From 327b9128fea47c2d8db622933d79ee8cf0c1f86f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=A2=D0=B0=D1=82=D1=8C=D1=8F=D0=BD=D0=B0=20=D0=A4=D0=B0?=
 =?UTF-8?q?=D1=80=D0=B1=D0=B5=D1=80?= <alexandr@asustem.ru>
Date: Thu, 22 Oct 2026 00:10:41 +0400
Subject: php2shell add

---
 example.lua | 79 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 79 insertions(+)
 create mode 100644 example.lua

(limited to 'example.lua')

diff --git a/example.lua b/example.lua
new file mode 100644
index 0000000..91f4893
--- /dev/null
+++ b/example.lua
@@ -0,0 +1,79 @@
+local detector = require('waf.detector')
+local analyzer = require('waf.analyzer')
+local filter = require('waf.filter')
+local limits = require('waf.limits')
+local config = require('waf.config')
+local ban = require('waf.ban')
+local log = require('utils.log')
+
+local default_code = config.code
+local duration = config.duration
+local valid_ips = config.ips
+local ban_add = ban.add
+local ban_check = ban.check
+local headers
+local meta
+local client_ip = ngx.var.remote_addr
+
+local function answer(code)
+	code = code or default_code
+	return ngx.exit(444)
+end
+
+local function valid(ip)
+	for k=1,#valid_ips do
+		if valid_ips[k] == ip then return end
+	end
+	return false
+end
+
+log.name = 'waf'
+log.level = 'trace'
+
+if valid(client_ip) then return true end
+if ban_check(client_ip) or ngx.var.is_bot == '1' then return answer() end
+
+if not detector then 
+	log.error('Не найден детектор') 
+else
+	headers = ngx.req.get_headers()
+	meta = {
+		method = ngx.var.request_method,
+		uri = ngx.var.uri
+	}
+	local res,level = detector.check(headers,meta)
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end
+end
+
+if not limits then 
+	log.error('Не найден лимитизатор')	 
+else
+	local res,level = limits.check(meta,client_ip)
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end	
+end
+
+if not analyzer then 
+	log.error('Не найден анализатор')	 
+else
+	local res,level = analyzer.check()
+	if not res then 
+		ban_add(client_ip, duration/level)
+		if level==1 then return answer() end
+	end	
+end
+
+if not filter then 
+	log.error('Не найден фильтр') 
+else
+	local res = filter.check()
+	if not res then 
+		ban_add(client_ip, duration)
+		return answer()
+	end	
+end
-- 
cgit v1.2.3