增加sql的waf功能

waf/sql.lua

@@ -0,0 +1,37 @@
+local _M = {}
+local ngx_base = require "resty.core.base"
+local waf_rule = require "waf/rule"
+local waf_voilation = require "waf/violation_list"
+local waf_report = require "waf/report"
+
+function _M.waf_sql_filter_params(arg_tables, filter_rule)
+    if arg_tables then
+        for key, val in pairs(arg_tables) do
+            if match_string(val, filter_rule) then
+                --ngx.say(key .. ":" .. val)
+                waf_report.violation(waf_voilation.sql_detect)
+            end
+        end
+    end
+end
+
+function _M.waf_sql_filter()
+    --local get_arags = ngx.req.get_uri_args
+    --for k, v in ipairs(get_arags) do
+    --    print(v)
+    --end
+    if ngx_base.get_request() ~= nil then
+        _M.waf_sql_filter_params(ngx.req.get_uri_args(), waf_rule.sql_get)
+        ngx.say(get_cookie_raw())
+        if match_string(get_cookie_raw(), waf_rule.sql_cookie) then
+            waf_report.violation(waf_voilation.sql_detect)
+        end
+
+        local is_post_method = ngx.req.get_method() == "POST"
+        if is_post_method then
+            ngx.req.read_body()
+            _M.waf_sql_filter_params(ngx.req.get_post_args(), waf_rule.sql_post)
+        end
+    end
+end
+return _M