# 创建简单Lua脚本
# vi /data/openresty/lua/hello.lua

local function say_hello()
ngx.say(“Hello, OpenResty!”)
ngx.say(“Server: fgedudb01.fgedu.net.cn”)
ngx.say(“Time: “, ngx.now())
end

say_hello()

# 配置访问
# vi /usr/local/openresty/nginx/conf/conf.d/lua.conf

server {
listen 80;
server_name localhost;

location /hello {
default_type ‘text/plain’;
content_by_lua_file /data/openresty/lua/hello.lua;
}
}

# 重载配置
$ openresty -s reload

# 测试访问
$ curl http://192.168.1.51/hello

# 输出示例：
Hello, OpenResty!
Server: fgedudb01.fgedu.net.cn
Time: 1712205600

local function handle_request()
local method = ngx.req.get_method()
local uri = ngx.var.uri
local args = ngx.req.get_uri_args()

ngx.say(“Request Method: “, method)
ngx.say(“Request URI: “, uri)
ngx.say(“Request Args:”)

for key, val in pairs(args) do
ngx.say(” “, key, ” = “, val)
end

if method == “POST” then
ngx.req.read_body()
local body = ngx.req.get_body_data()
ngx.say(“Request Body: “, body)
end
end

handle_request()

# 配置访问
# vi /usr/local/openresty/nginx/conf/conf.d/request.conf

server {
listen 80;
server_name localhost;

location /request {
default_type ‘text/plain’;
content_by_lua_file /data/openresty/lua/request.lua;
}
}

# 测试访问
$ curl “http://192.168.1.51/request?name=fengge&age=30”

# 输出示例：
Request Method: GET
Request URI: /request
Request Args:
name = fengge
age = 30

local redis = require “resty.redis”
local red = redis:new()

red:set_timeout(1000)

local ok, err = red:connect(“127.0.0.1”, 6379)
if not ok then
ngx.say(“Failed to connect: “, err)
return
end

local res, err = red:auth(“fgedu123”)
if not res then
ngx.say(“Failed to auth: “, err)
return
end

res, err = red:set(“fgedu_key”, “fgedu_value”)
if not res then
ngx.say(“Failed to set: “, err)
return
end

ngx.say(“Set result: “, res)

res, err = red:get(“fgedu_key”)
if not res then
ngx.say(“Failed to get: “, err)
return
end

ngx.say(“Get result: “, res)

red:close()

# 配置访问
# vi /usr/local/openresty/nginx/conf/conf.d/redis.conf

server {
listen 80;
server_name localhost;

location /redis {
default_type ‘text/plain’;
content_by_lua_file /data/openresty/lua/redis.lua;
}
}

# 测试访问
$ curl http://192.168.1.51/redis

# 输出示例：
Set result: OK
Get result: fgedu_value

local mysql = require “resty.mysql”
local db, err = mysql:new()
if not db then
ngx.say(“Failed to instantiate mysql: “, err)
return
end

db:set_timeout(1000)

local ok, err, errcode, sqlstate = db:connect({
host = “127.0.0.1”,
port = 3306,
database = “fgedudb”,
user = “fgedu”,
password = “fgedu123”,
charset = “utf8mb4”
})

if not ok then
ngx.say(“Failed to connect: “, err, “: “, errcode, ” “, sqlstate)
return
end

local res, err, errcode, sqlstate = db:query(“SELECT * FROM fgedu_users LIMIT 10”)
if not res then
ngx.say(“Bad result: “, err, “: “, errcode, ” “, sqlstate)
return
end

local cjson = require “cjson”
ngx.say(cjson.encode(res))

db:close()

# 配置访问
# vi /usr/local/openresty/nginx/conf/conf.d/mysql.conf

server {
listen 80;
server_name localhost;

location /mysql {
default_type ‘application/json’;
content_by_lua_file /data/openresty/lua/mysql.lua;
}
}

# 测试访问
$ curl http://192.168.1.51/mysql

# 输出示例：
[{“id”:1,”name”:”fengge”,”email”:”fengge@fgedu.net.cn”},{“id”:2,”name”:”admin”,”email”:”admin@fgedu.net.cn”}]

local _M = {}

local function check_sql_injection(str)
local sql_patterns = {
“select.+(from|limit)”,
“(?i:union.*select)”,
“(?i:insert.*into)”,
“(?i:delete.*from)”,
“(?i:update.*set)”,
“(?i:drop.*table)”,
“(?i:exec.*xp_)”,
“(?i:exec.*sp_)”,
“(?i:exec\\()”,
}

for _, pattern in ipairs(sql_patterns) do
if ngx.re.match(str, pattern, “jo”) then
return true
end
end
return false
end

local function check_xss(str)
local xss_patterns = {
“(?i:)”,
“(?i:javascript:)”,
“(?i:onerror\\s*=)”,
“(?i:onload\\s*=)”,
“(?i:onclick\\s*=)”,
“(?i:alert\\()”,
}

for _, pattern in ipairs(xss_patterns) do
if ngx.re.match(str, pattern, “jo”) then
return true
end
end
return false
end

function _M.check()
local uri = ngx.var.uri
local args = ngx.req.get_uri_args()

if check_sql_injection(uri) then
ngx.log(ngx.WARN, “SQL Injection detected in URI: “, uri)
ngx.exit(403)
end

for key, val in pairs(args) do
if type(val) == “string” then
if check_sql_injection(val) then
ngx.log(ngx.WARN, “SQL Injection detected in args: “, key, “=”, val)
ngx.exit(403)
end

if check_xss(val) then
ngx.log(ngx.WARN, “XSS detected in args: “, key, “=”, val)
ngx.exit(403)
end
end
end
end

return _M

# 配置WAF
# vi /usr/local/openresty/nginx/conf/conf.d/waf.conf

server {
listen 80;
server_name localhost;

access_by_lua_block {
local waf = require “waf”
waf.check()
}

location / {
proxy_pass http://backend;
}
}

local limit_req = require “resty.limit.req”

local function limit_request()
local lim, err = limit_req.new(“limit”, 100, 200)
if not lim then
ngx.log(ngx.ERR, “Failed to instantiate a resty.limit.req object: “, err)
return ngx.exit(500)
end

local key = ngx.var.binary_remote_addr
local delay, err = lim:incoming(key, true)
if not delay then
if err == “rejected” then
ngx.log(ngx.WARN, “Request rejected for IP: “, ngx.var.remote_addr)
return ngx.exit(429)
end
ngx.log(ngx.ERR, “Failed to limit request: “, err)
return ngx.exit(500)
end

if delay >= 0.001 then
ngx.sleep(delay)
end
end

return {
limit_request = limit_request
}

# 配置限流
# vi /usr/local/openresty/nginx/conf/conf.d/limit.conf

server {
listen 80;
server_name localhost;

access_by_lua_block {
local limit = require “limit”
limit.limit_request()
}

location / {
proxy_pass http://backend;
}
}