Download the PHP package jlrodriguezdev/laravel-bot-protection without Composer

On this page you can find all versions of the php package jlrodriguezdev/laravel-bot-protection. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package laravel-bot-protection

🛡️ Laravel BotProtection

Package PHP Version Laravel Version Battle Tested in Production

High-Performance Web Application Firewall (WAF) & Anti-Bot Middleware for Laravel Applications
Battle-tested and running live in production at LATIRU.RU.


🌐 Choose Your Language / Выберите язык / Elige tu idioma


🇬🇧 English - Laravel BotProtection

1. Overview & Real Production Case Study

BotProtection is a zero-dependency, battle-tested Laravel middleware designed to defend web platforms against hostile automated scrapers, exploit reconnaissance bots, and scanning toolkits.

🚀 Live Case Study from LATIRU.RU:
On October 22, 2026, our production platform LATIRU.RU came under heavy automated scanning and reconnaissance during the global wave of PHP2Shell (CVE-2026-109618 / CVE-2026-109619) attacks.
As audited in our Laravel Telescope and daily error traces, automated attacker bots bombarded the application with exploit probes:

  • POST /php-cgi/php-cgi.exe... -> Blocked with 405 / 403
  • POST /api/gql and POST /graphql/api -> Blocked with 405 / 403
  • GET /.env, GET /.git/config, GET /.vscode/sftp.json -> Neutralized with 404

The Result: The strike system accumulated the violation counts and permanently blacklisted the offending IP addresses within 3 requests. Subsequent probes to public routes (/, /events, /calc) were instantly dropped with 403 Forbidden (errors.bot-detected), protecting our PHP workers and MySQL database from exhaustion.


2. Key Features


3. Installation

Require with Composer:

Register in your application:

For Laravel 9 & 10 (app/Http/Kernel.php):

For Laravel 11 & 12 (bootstrap/app.php):

Publish Configuration & Views:


4. Configuration (config/bot-protection.php)

💡 Important Note on Whitelist Testing:
If you test the middleware by running curl directly from inside the server via SSH, the request originates from 127.0.0.1 or the server's public IP. Because those IPs are whitelisted to prevent local Cron jobs and artisan daemons from locking themselves out, the server will legitimately return 200 OK.
To test real bot blocking, run the curl probe from an external workstation or laptop:

Or test programmatically via Tinker:


5. Architecture & Decision Flow


📄 License

MIT License. Created by jlrodriguezdev.


All versions of laravel-bot-protection with dependencies

PHP Build Version
Package Version
Requires php Version ^8.1|^8.2|^8.3|^8.4|^8.5
illuminate/support Version ^9.0|^10.0|^11.0|^12.0
illuminate/http Version ^9.0|^10.0|^11.0|^12.0
illuminate/cache Version ^9.0|^10.0|^11.0|^12.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package jlrodriguezdev/laravel-bot-protection contains the following files

Loading the files please wait ...