【Nginx-利用Referer防盗链】解决网站被可疑链接调取接口

1、ngx_http_referer_module模块：
用来阻止Referer首部无有效值的请求访问，可防止盗链
2、valid_referers none|blocked|server_names|string ...;
定义referer首部的合法可用值，不能匹配的将是非法值
none：请求报文首部没有referer首部
blocked：请求报文有referer首部，但无有效值
server_names：referer首部中包含本主机名
arbitrary_string：任意字符串，但可使用*作通配符
regular expression：被指定的正则表达式模式匹配到的字符串,要使用~开头，例如： ~.*.baidu.com

server {
    listen       80;
    server_name  XX.XX.XX.XX;
  
    location / {
     XXX
      XXXX
      XXX
       valid_referers none blocked server_names *.XXX.com;  #写入允许的referers
       if ($invalid_referer) {
         #盗链时返回403
         return 403;
       }

    }

vim test.conf 
server {
   
      listen 443 ssl;
      listen 80 ;
      server_name www.magedu.org;
      root /data/ssl;
      ssl_certificate /etc/nginx/conf.d/ssl/magedu.org.crt;
      ssl_certificate_key /etc/nginx/conf.d/ssl/magedu.org.key;
      ssl_session_cache shared:sslcache:20m;
      ssl_session_timeout 10m;
      valid_referers none block server_names *.magedu.org  ~\.google\. ~\.baidu\.;
      if ($invalid_referer) {
   
           return 403 "Forbidden Access";
          
}

nginx -t
nginx -s reload

valid_referers  none blocked server_names *.sogou.com  *.so.com *.baidu.com;