. return $handler->handle($request);
  84. }
  85. return false;
  86. }
  87. }