虚拟主机防盗链

import hashlib
import time

SECRET_KEY = 'your_secret_key'

def generate_signature(url):
    timestamp = int(time.time())
    sign_str = f'{url}{timestamp}{SECRET_KEY}'
    signature = hashlib.md5(sign_str.encode()).hexdigest()
    return f'{url}?timestamp={timestamp}&signature={signature}'

def verify_signature(request_url):
    url_parts = request_url.split('?')
    if len(url_parts) != 2:
        return False
    url, params = url_parts
    param_parts = params.split('&')
    timestamp = None
    signature = None
    for part in param_parts:
        key, value = part.split('=')
        if key == 'timestamp':
            timestamp = int(value)
        elif key == 'signature':
            signature = value
    if timestamp is None or signature is None:
        return False
    current_timestamp = int(time.time())
    if abs(current_timestamp - timestamp) > 60:  # 60秒内有效
        return False
    sign_str = f'{url}{timestamp}{SECRET_KEY}'
    expected_signature = hashlib.md5(sign_str.encode()).hexdigest()
    return signature == expected_signature