Utopia Abuse
Utopia framework abuse library is simple and lite library for managing application usage limits. This library is aiming to be as simple and easy to learn and use. This library is maintained by the Appwrite team.
Although this library is part of the Utopia Framework project it is dependency free, and can be used as standalone with any other PHP project or framework.
Getting Started
Install using composer:
composer require utopia-php/abuse
Time Limit Abuse
The time limit abuse allow each key (action) to be performed [X] times in given time frame. This adapter uses a MySQL / MariaDB to store usage attempts. Before using it create the table schema as documented in this repository (./data/schema.sql)
<?php
require_once __DIR__ . '/../../vendor/autoload.php';
use Utopia\Abuse\Abuse;
use Utopia\Abuse\Adapters\TimeLimit;
// Limit login attempts to 10 time in 5 minutes time frame
$adapter = new TimeLimit('login-attempt-from-{{ip}}', 10, (60 * 5), function () {/* init and return PDO connection... */});
$adapter
->setNamespace('namespace') // DB table namespace
->setParam('{{ip}}', '127.0.0.1')
;
$abuse = new Abuse($adapter);
// Use vars to resolve adapter key
if(!$abuse->check()) {
throw new Exception('Service was abused!'); // throw error and return X-Rate limit headers here
}
ReCaptcha Abuse
The ReCaptcha abuse controller is using Google ReCaptcha service to detect when service is being abused by bots. To use this adapter you need to create an API key from the Google ReCaptcha service admin console.
<?php
require_once __DIR__ . '/../../vendor/autoload.php';
use Utopia\Abuse\Abuse;
use Utopia\Abuse\Adapters\ReCaptcha;
// Limit login attempts to 10 time in 5 minutes time frame
$adapter = new ReCaptcha('secret-api-key', $_POST['g-recaptcha-response'], $_SERVER['REMOTE_ADDR']);
$abuse = new Abuse($adapter);
if(!$abuse->check()) {
throw new Exception('Service was abused!'); // throw error and return X-Rate limit headers here
}
Notice: The code above is for example purpose only. It is always recommended to validate user input before using it in your code. If you are using a load balancer or any proxy server you might need to get user IP from the HTTP_X_FORWARDED_FOR header.
System Requirements
Utopia Framework requires PHP 7.4 or later. We recommend using the latest PHP version whenever possible.
Authors
Eldad Fux
Copyright and license
The MIT License (MIT) http://www.opensource.org/licenses/mit-license.php
2.6k Dec 30, 2022
189 Dec 6, 2022
6 Oct 14, 2022
620 Jan 7, 2023
0 Jul 2, 2022
281 Jan 2, 2023
2 Nov 23, 2021
11.5k Jan 4, 2023
118 Jun 24, 2022
2.5k Dec 30, 2022
415 Dec 27, 2022
6 Jul 9, 2022
1 May 1, 2022
111 Jul 23, 2022
7 Aug 6, 2021
1 Oct 11, 2022
466 Dec 8, 2022
26 Feb 5, 2022