CTF-WEB排行榜制作

CTF-WEB排行榜制作

项目需求：
现在14道题对应有14个flag，我需要使用dockerfile搭建一个简单的，能够实现验证这些题目对应的flag来计分的简单网站（要求页面比较精美） 
前十题设置为10分
11-14题设置为20分
1.	flag{5a3dR7vKpQ9wXyZ2}
2.	flag{8G4hLbNqFcTjMnP6}
3.	flag{3V9sEkYmWuHxDrz1}
4.	flag{J7r2tLqZfNpD4mKs}
5.	flag{B6nQwRvXcT3yUh9P}
6.	flag{qW4eF8gHjK2lO7iU}
7.	flag{M9aZsEdCvFbRtY3N}
8.	flag{2Lp5oIuG7yTqW1rD}
9.	flag{R4vNkSmXzHcJ8wB3}
10.	flag{6dFgHjKl9pOiU7yT}
11.	flag{W3zYcT8rDxV5sQmK}
12.	flag{9PnZtLwEfR6vGhJ4}
13.	flag{7UkXbMqAsHdF2iN1}
14.	flag{yT4jKmP9oLvRgS8e}

目录结构打印（项目根目录为ctf）：

ctf/
├── docker-compose.yml
├── init.sql
└── web/├── Dockerfile├── flags.php├── index.php├── leaderboard.php├── submit.php├── style.css└── db.php

创建目录结构命令：

# 创建目录结构与文件
# 切换到工作目录（例如 /root 或 ~/）
mkdir -p ~/ctf && cd ~/ctf# 创建顶层目录和文件
mkdir -p ctf/web
touch ctf/docker-compose.yml
touch ctf/init.sql# 创建 web 子目录下的文件
touch ctf/web/Dockerfile
touch ctf/web/flags.php
touch ctf/web/index.php
touch ctf/web/leaderboard.php
touch ctf/web/submit.php
touch ctf/web/style.css
touch ctf/web/db.php
tree ctf

flags.php：题目flag和分值配置（包含前五奖励逻辑支持）

init.sql：MySQL建表与初始化

submit.php：处理flag提交与写入逻辑

leaderboard.php：统计并展示排行榜

index.php：主页面

Dockerfile + docker-compose.yml：构建环境配置

ctf/web/flags.php

cat > ctf/web/flags.php <<EOF
<?php
// 已整合到 submit.php 逻辑中
// 此文件保留用于后期扩展
header("Location: index.php");
exit();
?>
EOF

ctf/init.sql

cat > ctf/init.sql<<EOF
CREATE TABLE IF NOT EXISTS challenges (id INT PRIMARY KEY AUTO_INCREMENT,flag VARCHAR(50) UNIQUE NOT NULL,score INT NOT NULL,solved_count INT DEFAULT 0,first_five JSON DEFAULT NULL
);CREATE TABLE IF NOT EXISTS users (id INT PRIMARY KEY AUTO_INCREMENT,username VARCHAR(50) UNIQUE NOT NULL,total_score INT DEFAULT 0
);CREATE TABLE IF NOT EXISTS submissions (id INT PRIMARY KEY AUTO_INCREMENT,user_id INT NOT NULL,challenge_id INT NOT NULL,submit_time TIMESTAMP DEFAULT CURRENT_TIMESTAMP,is_correct BOOLEAN,is_in_top5 BOOLEAN DEFAULT FALSE,FOREIGN KEY (user_id) REFERENCES users(id),FOREIGN KEY (challenge_id) REFERENCES challenges(id)
);-- 初始化题目数据
INSERT INTO challenges (flag, score) VALUES
('flag{5a3dR7vKpQ9wXyZ2}', 10),
('flag{8G4hLbNqFcTjMnP6}', 10),
('flag{3V9sEkYmWuHxDrz1}', 10),
('flag{J7r2tLqZfNpD4mKs}', 10),
('flag{B6nQwRvXcT3yUh9P}', 10),
('flag{qW4eF8gHjK2lO7iU}', 10),
('flag{M9aZsEdCvFbRtY3N}', 10),
('flag{2Lp5oIuG7yTqW1rD}', 10),
('flag{R4vNkSmXzHcJ8wB3}', 10),
('flag{6dFgHjKl9pOiU7yT}', 10),
('flag{W3zYcT8rDxV5sQmK}', 20),
('flag{9PnZtLwEfR6vGhJ4}', 20),
('flag{7UkXbMqAsHdF2iN1}', 20),
('flag{yT4jKmP9oLvRgS8e}', 20);
EOF

