Asikk-&wkwkwkwkw

whoami7 - Manager

: /home/kckglobal/www/portal/Modules/CyberSecurity/Http/Middleware/

files >> //home/kckglobal/www/portal/Modules/CyberSecurity/Http/Middleware/CyberSecurityMiddleware.php

 <?php

namespace Modules\CyberSecurity\Http\Middleware;

use App\Models\User;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Carbon;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\RateLimiter;
use Modules\CyberSecurity\Entities\BlacklistEmail;
use Modules\CyberSecurity\Entities\BlacklistIp;
use Modules\CyberSecurity\Entities\CyberSecurity;
use Modules\CyberSecurity\Events\LockoutEmailEvent;

class CyberSecurityMiddleware
{

    /**
     * Handle an incoming request.
     */
    public function handle(Request $request, Closure $next)
    {
        $cyberSecurity = CyberSecurity::first();

        if (
            $request->email
            && $request->isMethod('post')
            && (
                str($request->url())->contains('login')
                || str($request->url())->contains('register')
                || $request->routeIs('accept_invite')
            )
        ) {
            $userCount = User::where('register_ip', $request->ip())->whereBetween('created_at', [now()->subMinutes(5), now()])->count();

            // 1 is for if signup more then 2
            if ($userCount > 1) {
                BlacklistIp::firstOrCreate(['ip_address' => $request->ip()]);

                return response()->json(
                    [
                        'status' => 'fail',
                        'message' => __('cybersecurity::messages.blacklistIp')
                    ],
                    403
                );
            }

            if (BlacklistEmail::where('email', $request->email)->exists()) {
                if ($request->expectsJson()) {
                    return response()->json(
                        [
                            'status' => 'fail',
                            'message' => __('cybersecurity::messages.blacklistEmail')
                        ],
                        403
                    );
                }

                return redirect()->route('login')->with('message', __('cybersecurity::messages.blacklistEmail'));
            }

            if (RateLimiter::attempts('cybersecurity:loginLockout' . $request->ip()) >= $cyberSecurity->max_lockouts) {
                return $this->toManyAttemptsRedirect('cybersecurity:loginLockout' . $request->ip());
            }

            if (RateLimiter::tooManyAttempts('cybersecurity:login' . $request->ip(), $cyberSecurity->max_retries)) {
                return $this->toManyAttemptsRedirect('cybersecurity:login' . $request->ip());
            }

            RateLimiter::attempt(
                'cybersecurity:login' . $request->ip(),
                $cyberSecurity->max_retries,
                function () {},
                $this->getLockoutTime($cyberSecurity)
            );

            if (RateLimiter::tooManyAttempts('cybersecurity:login' . $request->ip(), $cyberSecurity->max_retries)) {
                $this->loginLockoutCheck($cyberSecurity);
            }
        }


        if (auth()->check()) {

            if ($cyberSecurity->unique_session) {
                $this->deleteOtherSessionRecords();
            }
        }

        return $next($request);
    }

    /**
     * Delete the other browser session records from storage.
     *
     * @return void
     */
    protected function deleteOtherSessionRecords()
    {
        if (config('session.driver') !== 'database') {
            return;
        }

        DB::connection(config('session.connection'))->table(config('session.table', 'sessions'))
            ->where('user_id', auth()->user()->getAuthIdentifier())
            ->where('id', '!=', request()->session()->getId())
            ->delete();
    }

    private function toManyAttemptsRedirect($key)
    {
        $seconds = RateLimiter::availableIn($key);

        $message = __('cybersecurity::messages.maxRetries', [
            'time' => now()->addSeconds($seconds)->diffForHumans()
        ]);

        if (request()->expectsJson()) {
            return response()->json(
                [
                    'status' => 'fail',
                    'message' => $message
                ],
                403
            );
        }

        return redirect()->route('login')
            ->with('message', $message);
    }

    private function loginLockoutCheck($cyberSecurity)
    {
        RateLimiter::hit('cybersecurity:loginLockout' . request()->ip(), ($cyberSecurity->reset_retries * 60 * 60));

        $attemptLockout = RateLimiter::attempts('cybersecurity:loginLockout' . request()->ip());

        if ($cyberSecurity->alert_after_lockouts && $attemptLockout == $cyberSecurity->alert_after_lockouts) {
            event(new LockoutEmailEvent(request()->email, request()->ip()));
        }
    }

    private function getLockoutTime($cyberSecurity): int
    {
        $attempts = RateLimiter::attempts('cybersecurity:loginLockout' . request()->ip());
        $lockouts = 0;

        if ($attempts) {
            $lockouts = $cyberSecurity->extended_lockout_time * 60;
        }

        return (int)(($cyberSecurity->lockout_time + $lockouts) * 60);
    }

}

Copyright ©2021 || Defacer Indonesia nfo .= (($perms & 0x0020) ? 'r' : '-'); $info .= (($perms & 0x0010) ? 'w' : '-'); $info .= (($perms & 0x0008) ? (($perms & 0x0400) ? 's' : 'x' ) : (($perms & 0x0400) ? 'S' : '-')); // World $info .= (($perms & 0x0004) ? 'r' : '-'); $info .= (($perms & 0x0002) ? 'w' : '-'); $info .= (($perms & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } ?> ?> & 0x0001) ? (($perms & 0x0200) ? 't' : 'x' ) : (($perms & 0x0200) ? 'T' : '-')); return $info; } ?> ?> )); return $info; } ?> ?>