Download the PHP package chh/stack-honeypot without Composer
On this page you can find all versions of the php package chh/stack-honeypot. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package stack-honeypot
Stack\Honeypot
A port of Rack::Honeypot to Stack for PHP.
Install
composer require stack/honey-pot:~1.0Usage
Wrap your HttpKernelInterface app in an instance of CHH\Stack\Honeypot or add it to your middleware stack.
With stack/builder:
Without the builder:
From Rack::Honeypot:
This middleware acts as a spam trap. It inserts, into every outputted <form>, a text field that a spambot will really want to fill in, but is actually not used by the app. The field is hidden to humans via CSS, and includes a warning label for screenreading software.
In the <body>:
<form>
<div class='phonetoy'>
<label for='email'>Don't fill in this field</label>
<input type='text' name='email' value=''/>
</div>
[...]In the <head>:
<style type='text/css' media='all'>
div.phonetoy {
display:none;
}
</style>Then, for incoming requests, the middleware will check if the text field has been set to an unexpected value. If it has, that means a spambot has altered the field, and the spambot is booted to a dead end blank page.
There are a few options you can pass to the constructor (or to the Stack Builder):
class_nameis the class assigned to the parent div of the honeypot. Defaults to "phonetoy", an anagram of honeypot.labelis the warning label displayed to those with CSS disabled. Defaults to "Don't fill in this field".input_nameis the name of the form field. Ensure that this is tempting to a spambot if you modify it. Defaults to "email".input_valueis the value of the form field that would only be modified by a spambot. Defaults to blank.always_enabled(defaults totrue) set tofalseif you don't want to insert the trap into all responses returned by your app. Just addX-Honeypot: enabledto your response headers to enable the trap for this response.
License
See LICENSE.txt.
