implemented a lot of security measures

2025-12-09 20:29:32 +01:00
parent 4bdb93c171
commit 928d28fcaf
21 changed files with 953 additions and 134 deletions
--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -178,6 +178,10 @@ class AppServiceProvider extends ServiceProvider
            ];
        });

+        RateLimiter::for('paddle-webhook', function (Request $request) {
+            return Limit::perMinute(30)->by('paddle:'.$request->ip());
+        });
+
        RateLimiter::for('gift-lookup', function (Request $request) {
            $code = strtoupper((string) $request->query('code'));
            $ip = $request->ip() ?? 'unknown';