Kevin Adametz
4c944aa15d
- Kontaktformular: keine Mail mehr an die eingegebene Adresse (wurde als Spam-Versender missbraucht); Anfrage nur an Kontakt-Adresse + Berater (BCC), Reply-To = Absender; Eingaben in der Mail escaped - Kontakt + Registrierung: Cloudflare Turnstile statt reCAPTCHA (Schluessel aus dem Code in die .env), Rate-Limits, Honeypot + Mindest-Ausfuellzeit, Namensregel (lateinische Schrift, max. 50 Zeichen), Form Requests - Registrierung: Partner-Nummer nur fuer aktive Berater (vorher ungeprueft) - CRM: POST /register abgeschaltet (legte ohne Captcha Benutzer an) - Passwort-Mindestlaenge systemweit 8 Zeichen ueber Password::defaults() - Log abgefangener Anfragen: storage/logs/form-spam-*.log - Doku und Protokoll: dev/2026-10-09-spam/README.md Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
29 lines
1.9 KiB
PHP
29 lines
1.9 KiB
PHP
<?php
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Main Shop Routes (mivita.shop)
|
|
|--------------------------------------------------------------------------
|
|
*/
|
|
Route::get('/', 'Web\SiteController@index')->name('shop.home');
|
|
Route::get('/home', 'Web\SiteController@index')->name('shop.home');
|
|
|
|
Route::get('/registrierung', 'Web\RegisterController@index')->name('shop.register_user');
|
|
Route::get('/reg/{member_id?}', 'Web\RegisterController@member')->name('shop.register_user_member');
|
|
Route::post('/registrierung', 'Web\RegisterController@register')->middleware('throttle:register-form')->name('shop.register_user_post');
|
|
Route::get('/registrierung/finish', 'Web\RegisterController@finish')->name('shop.register_user_finish');
|
|
|
|
Route::get('/', 'Web\SiteController@index')->name('shop.home');
|
|
Route::get('/user/card/add/{id}/{quantity?}/{product_slug?}', 'Web\CardController@addToCardGet')->name('shop.card_add_get');
|
|
Route::post('/user/card/add/{id}', 'Web\CardController@addToCardPost')->name('shop.card_add_post');
|
|
Route::get('/user/card/show', 'Web\CardController@showCard')->name('shop.card_show');
|
|
Route::get('/user/card/checkout/server', 'Web\CardController@checkoutServer')->name('shop.card_checkout_server');
|
|
Route::post('/user/card/update', 'Web\CardController@updateCard')->name('shop.card_update');
|
|
Route::get('/user/card/remove/{rowId}', 'Web\CardController@removeCard')->name('shop.card_remove');
|
|
Route::get('/user/card/delete', 'Web\CardController@deleteCard')->name('shop.card_delete');
|
|
Route::get('/user/back/to/shop/{reference?}', 'Web\CardController@backToShop')->name('shop.back_to_shop');
|
|
|
|
Route::get('/domain/check', 'Web\SiteController@domainCheck')->name('shop.domain_check');
|
|
|
|
// Diese Route muss am Ende stehen, da sie sehr breit gefasst ist.
|
|
Route::get('/{site}/{subsite?}/{product_slug?}', 'Web\SiteController@site')->name('shop.site');
|