vincendev/laraflood

Flood protection for laravel 5

Laraflood - Antiflood system for Laravel using Cache

This tool designed for limiting some user requests., _(*1)

This tool is based on: ircop/Laraflood, I have added / modified things that have been useful for my current project and I publish it in case it can be useful to someone!, _(*2)

INSTALL

1: install via composer, _(*3)

composer require vincendev/laraflood

If you're using laravel 5.5: steps 2 and 3 are not necessary., _(*4)

2: add service provider to providers array in config/app.php:, _(*5)

Vincendev\Laraflood\LarafloodServiceProvider::class,

3: add facade alias to aliases array in config/app.php:, _(*6)

'Laraflood' => Vincendev\Laraflood\FacadeLaraflood::class,

Usage

Checking for record existance with given identity and add attempt., _(*7)

$identity - can be ip-address, user id, anything unique. Default is ip-address., _(*8)

$action - What is the user trying to do? Submit-post, Login, Search, etc. Default is 'default'., _(*9)

$maxAttempts - How many attempts do you want to give the user? Default is 5., _(*10)

$minutes - Waiting time after attempts are over. Default is 5 minutes., _(*11)

Laraflood::check( $identity = 'ip', $action = 'default', $maxAttempts = 5, $minutes = 5 );
Laraflood::check();
Laraflood::check( $user->id , 'submit-comment');
Laraflood::check( $user->id , 'report-comment', 1, 5);

/* Return bool */

Only check without add attempt., _(*12)

Laraflood::checkOnly( $identity = 'ip', $action = 'default', $maxAttempts = 5, $minutes = 5 );
Laraflood::checkOnly();
Laraflood::checkOnly( $user->id , 'submit-comment');
Laraflood::checkOnly( $user->id , 'report-comment', 1, 5);

/* Return bool */

Add attempt for given $identity with ·$action on given $minutes. 'ip' by default is the real user ip., _(*13)

Laraflood::addAttempt( $identity = 'ip', $action = 'default', $minutes = 5 );
Laraflood::addAttempt();
Laraflood::addAttempt('ip', 'like-post');
Laraflood::addAttempt( $user->id ,'default', 5 );

/* Void */

Get time left for given identity & action., _(*14)

Laraflood::timeLeft( $identity = 'ip', $action = 'default');
Laraflood::timeLeft();
Laraflood::timeLeft( 'ip', 'like-post');

/* Return string */
    # X hours
    # X minutes
    # X seconds

Returns array for given identity & action, _(*15)

Laraflood::get($identity = 'ip', $action = 'default')
Laraflood::get();
Laraflood::get( 'ip', 'like-post');

/*
array:3 [▼
  "action" => "default"
  "attempts" => 1
  "expiration" => "2019-09-18 19:51:01.175237"
]
*/

Examples:

Limiting wrong login attempts for given IP address:

This example limiting wrong login attempts from one ip-address to 5 tryes per 20 minutes:, _(*16)

public function postLogin()
{

/**
* If thes user ip has >= 5 failed login attempts in last 5 minutes, redirect user
* back with error:
*/

    if( Laraflood::check( 'ip' , 'login', 5, 5 ) === FALSE )
        return redirect()->back()->withErrors(["AntiFlood Protection! Try again in ".Laraflood::timeLeft('ip','login')." ."]);

    /**
    * Your code here..
    */

}

Increment post views .

This code shows how increment post views only 1 view every 24 hours.., _(*17)

public function incrementPostViews()
{
        $action = "post-visit:" . $post->id; // Post unique ID
        $visitsPerUser = 1;
        $minutes = 1440; // 24Hours
        if(Laraflood::checkOnly('ip', $action, $visitsPerUser)){
            /**
            * Increment post views
            * Your code here..
            */
            Laraflood::addAttempt('ip', $action, $minutes);
        }

}