ipaddressfilter.cpp

本实例将通过ISAPI实现限制IP访问的功能

// IPADDRESSFILTER.CPP - Implementation file for your Internet Server
//    IP Address Sample Filter

#include "stdafx.h"
#include "IPAddressFilter.h"

///////////////////////////////////////////////////////////////////////
// The one and only CWinApp object
// NOTE: You may remove this object if you alter your project to no
// longer use MFC in a DLL.

CWinApp theApp;



///////////////////////////////////////////////////////////////////////
// The one and only CIPAddressFilter object

CIPAddressFilter theFilter;

///////////////////////////////////////////////////////////////////////
// CIPAddressFilter static members

DWORD CIPAddressFilter::m_cCacheItems = 0;
CHAR* CIPAddressFilter::m_pszIPAddressFile = NULL;
LIST_ENTRY CIPAddressFilter::m_CacheListHead;
CRITICAL_SECTION CIPAddressFilter::m_csCacheLock;


///////////////////////////////////////////////////////////////////////
// CIPAddressFilter implementation

CIPAddressFilter::CIPAddressFilter()
{
	m_fCacheInitialized = FALSE;
}

CIPAddressFilter::~CIPAddressFilter()
{
	TerminateCache();
	TerminateIPAddressDatabase();
}

BOOL CIPAddressFilter::Initialize()
{
	return (InitializeIPAddressDatabase() && InitializeCache());
}

BOOL CIPAddressFilter::GetFilterVersion(PHTTP_FILTER_VERSION pVer)
{
	ISAPITRACE2( "[GetFilterVersion] Server filter version is %d.%d\n",
               HIWORD( pVer->dwServerFilterVersion ),
               LOWORD( pVer->dwServerFilterVersion ) );

	if ( !Initialize() )
	{
		ISAPITRACE1("[GetFilterVersion] Database or cache failed, error %d\n", GetLastError() );
		return FALSE;
	}

	// Call default implementation for initialization
	CHttpFilter::GetFilterVersion(pVer);

		// Set the flags we are interested in
	pVer->dwFlags = SF_NOTIFY_ORDER_DEFAULT |
									SF_NOTIFY_SECURE_PORT | SF_NOTIFY_NONSECURE_PORT | 
									SF_NOTIFY_URL_MAP;

	// Load description string
	TCHAR sz[SF_MAX_FILTER_DESC_LEN+1];
	ISAPIVERIFY(::LoadString(AfxGetResourceHandle(),
			IDS_FILTER, sz, SF_MAX_FILTER_DESC_LEN));
	_tcscpy(pVer->lpszFilterDesc, sz);
	return TRUE;
}

DWORD CIPAddressFilter::OnUrlMap(CHttpFilterContext* pCtxt, PHTTP_FILTER_URL_MAP pMapInfo)
{
	char szAddress[80];
	DWORD dwSize = sizeof(szAddress);
	if (pCtxt->GetServerVariable("REMOTE_ADDR", szAddress, &dwSize))
	{
		//  Make sure this address is a valid address
		BOOL fAllowed;
		if ( !ValidateIPAddress(szAddress, &fAllowed ))
		{
			ISAPITRACE2("[OnUrlMap] Error %d validating address %s\n", GetLastError(), szAddress );
			return SF_STATUS_REQ_ERROR;
		}

		if ( !fAllowed )
		{
			//  This ip address isn't allowed access.  Map to information URL
			strncpy(pMapInfo->pszPhysicalPath, NO_ACCESS, pMapInfo->cbPathBuff-1);
		}
	}
		
  return SF_STATUS_REQ_NEXT_NOTIFICATION;
}

// Do not edit the following lines, which are needed by ClassWizard.
#if 0
BEGIN_MESSAGE_MAP(CIPAddressFilter, CHttpFilter)
	//{{AFX_MSG_MAP(CIPAddressFilter)
	//}}AFX_MSG_MAP
END_MESSAGE_MAP()
#endif	// 0

///////////////////////////////////////////////////////////////////////
// If your extension will not use MFC, you'll need this code to make
// sure the extension objects can find the resource handle for the
// module.  If you convert your extension to not be dependent on MFC,
// remove the comments arounn the following AfxGetResourceHandle()
// and DllMain() functions, as well as the g_hInstance global.

/****

static HINSTANCE g_hInstance;

HINSTANCE AFXISAPI AfxGetResourceHandle()
{
	return g_hInstance;
}

BOOL WINAPI DllMain(HINSTANCE hInst, ULONG ulReason,
					LPVOID lpReserved)
{
	if (ulReason == DLL_PROCESS_ATTACH)
	{
		g_hInstance = hInst;
	}

	return TRUE;
}

****/