record frequency of single btn

app.py

@@ -252,7 +252,6 @@ def explain_abnormal_log(log_text):
     except Exception as e: return f"⚠️ 呼叫 API 發生錯誤: {str(e)}"
 
 # --- 2. 核心邏輯與真實 HDBSCAN 異常偵測 ---
-# 🌟 修改：加入 account 參數，為了精準計算該帳號的頻率
 def check_anomaly(ip, account, action, log_time, ow, tw, iw, dw, gw, fw):
     if not AI_READY: return "success" 
     if action in ["login_attempt", "logout"]: return "success"
@@ -261,28 +260,36 @@ def check_anomaly(ip, account, action, log_time, ow, tw, iw, dw, gw, fw):
         ow, tw, iw, dw = float(ow), float(tw), float(iw), float(dw)
         gw, fw = float(gw), float(fw) 
         
-        # --- 🌟 新增：第一道防線 (Rule-based 頻率前置檢查) ---
+        # --- 🌟 修改：第一道防線 (限縮為單一按鈕判斷，並套用精確的閾值) ---
         current_dt = pd.to_datetime(str(log_time))
         cutoff_dt = current_dt - pd.Timedelta(seconds=60) # 往前回溯 60 秒
         
         recent_clicks = 0
         for log in log_history:
             log_dt = pd.to_datetime(log['timestamp'])
-            # 檢查這筆舊紀錄是否在 60 秒內
             if log_dt >= cutoff_dt:
-                # 檢查是不是同一個帳號的動作
-                if log.get('account') == account:
+                # 🌟 修改：同時檢查「同一個帳號」且「同一個動作 (按鈕)」
+                if log.get('account') == account and log.get('action') == action:
                     recent_clicks += 1
             else:
-                # 因為 log_history 是最新的在最前面，遇到超過 60 秒的就可以提早結束，節省資源
                 break
                 
-        # 依據行為頻率敏感度(fw 0~100) 計算最高容忍次數 (計算結果介於 3 到 20 之間)
-        max_allowed_clicks = max(3, int(20 - (fw / 100.0) * 17))
-        
+        # 🌟 修改：依據你要求的階梯式敏感度設定最高容忍次數
+        if fw <= 0: max_allowed_clicks = 100
+        elif fw <= 10: max_allowed_clicks = 90
+        elif fw <= 20: max_allowed_clicks = 80
+        elif fw <= 30: max_allowed_clicks = 70
+        elif fw <= 40: max_allowed_clicks = 60
+        elif fw <= 50: max_allowed_clicks = 50
+        elif fw <= 60: max_allowed_clicks = 40
+        elif fw <= 70: max_allowed_clicks = 30
+        elif fw <= 80: max_allowed_clicks = 15
+        elif fw <= 90: max_allowed_clicks = 9
+        else: max_allowed_clicks = 3
+
         # 觸發條件：若包含這一次的點擊，超過了容忍次數，直接攔截！
         if (recent_clicks + 1) > max_allowed_clicks:
-            return f"⚠️異常_操作頻率過高 ({recent_clicks+1}次/分)"
+            return f"⚠️異常_單一操作頻率過高 ({recent_clicks+1}次/分)"
             
         # --- 第二道防線 (HDBSCAN AI 空間異常判斷) 繼續執行 ---
         ip_code = float(get_ip_category(ip))
@@ -343,7 +350,6 @@ def check_anomaly(ip, account, action, log_time, ow, tw, iw, dw, gw, fw):
     except Exception as e:
         return f"⚠️系統錯誤: {str(e)}"
 
-# 🌟 修改：將 account 傳入 check_anomaly
 def record_log(ip, cookie, account, role, action, status, time_mode, custom_time, ow, tw, iw, dw, gw, fw):
     global baseline_X 
     if time_mode == "自訂時間 (模擬過去/未來)" and custom_time and str(custom_time).strip() != "": log_time = str(custom_time)