1 files changed, 79 insertions, 0 deletions
diff --git a/example.lua b/example.lua
new file mode 100644
index 0000000..91f4893
--- /dev/null
+++ b/example.lua
@@ -0,0 +1,79 @@
+local detector = require('waf.detector')
+local analyzer = require('waf.analyzer')
+local filter = require('waf.filter')
+local limits = require('waf.limits')
+local config = require('waf.config')
+local ban = require('waf.ban')
+local log = require('utils.log')
+
+local default_code = config.code
+local duration = config.duration
+local valid_ips = config.ips
+local ban_add = ban.add
+local ban_check = ban.check
+local headers
+local meta
+local client_ip = ngx.var.remote_addr
+
+local function answer(code)
+	code = code or default_code
+	return ngx.exit(444)
+end
+
+local function valid(ip)
+	for k=1,#valid_ips do
+		if valid_ips[k] == ip then return end
+	end
+	return false
+end
+
+log.name = 'waf'
+log.level = 'trace'
+
+if valid(client_ip) then return true end
+if ban_check(client_ip) or ngx.var.is_bot == '1' then return answer() end
+
+if not detector then 
+	log.error('Не найден детектор') 
+else
+	headers = ngx.req.get_headers()
+	meta = {
+		method = ngx.var.request_method,
+		uri = ngx.var.uri
+	}
+	local res,level = detector.check(headers,meta)
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end
+end
+
+if not limits then 
+	log.error('Не найден лимитизатор')	 
+else
+	local res,level = limits.check(meta,client_ip)
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end	
+end
+
+if not analyzer then 
+	log.error('Не найден анализатор')	 
+else
+	local res,level = analyzer.check()
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end	
+end
+
+if not filter then 
+	log.error('Не найден фильтр') 
+else
+	local res = filter.check()
+	if not res then 
+		ban_add(client_ip, duration)
+		return answer()
+	end	
+end