[MySQL] [实例]利用php+mysql完成shell脚本的授权验证

<?php
//此函数用于获取IP
function get_real_ip(){
$ip=false;
if(!empty($_SERVER["HTTP_CLIENT_IP"])){
$ip = $_SERVER["HTTP_CLIENT_IP"];
}
if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
$ips = explode (", ", $_SERVER['HTTP_X_FORWARDED_FOR']);
if ($ip) { array_unshift($ips, $ip); $ip = FALSE; }
for ($i = 0; $i < count($ips); $i++) {
if (!eregi ("^(10|172\.16|192\.168)\.", $ips[$i])) {
$ip = $ips[$i];
break;
}
}
}
return ($ip ? $ip : $_SERVER['REMOTE_ADDR']);
}
//定义一个IP变量
$ipc=get_real_ip();
//连接MYSQL查询
$con = mysql_connect("localhost","root","root");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }
 mysql_select_db("test", $con);
//获取结果
$result = mysql_query("SELECT `ID`, `IP` FROM `shell_users` WHERE IP='$ipc' limit 1;",$con);
//如果有记录则输出记录在数据库中的行数并退出
while($row = mysql_fetch_array($result))
  {
  echo $row['ID'];
  mysql_close($con);
  exit;
  }
//无记录直接显示IP
echo "$ipc";
mysql_close($con);
?>

<?php
function get_real_ip(){
$ip=false;
if(!empty($_SERVER["HTTP_CLIENT_IP"])){
$ip = $_SERVER["HTTP_CLIENT_IP"];
}
if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
$ips = explode (", ", $_SERVER['HTTP_X_FORWARDED_FOR']);
if ($ip) { array_unshift($ips, $ip); $ip = FALSE; }
for ($i = 0; $i < count($ips); $i++) {
if (!eregi ("^(10|172\.16|192\.168)\.", $ips[$i])) {
$ip = $ips[$i];
break;
}
}
}
return ($ip ? $ip : $_SERVER['REMOTE_ADDR']);
}
$ipc=get_real_ip();
echo $ipc;
?>

#!/bin/bash
echo "Loading... please wait..."
#安装curl
yum -y install curl >/dev/null
#通过curl获取授权
这边说下curl的-x是用来指定IP,防止用户改hosts文件屏蔽网址
（具体有啥用我也不知道,反正能用就行）
IP=$(curl http://127.0.0.1/getip.php -x127.0.0.1:80)
ID=$(curl http://127.0.0.1/shell.php -x127.0.0.1:80)
#输出IP
echo "Your IP Is:$IP" 
#进行判断
if [[ $ID == $IP ]]; then
  echo "IP未授权"
  exit
else
  echo "你的IP正确"
fi