88 lines
4.1 KiB
PHP
88 lines
4.1 KiB
PHP
<?php
|
|
|
|
use PrivateBin\Data\Filesystem;
|
|
use PrivateBin\Persistence\ServerSalt;
|
|
use PrivateBin\Persistence\TrafficLimiter;
|
|
|
|
class TrafficLimiterTest extends PHPUnit_Framework_TestCase
|
|
{
|
|
private $_path;
|
|
|
|
public function setUp()
|
|
{
|
|
/* Setup Routine */
|
|
$this->_path = sys_get_temp_dir() . DIRECTORY_SEPARATOR . 'trafficlimit';
|
|
$store = Filesystem::getInstance(array('dir' => $this->_path));
|
|
ServerSalt::setStore($store);
|
|
TrafficLimiter::setStore($store);
|
|
}
|
|
|
|
public function tearDown()
|
|
{
|
|
/* Tear Down Routine */
|
|
Helper::rmDir($this->_path . DIRECTORY_SEPARATOR);
|
|
}
|
|
|
|
public function testHtaccess()
|
|
{
|
|
$htaccess = $this->_path . DIRECTORY_SEPARATOR . '.htaccess';
|
|
@unlink($htaccess);
|
|
$_SERVER['REMOTE_ADDR'] = 'foobar';
|
|
TrafficLimiter::canPass();
|
|
$this->assertFileExists($htaccess, 'htaccess recreated');
|
|
}
|
|
|
|
public function testTrafficGetsLimited()
|
|
{
|
|
TrafficLimiter::setLimit(4);
|
|
$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'first request may pass');
|
|
sleep(1);
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'second request is to fast, may not pass');
|
|
sleep(4);
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'third request waited long enough and may pass');
|
|
$_SERVER['REMOTE_ADDR'] = '2001:1620:2057:dead:beef::cafe:babe';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'fourth request has different ip and may pass');
|
|
$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'fifth request is to fast, may not pass');
|
|
}
|
|
|
|
public function testTrafficLimitExempted()
|
|
{
|
|
TrafficLimiter::setExempted('1.2.3.4,10.10.10.0/24,2001:1620:2057::/48');
|
|
$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'first request may pass');
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'not exempted');
|
|
$_SERVER['REMOTE_ADDR'] = '10.10.10.10';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'IPv4 in exempted range');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but IPv4 in exempted range');
|
|
$_SERVER['REMOTE_ADDR'] = '2001:1620:2057:dead:beef::cafe:babe';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'IPv6 in exempted range');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but IPv6 in exempted range');
|
|
TrafficLimiter::setExempted('127.*,foobar');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'first cached request may pass');
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'request is to fast, invalid range');
|
|
$_SERVER['REMOTE_ADDR'] = 'foobar';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'non-IP address');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but non-IP address matches exempted range');
|
|
}
|
|
|
|
public function testTrafficLimitCreators()
|
|
{
|
|
TrafficLimiter::setCreators('1.2.3.4,10.10.10.0/24,2001:1620:2057::/48');
|
|
$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'not a creator');
|
|
$_SERVER['REMOTE_ADDR'] = '10.10.10.10';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'IPv4 in creator range');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but IPv4 in creator range');
|
|
$_SERVER['REMOTE_ADDR'] = '2001:1620:2057:dead:beef::cafe:babe';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'IPv6 in creator range');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but IPv6 in creator range');
|
|
TrafficLimiter::setExempted('127.*,foobar');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'first cached request may pass');
|
|
$this->assertFalse(TrafficLimiter::canPass(), 'request is to fast, not a creator');
|
|
$_SERVER['REMOTE_ADDR'] = 'foobar';
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'non-IP address');
|
|
$this->assertTrue(TrafficLimiter::canPass(), 'request is to fast, but non-IP address matches creator');
|
|
}
|
|
}
|