Download the PHP package redeyed/sentinel-laravel without Composer

On this page you can find all versions of the php package redeyed/sentinel-laravel. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Informations about the package sentinel-laravel

Redeyed Sentinel for Laravel

Add Redeyed Sentinel — a self-hosted CAPTCHA + IP-reputation service — to any Laravel app in a couple of minutes.

Sentinel is free to install and completely inert until you set your keys. Before keys are configured the package fails open (verification passes and a warning is logged) so your forms never break. Once your keys are in place, every protected form is verified server-side.

Requirements

Installation

The service provider is auto-discovered — there is nothing to register manually.

Optionally publish the config:

Configuration

Grab both keys from the Redeyed Lab → Sentinel → Sites (each site has both):

Add them to your .env:

The SENTINEL_SECRET_KEY is secret and stays server-side — it is only ever sent to the verification endpoint and is never exposed to the browser. No developer API key is required.

Usage

1. Render the widget in your form

Drop the component anywhere inside your <form>:

Prefer a directive? @sentinel does exactly the same thing:

The widget loads the Sentinel script once per page and injects a hidden input named sentinel-token into your form.

Customising the widget (optional)

The widget accepts four optional settings. Leave them unset and nothing changes — the widget renders exactly as before (just data-sitekey). Each one is rendered as a data-* attribute only when non-empty.

Option data-* Values
widget data-widget behavioral | checkbox | press_hold | image_pick
theme data-theme auto | light | dark
scheme data-scheme colour scheme name
difficulty data-difficulty easy | medium | hard | max, or 16
width data-width fixed widget width, e.g. full, 100% or 340px

Note: difficulty only raises the challenge strength above the adaptive baseline. A risky visitor is always challenged hard regardless of this value.

Set them per instance via component props (these override the config defaults):

…or set project-wide defaults in the published config/sentinel.php (or via .env):

2. Verify on the server

Add the rule to your validation. Either use the rule class:

…or the string alias:

If verification fails the user sees:

Human verification failed — please try again.

How verification works

On submit, the package POSTs to {BASE_URL}/sentinel/siteverify with a JSON body of {"secret": "...", "response": "<token>"} — reCAPTCHA-style. The site secret authenticates the call, so no developer API key is involved. The submission passes only when the response reports success === true.

If the secret is not configured, verification fails open and logs a warning so forms keep working until you finish setup.

License

MIT © 2026 Redeyed Corporation


All versions of sentinel-laravel with dependencies

PHP Build Version
Package Version
Requires php Version >=8.1
illuminate/support Version ^10.0 || ^11.0 || ^12.0 || ^13.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package redeyed/sentinel-laravel contains the following files

Loading the files please wait ...