Download the PHP package potelo/laravel-block-bots without Composer
On this page you can find all versions of the php package potelo/laravel-block-bots. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download potelo/laravel-block-bots
More information about potelo/laravel-block-bots
Files in potelo/laravel-block-bots
Package laravel-block-bots
Short Description Block bots and high traffic offenders using Redis
License
Informations about the package laravel-block-bots
Laravel Block Bots
Introduction
Laravel Block bots is a package that blocks bad crawlers, people trying to scrape your website or high-usage users, but lets good and important crawlers such as GoogleBot and Bing pass through.
Features
- ULTRA fast, less than 1ms increase in each request.
- Verify Crawlers using reverse DNS
- Highly configurable
- Redirect users to a page when they got blocked
- Allow Logged users to always bypass blocks
- Native IPv6 support with prefix-based rate limiting
Install
Via Composer
Requirement
- This package relies heavily on Redis. To use it, make sure that Redis is configured and ready. (see Laravel Redis Configuration)
Before Laravel 5.5
In Laravel 5.4, you'll manually need to register the \Potelo\LaravelBlockBots\BlockBots::class service provider in config/app.php.
Config
To adjust the library, you can publish the config file to your project using:
Configure variables in your .env file:
Usage
It's simple. Go to Kernel.php and add to the $routeMiddleware block as:
Then you can put it in the desired groups. For example, let's set it to the web group:
Where:
- 100: is the number of pages an IP can access every day
- daily: is the time period. Options:
hourly,daily,weekly,monthly,annually
IPv6 Support
This package has native IPv6 support with prefix-based rate limiting.
Why Prefix-Based Rate Limiting?
IPv6 users typically receive a prefix (e.g., /64) from their ISP, giving them access to millions or trillions of unique IP addresses. Without prefix-based handling, a malicious user could easily bypass rate limits by rotating through different IPs within their allocation.
This package normalizes IPv6 addresses to their prefix for tracking:
All IPs within the same prefix are treated as a single entity for rate limiting.
Configuring IPv6 Prefix Length
Set the prefix length in your .env:
| Prefix | Use Case | Description |
|---|---|---|
| /64 | Standard residential (default) | Most common allocation, recommended for most cases |
| /56 | Some residential ISPs | If your users typically have /56 allocations |
| /48 | Business/enterprise | For sites primarily serving business networks |
Bot Verification with IPv6
The package also handles legitimate bots (like GoogleBot) that use IPv6:
- Original IP is used for reverse DNS verification
- Trackable prefix is used for whitelisting
- Once verified, all IPs within the bot's prefix are automatically allowed
This ensures legitimate crawlers are never blocked while still rate limiting potential abusers.
Change log
Please see CHANGELOG for more information on what has changed recently.
Contributing
Please see CODE_OF_CONDUCT for details.
Credits
License
The MIT License (MIT). Please see License File for more information.
All versions of laravel-block-bots with dependencies
laravel/framework Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0
predis/predis Version ^2.2
guzzlehttp/guzzle Version ^7.5.0
ext-json Version *