From 918663a7e2d944bfd40956e61ef11d9cac90f8fb Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 26 Nov 2018 15:11:19 +0900
Subject: [PATCH] =?UTF-8?q?=EB=B4=87=EC=9D=98=20=EB=A9=94=EC=9D=BC=20?=
 =?UTF-8?q?=EB=A7=81=ED=81=AC=20=ED=81=AC=EB=A1=A4=EB=A7=81=20=EB=B0=A9?=
 =?UTF-8?q?=EC=A7=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/email_certify.php         |  3 +++
 bbs/password_lost_certify.php |  3 +++
 lib/common.lib.php            | 21 +++++++++++++++++++++
 3 files changed, 27 insertions(+)

diff --git a/bbs/email_certify.php b/bbs/email_certify.php
index 2fc735b32..83465e706 100644
--- a/bbs/email_certify.php
+++ b/bbs/email_certify.php
@@ -1,6 +1,9 @@
 <?php
 include_once('./_common.php');
 
+// 봇의 메일 링크 크롤링을 방지합니다.
+if(function_exists('check_mail_bot')){ check_mail_bot($_SERVER['REMOTE_ADDR']); }
+
 $mb_id  = trim($_GET['mb_id']);
 $mb_md5 = trim($_GET['mb_md5']);
 
diff --git a/bbs/password_lost_certify.php b/bbs/password_lost_certify.php
index 5307a7197..71c0116b1 100644
--- a/bbs/password_lost_certify.php
+++ b/bbs/password_lost_certify.php
@@ -1,6 +1,9 @@
 <?php
 include_once('./_common.php');
 
+// 봇의 메일 링크 크롤링을 방지합니다.
+if(function_exists('check_mail_bot')){ check_mail_bot($_SERVER['REMOTE_ADDR']); }
+
 // 오류시 공히 Error 라고 처리하는 것은 회원정보가 있는지? 비밀번호가 틀린지? 를 알아보려는 해킹에 대비한것
 
 $mb_no = trim($_GET['mb_no']);
diff --git a/lib/common.lib.php b/lib/common.lib.php
index 5391220b6..c07a23194 100644
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@@ -3434,6 +3434,27 @@ function get_real_client_ip(){
     return preg_replace('/[^0-9.]/', '', $real_ip);
 }
 
+function check_mail_bot($ip=''){
+
+    //아이피를 체크하여 메일 크롤링을 방지합니다.
+    $check_ips = array('211.249.40.');
+    $bot_message = 'bot 으로 판단되어 중지합니다.';
+    
+    if($ip){
+        foreach( $check_ips as $c_ip ){
+            if( preg_match('/^'.preg_quote($c_ip).'/', $ip) ) {
+                die($bot_message);
+            }
+        }
+    }
+
+    // user agent를 체크하여 메일 크롤링을 방지합니다.
+    $user_agent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
+    if ($user_agent === 'Carbon' || strpos($user_agent, 'BingPreview') !== false || strpos($user_agent, 'Slackbot') !== false) { 
+        die($bot_message);
+    } 
+}
+
 function get_call_func_cache($func, $args=array()){
     
     static $cache = array();