ctf/docker-compose.yml

cat > ctf/docker-compose.yml <<EOF
version: '3.8'services:web:build: ./webports:- "80:80"depends_on:- mysqlenvironment:MYSQL_HOST: mysqlnetworks:- ctf-netmysql:image: mysql:8.0command: --default-authentication-plugin=mysql_native_passwordenvironment:MYSQL_ROOT_PASSWORD: ctf123MYSQL_DATABASE: ctf_dbMYSQL_USER: ctf_userMYSQL_PASSWORD: ctf_passvolumes:- ./init.sql:/docker-entrypoint-initdb.d/init.sql- mysql-data:/var/lib/mysqlnetworks:- ctf-netrestart: alwaysvolumes:mysql-data:networks:ctf-net:
EOF

ctf/web/Dockerfile

cat > ctf/web/Dockerfile <<'EOF'
FROM php:7.4-apache# 使用阿里云镜像源
RUN sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list && \sed -i 's/security.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list# 安装扩展并配置
RUN apt-get update && \apt-get install -y libzip-dev libpng-dev && \docker-php-ext-install pdo_mysql zip gd && \a2enmod rewrite# 配置PHP
RUN echo "upload_max_filesize = 10M" >> /usr/local/etc/php/php.ini && \echo "post_max_size = 10M" >> /usr/local/etc/php/php.iniCOPY . /var/www/html/
EOF

ctf/web/submit.php

cat > ctf/web/submit.php <<'EOF'
<?php
require 'db.php';if ($_SERVER['REQUEST_METHOD'] === 'POST') {$username = trim($_POST['username']);$flag = trim($_POST['flag']);// 验证输入if (empty($username) || empty($flag)) {die("用户名和Flag不能为空");}try {$pdo->beginTransaction();// 获取用户或创建用户$stmt = $pdo->prepare("INSERT IGNORE INTO users (username) VALUES (?)");$stmt->execute([$username]);$user_id = $pdo->lastInsertId();if ($user_id == 0) {$stmt = $pdo->prepare("SELECT id FROM users WHERE username = ?");$stmt->execute([$username]);$user_id = $stmt->fetchColumn();}// 验证Flag$stmt = $pdo->prepare("SELECT id, score FROM challenges WHERE flag = ?");$stmt->execute([$flag]);$challenge = $stmt->fetch(PDO::FETCH_ASSOC);if ($challenge) {// 检查是否重复提交$stmt = $pdo->prepare("SELECT id FROM submissions WHERE user_id = ? AND challenge_id = ?");$stmt->execute([$user_id, $challenge['id']]);if ($stmt->fetch()) {die("请勿重复提交相同Flag");}// 更新题目解决数$pdo->prepare("UPDATE challenges SET solved_count = solved_count + 1 WHERE id = ?")->execute([$challenge['id']]);// 计算奖励分$stmt = $pdo->prepare("SELECT COUNT(*) FROM submissions WHERE challenge_id = ? AND is_correct = 1");$stmt->execute([$challenge['id']]);$current_solved = $stmt->fetchColumn();$bonus = 0;if ($current_solved < 5) {$bonus = 5 - $current_solved;}// 更新用户积分$total_score = $challenge['score'] + $bonus;$pdo->prepare("UPDATE users SET total_score = total_score + ? WHERE id = ?")->execute([$total_score, $user_id]);// 记录提交$stmt = $pdo->prepare("INSERT INTO submissions (user_id, challenge_id, is_correct, is_in_top5)VALUES (?, ?, 1, ?)");$stmt->execute([$user_id, $challenge['id'], ($bonus > 0 ? 1 : 0)]);echo "提交成功！获得积分：$total_score";} else {// 记录错误提交$pdo->prepare("INSERT INTO submissions (user_id, is_correct) VALUES (?, 0)")->execute([$user_id]);echo "Flag错误！";}$pdo->commit();} catch (Exception $e) {$pdo->rollBack();die("系统错误：" . $e->getMessage());}
}
?>
EOF

ctf/web/leaderboard.php

cat > ctf/web/leaderboard.php <<'EOF'
<?php require 'db.php'; ?>
<!DOCTYPE html>
<html lang="zh-CN">
<head><meta charset="UTF-8"><title>排行榜</title><link rel="stylesheet" href="style.css">
</head>
<body><div class="container"><h1>实时排行榜</h1><table class="leaderboard"><thead><tr><th>排名</th><th>用户名</th><th>总分</th><th>最后提交</th></tr></thead><tbody><?php$stmt = $pdo->query("SELECT u.username, u.total_score, MAX(s.submit_time) as last_submitFROM users uLEFT JOIN submissions s ON u.id = s.user_idGROUP BY u.idORDER BY u.total_score DESC, last_submit ASCLIMIT 50");$rank = 1;while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {echo "<tr>";echo "<td>#$rank</td>";echo "<td>{$row['username']}</td>";echo "<td>{$row['total_score']}</td>";echo "<td>" . date('Y-m-d H:i', strtotime($row['last_submit'])) . "</td>";echo "</tr>";$rank++;}?></tbody></table><div class="back-link"><a href="index.php">← 返回挑战列表</a></div></div>
</body>
</html>
EOF

