Website background protection method

Abstract

The invention discloses a website background protection method, which relates to the technical field of information security, and aims to solve the problem that safety management is tedious. The safety detection method specifically comprises the following steps of: executing a data storage step; setting a mobile phone verification webpage at the background of a website; and after the verificationis passed, storing a mobile phone number encrypted string, a timestamp and a Token in cookies by a back-end program, wherein the Token is obtained by combining a mobile phone number, the timestamp anda secret key into a character string and then performing MD5 encryption on the character string. According to the website background protection method, a NginxWEB server plug-in is combined with a mobile phone verification program, all unverified accesses are directly refused in a plug-in program of the WEB server, the authenticity of the identity of a registered user is ensured through a mobilephone verification program, an encrypted Token token is generated to ensure the security, and the plug-in program gives a release or rejection instruction to the user by judging the encrypted Token token, so that the security of a website background is protected.

Description

technical field

[0001] The invention relates to the technical field of information security, in particular to a method for background protection of a website. Background technique

[0002] With the popularity of information technology and the Internet, more and more enterprises and institutions have begun to use the form of publicity websites to carry out corporate publicity. With the rise of e-commerce transaction models, more and more B2C, C2C and other forms of The website has become popular, and the returns are quite objective. But at the same time, more and more illegal personnel see their interests and begin to carry out various attacks, sneak in, plant Trojan horses, etc. to steal website programs and stored information on the website. Data information has caused more or less impacts on the users of various websites, such as the homepage being hacked, employees changing jobs and taking away development programs, database information, etc. At present, the background pr...

Examples

Embodiment 1

[0039] A method for background protection of a website, such as figure 1 and figure 2 shown, including the following steps:

[0040] S1: data storage step;

[0041] S2: Set up a mobile phone verification web page in the background of the website;

[0042] S3: After passing the verification, the back-end program saves the encrypted string of the mobile phone number, time stamp and Token to cookies, and the Token is obtained by combining the mobile phone number, time stamp, key, etc. into a string and then encrypting it with MD5;

[0043] S4: By default, the nginxWEB service plug-in program prohibits anyone from accessing any file in the background. The plug-in program obtains COOKIES to verify the timestamp and TOKEN, and only those who pass the verification can access the background program or file.

[0044] The mobile phone verification webpage is set in the background of the website in S2 for the user to obtain the verification code through the mobile phone number, and t...

Embodiment 2

[0060] A method for background protection of a website, such as figure 1 and figure 2 shown, including the following steps:

[0061] S1: data storage step;

[0062] S2: Set up a mobile phone verification web page in the background of the website;

[0063] S3: After passing the verification, the back-end program saves the encrypted string of the mobile phone number, time stamp and Token to cookies, and the Token is obtained by combining the mobile phone number, time stamp, key, etc. into a string and then encrypting it with MD5;

[0064] S4: By default, the nginxWEB service plug-in program prohibits anyone from accessing any file in the background. The plug-in program obtains COOKIES to verify the timestamp and TOKEN, and only those who pass the verification can access the background program or file.

[0065] The data storage step in S1 refers to adopting a mandatory storage policy according to various storage information set by the security management center and the securi...

technical field

[0001] The invention relates to the technical field of information security, in particular to a method for background protection of a website. Background technique

[0002] With the popularity of information technology and the Internet, more and more enterprises and institutions have begun to use the form of publicity websites to carry out corporate publicity. With the rise of e-commerce transaction models, more and more B2C, C2C and other forms of The website has become popular, and the returns are quite objective. But at the same time, more and more illegal personnel see their interests and begin to carry out various attacks, sneak in, plant Trojan horses, etc. to steal website programs and stored information on the website. Data information has caused more or less impacts on the users of various websites, such as the homepage being hacked, employees changing jobs and taking away development programs, database information, etc. At present, the background pr...

Examples

Embodiment 1

[0039] A method for background protection of a website, such as figure 1 and figure 2 shown, including the following steps:

[0040] S1: data storage step;

[0041] S2: Set up a mobile phone verification web page in the background of the website;

[0042] S3: After passing the verification, the back-end program saves the encrypted string of the mobile phone number, time stamp and Token to cookies, and the Token is obtained by combining the mobile phone number, time stamp, key, etc. into a string and then encrypting it with MD5;

[0043] S4: By default, the nginxWEB service plug-in program prohibits anyone from accessing any file in the background. The plug-in program obtains COOKIES to verify the timestamp and TOKEN, and only those who pass the verification can access the background program or file.

[0044] The mobile phone verification webpage is set in the background of the website in S2 for the user to obtain the verification code through the mobile phone number, and t...

Embodiment 2

[0060] A method for background protection of a website, such as figure 1 and figure 2 shown, including the following steps:

[0061] S1: data storage step;

[0062] S2: Set up a mobile phone verification web page in the background of the website;

[0063] S3: After passing the verification, the back-end program saves the encrypted string of the mobile phone number, time stamp and Token to cookies, and the Token is obtained by combining the mobile phone number, time stamp, key, etc. into a string and then encrypting it with MD5;

[0064] S4: By default, the nginxWEB service plug-in program prohibits anyone from accessing any file in the background. The plug-in program obtains COOKIES to verify the timestamp and TOKEN, and only those who pass the verification can access the background program or file.

[0065] The data storage step in S1 refers to adopting a mandatory storage policy according to various storage information set by the security management center and the securi...

Images