✏️ Editing: BannedUser.php

<?php
/*
 * LaraClassifier - Classified Ads Web Application
 * Copyright (c) BeDigit. All Rights Reserved
 *
 * Website: https://laraclassifier.com
 * Author: BeDigit | https://bedigit.com
 *
 * LICENSE
 * -------
 * This software is furnished under a license and may be used and copied
 * only in accordance with the terms of such license and with the inclusion
 * of the above copyright notice. If you Purchased from CodeCanyon,
 * Please read the full License from here - https://codecanyon.net/licenses/standard
 */

namespace App\Http\Middleware;

use App\Helpers\UrlGen;
use App\Http\Controllers\Api\Base\ApiResponseTrait;
use App\Models\Blacklist;
use App\Models\User;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
use Prologue\Alerts\Facades\Alert;

class BannedUser
{
	use ApiResponseTrait;
	
	protected string $message = 'This user has been banned';
	
	/**
	 * @param \Illuminate\Http\Request $request
	 * @param \Closure $next
	 * @param $guard
	 * @return mixed
	 */
	public function handle(Request $request, Closure $next, $guard = null)
	{
		// Exception for Install & Upgrade Routes
		if (str_contains(currentRouteAction(), 'Web\Install\\')) {
			return $next($request);
		}
		
		$guard = isFromApi() ? 'sanctum' : $guard;
		$authUser = auth($guard)->user();
		
		if (empty($authUser)) {
			return $next($request);
		}
		
		$this->message = t($this->message);
		
		// Block the access if a User is blocked (as registered User)
		if ($this->doesUserIsBlocked($request, $authUser)) {
			if (isFromApi()) {
				return $this->respondForbidden($this->message);
			}
			
			if ($request->ajax() || $request->wantsJson()) {
				return response($this->message, Response::HTTP_UNAUTHORIZED)->header('Content-Type', 'text/plain');
			}
			
			if (isAdminPanel()) {
				Alert::error($this->message)->flash();
				$loginUrl = admin_uri('login');
			} else {
				flash($this->message)->error();
				$loginUrl = UrlGen::loginPath();
			}
			
			return redirect()->guest($loginUrl);
		}
		
		// Block & Delete the access if a User is banned (from Blacklist with its email address)
		if ($this->doesUserIsBanned($request, $authUser)) {
			if (isFromApi()) {
				return $this->respondForbidden($this->message);
			}
			
			if ($request->ajax() || $request->wantsJson()) {
				return response($this->message, Response::HTTP_UNAUTHORIZED)->header('Content-Type', 'text/plain');
			}
			
			if (isAdminPanel()) {
				Alert::error($this->message)->flash();
				$loginUrl = admin_uri('login');
			} else {
				flash($this->message)->error();
				$loginUrl = UrlGen::loginPath();
			}
			
			return redirect()->guest($loginUrl);
		}
		
		return $next($request);
	}
	
	/**
	 * Check if the user is blocked
	 * Block the access if User is blocked (as registered User)
	 *
	 * @param \Illuminate\Http\Request $request
	 * @param $authUser
	 * @return bool
	 */
	private function doesUserIsBlocked(Request $request, $authUser): bool
	{
		return ($authUser->blocked == 1);
	}
	
	/**
	 * Check if the user is banned
	 * Block & Delete the access if a User is banned (from Blacklist with its email address)
	 *
	 * @param \Illuminate\Http\Request $request
	 * @param $authUser
	 * @return bool
	 */
	private function doesUserIsBanned(Request $request, $authUser): bool
	{
		$cacheExpiration = (int)config('settings.optimization.cache_expiration', 86400);
		
		// Check if the user's email address has been banned
		$cacheId = 'blacklist.email.' . $authUser->email;
		$bannedUser = cache()->remember($cacheId, $cacheExpiration, function () use($authUser) {
			return Blacklist::ofType('email')->where('entry', $authUser->email)->first();
		});
		
		if (empty($bannedUser)) {
			return false;
		}
		
		$user = User::find($authUser->id);
		if (empty($user)) {
			return false;
		}
		
		$user->delete();
		
		return true;
	}
}

Ubuntu

Sid Gifari From Gifari Industries - BD Cyber Security Team



Ubuntu

Sid Gifari From Gifari Industries - BD Cyber Security Team