Kevin Adametz
4c944aa15d
- Kontaktformular: keine Mail mehr an die eingegebene Adresse (wurde als Spam-Versender missbraucht); Anfrage nur an Kontakt-Adresse + Berater (BCC), Reply-To = Absender; Eingaben in der Mail escaped - Kontakt + Registrierung: Cloudflare Turnstile statt reCAPTCHA (Schluessel aus dem Code in die .env), Rate-Limits, Honeypot + Mindest-Ausfuellzeit, Namensregel (lateinische Schrift, max. 50 Zeichen), Form Requests - Registrierung: Partner-Nummer nur fuer aktive Berater (vorher ungeprueft) - CRM: POST /register abgeschaltet (legte ohne Captcha Benutzer an) - Passwort-Mindestlaenge systemweit 8 Zeichen ueber Password::defaults() - Log abgefangener Anfragen: storage/logs/form-spam-*.log - Doku und Protokoll: dev/2026-10-09-spam/README.md Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
58 lines
1.6 KiB
PHP
Executable file
58 lines
1.6 KiB
PHP
Executable file
<?php
|
|
|
|
use App\User;
|
|
|
|
return [
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Third Party Services
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| This file is for storing the credentials for third party services such
|
|
| as Stripe, Mailgun, SparkPost and others. This file provides a sane
|
|
| default location for this type of information, allowing packages
|
|
| to have a conventional place to find your various credentials.
|
|
|
|
|
*/
|
|
|
|
'mailgun' => [
|
|
'domain' => env('MAILGUN_DOMAIN'),
|
|
'secret' => env('MAILGUN_SECRET'),
|
|
],
|
|
|
|
'ses' => [
|
|
'key' => env('SES_KEY'),
|
|
'secret' => env('SES_SECRET'),
|
|
'region' => env('SES_REGION', 'us-east-1'),
|
|
],
|
|
|
|
'sparkpost' => [
|
|
'secret' => env('SPARKPOST_SECRET'),
|
|
],
|
|
|
|
'stripe' => [
|
|
'model' => User::class,
|
|
'key' => env('STRIPE_KEY'),
|
|
'secret' => env('STRIPE_SECRET'),
|
|
],
|
|
|
|
// Cloudflare Turnstile (kostenloses Captcha) für das Kontaktformular
|
|
'turnstile' => [
|
|
'site_key' => env('TURNSTILE_SITE_KEY'),
|
|
'secret_key' => env('TURNSTILE_SECRET_KEY'),
|
|
],
|
|
|
|
'vies' => [
|
|
'enabled' => env('VIES_ENABLED', true),
|
|
'timeout' => env('VIES_TIMEOUT', 10),
|
|
],
|
|
|
|
'openai' => [
|
|
'api_key' => env('OPENAI_API_KEY'),
|
|
'url' => env('OPENAI_API_URL', 'https://api.openai.com/v1/chat/completions'),
|
|
'model' => env('OPENAI_MODEL', 'gpt-5.4-mini'),
|
|
'timeout' => env('OPENAI_TIMEOUT', 60),
|
|
],
|
|
|
|
];
|