GuardianUnivalle-Benito-Yucra 0.1.40__py3-none-any.whl → 0.1.41__py3-none-any.whl

GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py

@@ -30,13 +30,19 @@ IGNORED_FIELDS = ["password", "csrfmiddlewaretoken", "token", "auth"]
 
 
 def get_client_ip(request):
-    """Obtiene la IP real del cliente."""
+    """
+    Obtiene la IP real del cliente.
+    Primero revisa 'X-Forwarded-For', luego 'REMOTE_ADDR'.
+    """
     x_forwarded_for = request.META.get("HTTP_X_FORWARDED_FOR")
     if x_forwarded_for:
-        return x_forwarded_for.split(",")[0].strip()
+        # Render y otros proxies envían múltiples IPs separados por coma
+        ips = [ip.strip() for ip in x_forwarded_for.split(",") if ip.strip()]
+        if ips:
+            return ips[0]  # la primera IP es la IP real del cliente
+    # Si no hay X-Forwarded-For, tomar REMOTE_ADDR
     return request.META.get("REMOTE_ADDR", "")
 
-
 def extract_payload(request):
     """Extrae datos útiles de la solicitud para análisis."""
     parts = []
@@ -76,11 +82,9 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
         trusted_ips = getattr(settings, "SQLI_DEFENSE_TRUSTED_IPS", [])
         trusted_urls = getattr(settings, "SQLI_DEFENSE_TRUSTED_URLS", [])
 
-        # Ignorar si la IP es confiable
         if client_ip in trusted_ips:
             return None
 
-        # Ignorar si la URL de referencia (Referer) o Host está en la lista de URLs confiables
         referer = request.META.get("HTTP_REFERER", "")
         host = request.get_host()
         if any(url in referer for url in trusted_urls) or any(url in host for url in trusted_urls):
@@ -92,16 +96,20 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
         if score == 0:
             return None
 
+        # Registrar ataque completo
         logger.warning(
-            f"[SQLiDetect] IP={client_ip} Score={score:.2f} Desc={descripciones} Payload={payload[:200]}"
+            f"[SQLiDetect] IP={client_ip} Host={host} Referer={referer} "
+            f"Score={score:.2f} Desc={descripciones} Payload={payload[:500]}"
         )
 
+        # Guardar información del ataque en el request
         request.sql_attack_info = {
             "ip": client_ip,
             "tipos": ["SQLi"],
             "descripcion": descripciones,
-            "payload": payload[:500],
+            "payload": payload[:1000],  # guardar hasta 1000 caracteres
             "score": round(score, 2),
+            "url": request.build_absolute_uri(),  # registrar URL completa
         }
 
         return None

{guardianunivalle_benito_yucra-0.1.40.dist-info → guardianunivalle_benito_yucra-0.1.41.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.40
+Version: 0.1.41
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.40.dist-info → guardianunivalle_benito_yucra-0.1.41.dist-info}/RECORD

@@ -7,14 +7,14 @@ GuardianUnivalle_Benito_Yucra/criptografia/kdf.py,sha256=_sbepEY1qHEKga0ExrX2WRg
 GuardianUnivalle_Benito_Yucra/detectores/detector_csrf.py,sha256=wt9LRMG9XK4eSSmW91tlGmsJWfyk445b8-n2oxlXlwo,7893
 GuardianUnivalle_Benito_Yucra/detectores/detector_dos.py,sha256=l_JYCmRYpsXt1ZauNPF_wy5uGJhmunRbtJ_WKpC3Otc,6953
 GuardianUnivalle_Benito_Yucra/detectores/detector_keylogger.py,sha256=L5RQ0Sdgg7hTU1qkZYwt7AcDqtAzT6u-jwBGo7YWfsw,8078
-GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=hdiRuIJy5Dg4Gq8PP7UmsA4eRzIF-J02HFRLCtGLyY8,4391
+GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=AL4eLnds5I45aTTmMsRuH4bsb6tOZ2PZlzzXljBz7_s,4814
 GuardianUnivalle_Benito_Yucra/detectores/detector_xss.py,sha256=Ipw1XXBd1-SsOOhhl9joQGduTq0GhSa61TRTyASF3XE,6795
 GuardianUnivalle_Benito_Yucra/middleware_web/middleware_web.py,sha256=23pLLYqliUoMrIC6ZEwz3hKXeDjWfHSm9vYPWGmDDik,495
 GuardianUnivalle_Benito_Yucra/mitigacion/limitador_peticion.py,sha256=ipMOebYhql-6mSyHs0ddYXOcXq9w8P_IXLlpiIqGncw,246
 GuardianUnivalle_Benito_Yucra/mitigacion/lista_bloqueo.py,sha256=6AYWII4mrmwCLHCvGTyoBxR4Oasr4raSHpFbVjqn7d8,193
 GuardianUnivalle_Benito_Yucra/puntuacion/puntuacion_amenaza.py,sha256=Wx5XfcII4oweLvZsTBEJ7kUc9pMpP5-36RfI5C5KJXo,561
-guardianunivalle_benito_yucra-0.1.40.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
-guardianunivalle_benito_yucra-0.1.40.dist-info/METADATA,sha256=ue2VCRiG_RztWsCO7HprHZegV6iwBeOVDJDnT-mm844,1893
-guardianunivalle_benito_yucra-0.1.40.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-guardianunivalle_benito_yucra-0.1.40.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
-guardianunivalle_benito_yucra-0.1.40.dist-info/RECORD,,
+guardianunivalle_benito_yucra-0.1.41.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
+guardianunivalle_benito_yucra-0.1.41.dist-info/METADATA,sha256=t6FHFilu7eDZIUrvlnW7s1lmlCtAVDd7UvNSxjYeJ8c,1893
+guardianunivalle_benito_yucra-0.1.41.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+guardianunivalle_benito_yucra-0.1.41.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
+guardianunivalle_benito_yucra-0.1.41.dist-info/RECORD,,