{"repo":"akaunting/laravel-firewall","free":true,"listed":false,"github":"https://github.com/akaunting/laravel-firewall","clone":"git clone https://github.com/akaunting/laravel-firewall.git","description":"Web Application Firewall (WAF) package for Laravel","language":"PHP","stars":1005,"topics":["php","laravel","firewall","waf","security","blacklist","whitelist","akaunting"],"license":"MIT","category":"security-tools","readme_excerpt":"Web Application Firewall (WAF) package for Laravel This package intends to protect your Laravel app from different type of attacks such as XSS, SQLi, RFI, LFI, User Agent, and a lot more. It will also block repeated attacks and send notification via email and/or slack when attack is detected. Furthermore, it will log failed logins and block the IP after a number of attempts. Note: Some middleware classes (i.e. Xss) are empty as the Middleware abstract class that they extend does all of the job, dynamically. In short, they all works ;) Getting Started 1. Install Run the following command: 2. Publish Publish configuration, language, and migrations 3. Database Create db tables 4. Configure You can change the firewall settings of your app from config/firewall.php file Usage Middlewares are already defined so should just add them to routes. The firewall.all middleware applies all the middlewares available in the all middleware array of config file. You can apply each middleware per route. For example, you can allow only whitelisted IPs to access admin: Or you can get notified when anyone NOT in whitelist access admin, by adding it to the inspections config: Available middlewares applicable to routes: You may also define routes for each middleware in config/firewall.php and apply that middleware or firewall.all at the top of all routes. Notifications Firewall will send a notification as soon as an attack has been detected. Emails entered in notifications.email.to config must be val","default_branch":null,"files":null,"tree":[],"storefront":"/r/akaunting","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/akaunting/laravel-firewall/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}