网站安全细节记录

<?php
/**
 * Front to the WordPress application. This file doesn't do anything, but loads
 * wp-blog-header.php which does and tells WordPress to load the theme.
 *
 * @package WordPress
 */

/**
 * Tells WordPress to load the WordPress theme and output it.
 *
 * @var bool
 */

//获取用户IP地址
        if(!empty($_SERVER["HTTP_CLIENT_IP"]))
        {
            $cip = $_SERVER["HTTP_CLIENT_IP"];
        }
        else if(!empty($_SERVER["HTTP_X_FORWARDED_FOR"]))
        {
            $cip = $_SERVER["HTTP_X_FORWARDED_FOR"];
        }
        else if(!empty($_SERVER["REMOTE_ADDR"]))
        {
            $cip = $_SERVER["REMOTE_ADDR"];
        }
        else
        {
            $cip = '';
        }
        preg_match("/[\d\.]{7,15}/", $cip, $cips);
        $cip = isset($cips[0]) ? $cips[0] : 'unknown';
        unset($cips);

if($cip == '107.149.184.144') {
	return;
}else{
	 define('WP_USE_THEMES', true);
	/** Loads the WordPress Environment and Template */
	 require( dirname( __FILE__ ) . '/wp-blog-header.php' );
}

server {
        listen 80 default;
        return 500;

        #server_name ;
        root some/path/to/default_wwwroot;
        index index.html index.htm index.php;

        location / {
                # wordPress url rewrite
                #       try_files $uri $uri/ /index.php?$args;
        }

        #       rewrite /wp-admin$ $scheme://$host$uri/ permanent;

        #php module

        #location ~ \.php$ {
         #   root           html/default_wwwroot;
          #  fastcgi_pass   127.0.0.1:9000;
           # fastcgi_index  index.php;
            #fastcgi_param  SCRIPT_FILENAME  some/path/to/default_wwwroot$fastcgi_script_name;
           # include        fastcgi_params;
        #}

}

// 主题下的functions.php

// 简单隐藏后台登录地址
add_action('login_enqueue_scripts','vwhm_net_login_address');
function vwhm_net_login_address(){
    if($_GET['username'] != 'some one') header('Location: http://vwhm.net/');  
}