防盗链简而言之就是防止第三方或者未进允许的域名访问自己的静态资源的一种限制技术。比如A网站有许多自己独立的图片素材不想让其它网站通过直接调用图片路径的方式访问图片，于是采用防盗链方式来防止。

防盗链基于客户端携带的referer实现，referer是记录打开一个页面之前记录是从哪个页面跳转过来的标记信息，如果别人只链接了自己网站的图片或某个单独的资源，而不是打开整个页面，这就是盗链，referer就是之前的那个网站域名，正常的referer信息有以下几种

  • 定义合规的引用
  1. valid_referers none | blocked | server_names | string ...;
  • 拒绝不合规的引用：
  1. if  ($invalid_referer) {
  2.     rewrite ^/.*$ http://www.b.org/403.html 
  3. }
  • none:请求报文没有referer首部，比如用户直接在浏览器输入域名访问往web网站，就是没有referer信息
  • blocked:请求报文由referer信息，但无又有效值为空
  • server_names:referer首部中包含本主机及nginx监听的server_name
  • invalid_referer:不合规的feferer引用
图片源地址 调用图片地址
dev.api.dd.com localhost 
  1. <!DOCTYPE html>
  2. <html lang="en">
  3. <head>
  4.     <meta charset="UTF-8">
  5.     <title>演示nginx防盗链</title>
  6. </head>
  7. <body>
  8. <img src="http://dev.api.dd.com/timg.jpeg" style="width: 100px;height: 100px;" />
  9. </body>
  10. </html>
  1. server {
  2.     listen 80;
  3.     server_name dev.api.dd.com;
  4.     root /Users/lidong/Desktop/wwwroot/dd_api/public;
  5.     index index.php index.html index.htm;
  6.     access_log /Users/lidong/wwwlogs/dev.api.dd.com_access.log; 
  7.     error_log  /Users/lidong/wwwlogs/dev.api.dd.com_error.log; 
  8.     location ~ [^/]\.php(/|$) {
  9.         fastcgi_pass   127.0.0.1:9000;
  10.         fastcgi_index  index.php;
  11.         fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  12.         include        fastcgi_params;
  13.     }
  15.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
  16.     }
  18.     try_files $uri $uri/ @rewrite;
  19.     location @rewrite {
  20.         rewrite ^/(.*)$ /index.php?_url=/$1;
  21.     }
  23. }`

  1. server {
  2.     listen 80;
  3.     server_name dev.api.dd.com;
  4.     root /Users/lidong/Desktop/wwwroot/dd_api/public;
  5.     index index.php index.html index.htm;
  6.     access_log /Users/lidong/wwwlogs/dev.api.dd.com_access.log; 
  7.     error_log  /Users/lidong/wwwlogs/dev.api.dd.com_error.log; 
  8.     location ~ [^/]\.php(/|$) {
  9.         fastcgi_pass   127.0.0.1:9000;
  10.         fastcgi_index  index.php;
  11.         fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  12.         include        fastcgi_params;
  13.     }
  15.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
  16.         valid_referers none blocked dev.api.dd.com;
  17.         if ($invalid_referer)
  18.         {
  19.             return 403;
  20.         }
  21.     }
  23.     try_files $uri $uri/ @rewrite;
  24.     location @rewrite {
  25.         rewrite ^/(.*)$ /index.php?_url=/$1;
  26.     }
  28. }

  1. server {
  2.     listen 80;
  3.     server_name dev.api.dd.com;
  4.     root /Users/lidong/Desktop/wwwroot/dd_api/public;
  5.     index index.php index.html index.htm;
  6.     access_log /Users/lidong/wwwlogs/dev.api.dd.com_access.log; 
  7.     error_log  /Users/lidong/wwwlogs/dev.api.dd.com_error.log; 
  8.     location ~ [^/]\.php(/|$) {
  9.         fastcgi_pass   127.0.0.1:9000;
  10.         fastcgi_index  index.php;
  11.         fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
  12.         include        fastcgi_params;
  13.     }
  15.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
  16.         valid_referers none blocked dev.api.dd.com;
  17.         if ($invalid_referer)
  18.         {
  19.             rewrite ^/ http://dev.api.dd.com/404.jpeg;
  20.         }
  21.     }
  23.     try_files $uri $uri/ @rewrite;
  24.     location @rewrite {
  25.         rewrite ^/(.*)$ /index.php?_url=/$1;
  26.     }
  28. }

调用的图片显示302

用一张源站的404替换显示

版权声明：本文为lisqiong原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://www.cnblogs.com/lisqiong/p/11356065.html