function upower_core_watchdog(array $log_entry) {

//一分钟之内，30次watchdog，自动封IP

  $created_start = time() - 60;

  $ip = substr($log_entry['ip'], 0, 128);

  $sql = "SELECT count(wid) FROM {watchdog} WHERE uid=:uid AND hostname=:hostname AND timestamp > :timestamp";

  $ip_total = db_query($sql, array(':uid' => 0, ':hostname' => $ip, ':timestamp' => $created_start))->fetchField();

  if($ip_total >= 30){

    db_insert('blocked_ips')

      ->fields(array('ip' => $ip))

      ->execute();

  }

}