Updated blacklist rules

This commit is contained in:
David Bomba 2025-04-16 00:16:43 +10:00
parent 558471a989
commit cecb7c07a2
6 changed files with 11 additions and 4 deletions

View File

@ -1 +1 @@
5.11.67 5.11.68

View File

@ -34,6 +34,7 @@ class ValidJson
if ( if (
$request->isJson() && $request->isJson() &&
$request->getContent() !== '' &&
is_null(json_decode($request->getContent())) && is_null(json_decode($request->getContent())) &&
json_last_error() !== JSON_ERROR_NONE json_last_error() !== JSON_ERROR_NONE
) { ) {

View File

@ -54,6 +54,7 @@ class CreateAccountRequest extends Request
'utm_campaign' => 'sometimes|nullable|string', 'utm_campaign' => 'sometimes|nullable|string',
'utm_term' => 'sometimes|nullable|string', 'utm_term' => 'sometimes|nullable|string',
'utm_content' => 'sometimes|nullable|string', 'utm_content' => 'sometimes|nullable|string',
// 'cf-turnstile' => 'required|string',
]; ];
} }

View File

@ -21,6 +21,11 @@ class BlackListRule implements ValidationRule
{ {
/** Bad domains +/- disposable email domains */ /** Bad domains +/- disposable email domains */
private array $blacklist = [ private array $blacklist = [
'easymailer.live',
'mynes.com',
'techeback.online',
'deliverydaily.org',
'ptct.net',
'cybtric.com', 'cybtric.com',
'intady.com', 'intady.com',
'nike4s.com', 'nike4s.com',

View File

@ -17,8 +17,8 @@ return [
'require_https' => env('REQUIRE_HTTPS', true), 'require_https' => env('REQUIRE_HTTPS', true),
'app_url' => rtrim(env('APP_URL', ''), '/'), 'app_url' => rtrim(env('APP_URL', ''), '/'),
'app_domain' => env('APP_DOMAIN', 'invoicing.co'), 'app_domain' => env('APP_DOMAIN', 'invoicing.co'),
'app_version' => env('APP_VERSION', '5.11.67'), 'app_version' => env('APP_VERSION', '5.11.68'),
'app_tag' => env('APP_TAG', '5.11.67'), 'app_tag' => env('APP_TAG', '5.11.68'),
'minimum_client_version' => '5.0.16', 'minimum_client_version' => '5.0.16',
'terms_version' => '1.0.1', 'terms_version' => '1.0.1',
'api_secret' => env('API_SECRET', false), 'api_secret' => env('API_SECRET', false),

View File

@ -130,7 +130,7 @@ use App\Http\Controllers\Reports\RecurringInvoiceReportController;
use App\Http\Controllers\Reports\PurchaseOrderItemReportController; use App\Http\Controllers\Reports\PurchaseOrderItemReportController;
Route::group(['middleware' => ['throttle:api', 'api_secret_check']], function () { Route::group(['middleware' => ['throttle:api', 'api_secret_check']], function () {
Route::post('api/v1/signup', [AccountController::class, 'store'])->name('signup.submit'); Route::post('api/v1/signup', [AccountController::class, 'store'])->name('signup.submit')->middleware('throttle:1,10');
Route::post('api/v1/oauth_login', [LoginController::class, 'oauthApiLogin']); Route::post('api/v1/oauth_login', [LoginController::class, 'oauthApiLogin']);
}); });