ctf/web/index.php

cat > ctf/web/index.php <<'EOF'
<?php require 'db.php'; ?>
<!DOCTYPE html>
<html lang="zh-CN">
<head><meta charset="UTF-8"><title>CTF挑战平台</title><link rel="stylesheet" href="style.css">
</head>
<body><div class="container"><h1>CTF挑战列表</h1><div class="challenge-list"><?php$stmt = $pdo->query("SELECT * FROM challenges");while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {$points = $row['score'];echo "<div class='challenge'>";echo "<span class='challenge-id'>题目 {$row['id']}</span>";echo "<span class='points'>分值：{$points}</span>";echo "<span class='solved'>已解出：{$row['solved_count']}次</span>";echo "</div>";}?></div><div class="submit-form"><h2>提交Flag</h2><form action="submit.php" method="POST"><input type="text" name="username" placeholder="用户名" required><input type="text" name="flag" placeholder="输入Flag" required><button type="submit">提交</button></form></div><div class="leaderboard-link"><a href="leaderboard.php">查看实时排行榜 →</a></div></div>
</body>
</html>
EOF

CTF/web/db.php

cat > ctf/web/db.php <<EOF
<?php
$host = 'mysql';
$dbname = 'ctf_db';
$user = 'ctf_user';
$pass = 'ctf_pass';try {$pdo = new PDO("mysql:host=$host;dbname=$dbname;charset=utf8mb4", $user, $pass);$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(PDOException $e) {die("Database connection failed: " . $e->getMessage());
}
?>
EOF

CTF/web/style.css

cat > ctf/web/style.css <<EOF
/* 基础样式 */
body {font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;margin: 0;padding: 20px;background-color: #f5f7fa;
}.container {max-width: 1200px;margin: 0 auto;background: white;padding: 30px;border-radius: 12px;box-shadow: 0 4px 6px rgba(0,0,0,0.1);
}/* 挑战列表样式 */
.challenge-list {margin-bottom: 40px;
}.challenge {background: #f8f9fc;padding: 15px 20px;margin: 10px 0;border-radius: 8px;display: flex;justify-content: space-between;align-items: center;transition: transform 0.2s;
}.challenge:hover {transform: translateX(10px);
}.challenge-id {font-weight: 600;color: #2d3748;
}.points {color: #48bb78;font-weight: bold;
}.solved {color: #718096;
}/* 提交表单样式 */
.submit-form {background: #f8f9fc;padding: 25px;border-radius: 8px;margin-top: 30px;
}.submit-form input[type="text"] {width: 250px;padding: 12px;margin-right: 10px;border: 2px solid #e2e8f0;border-radius: 6px;font-size: 16px;
}.submit-form button {background: #4299e1;color: white;border: none;padding: 12px 25px;border-radius: 6px;cursor: pointer;font-size: 16px;transition: background 0.3s;
}.submit-form button:hover {background: #3182ce;
}/* 排行榜样式 */
.leaderboard {width: 100%;border-collapse: collapse;margin-top: 20px;
}.leaderboard th, .leaderboard td {padding: 15px;text-align: left;border-bottom: 1px solid #e2e8f0;
}.leaderboard th {background: #4299e1;color: white;
}.leaderboard tr:nth-child(even) {background: #f8fafc;
}.back-link {margin-top: 25px;text-align: center;
}.back-link a {color: #4299e1;text-decoration: none;font-weight: 500;
}.leaderboard-link {text-align: center;margin-top: 25px;
}.leaderboard-link a {color: #48bb78;text-decoration: none;font-weight: 600;font-size: 1.1em;
}
EOF

构建和运行命令：

cd ctf
docker-compose build
docker-compose up -d

访问测试：
浏览器打开 http://localhost

常见问题解决：

1. 如果遇到权限问题，在命令前加sudo
2. 如果端口冲突，修改docker-compose.yml中的端口映射为 “8080:80”
3. 清除环境使用：docker-compose down -v
4. 查看日志：docker-compose logs -f

以上命令会：

1. 创建完整的目录结构
2. 生成所有配置文件
3. 构建PHP+Apache镜像
4. 启动MySQL数据库
5. 自动初始化数据库结构
6. 启动网站服务
7. 自动设置好题目flag和评分规则