vendor/sindrive/sindrive/IpsetBundle/Listener/BruteForceListener.php line 45

Open in your IDE?
  1. <?php
  2. /**
  3.  * Created by PhpStorm.
  4.  * User: bumz
  5.  * Date: 7/9/14
  6.  * Time: 3:30 PM
  7.  */
  9. namespace Sindrive\IpsetBundle\Listener;
  12. use Sindrive\IpsetBundle\Event\BruteForceEvent;
  13. use Sindrive\IpsetBundle\Service\Ban;
  14. use Sindrive\MemcachedBundle\Services\SindriveMemcached;
  16. class BruteForceListener
  17. {
  18.     /**
  19.      * @var string
  20.      */
  21.     private $banKey;
  23.     /**
  24.      * @var \Sindrive\IpsetBundle\Service\Ban
  25.      */
  26.     private $banService;
  28.     /**
  29.      * @var SindriveMemcached|\Memcached
  30.      */
  31.     private $memcached;
  33.     /**
  34.      * @param SindriveMemcached $memcached
  35.      * @param \Sindrive\IpsetBundle\Service\Ban $banService
  36.      * @param string $banKey
  37.      */
  38.     public function __construct(SindriveMemcached $memcached, Ban $banService, string $banKey = 'sindrive-ips-brute-force-listener')
  39.     {
  40.         $this->memcached = $memcached;
  41.         $this->banService = $banService;
  42.         $this->banKey = $banKey;
  43.     }
  45.     public function watch(BruteForceEvent $event): bool
  46.     {
  47.         $banKey = sprintf('%s-%s', $this->banKey, $event->getIp());
  48.         $data = $event->getData();
  50.         do {
  52.             $resultStore = $this->memcached->getCas($banKey);
  53.             $result = $resultStore['value'];
  54.             $cas = $resultStore['cas'];
  56.             $currentTime = time();
  57.             if ($event->getTimeOffset()) {
  58.                 $time = $currentTime + $event->getTimeOffset();
  59.             } else {
  60.                 $time = 'inf.';
  61.             }
  63.             if ($this->memcached->getResultCode() === \Memcached::RES_NOTFOUND) {
  65.                 $result = array($data => $time);
  66.                 $this->memcached->add($banKey, $result, $time === 'inf.' ? $currentTime + 365 * 24 * 60 * 60 : $time);
  68.             } elseif ($this->memcached->getResultCode() === \Memcached::RES_SUCCESS) {
  70.                 $result = array_filter($result, static function($item) use ($currentTime) {
  71.                     return $item === 'inf.' || $item > $currentTime;
  72.                 });
  74.                 if (!isset($result[$data]) || $result[$data] !== 'inf.') {
  75.                     $result[$data] = $time;
  76.                 }
  78.                 $this->memcached->cas($cas, $banKey, $result, in_array('inf.', $result, true) ? $currentTime + 365 * 24 * 60 * 60 : $time);
  80.             } else {
  81.                 return false;
  82.             }
  86.         } while ($this->memcached->getResultCode() !== \Memcached::RES_SUCCESS);
  88.         if (count($result) > $event->getCount()) {
  89.             $this->banService->add($event->getIp());
  90.         }
  92.         // if we do have a bot that is too greedy
  93.         if (count($result) > $event->getCount() + 2) {
  94.             $this->banService->ban();
  95.         }
  97.         return true;
  98.     }
  100.     public function forget(BruteForceEvent $event): void
  101.     {
  102.         $banKey = sprintf('%s-%s', $this->banKey, $event->getIp());
  103.         $this->memcached->delete($banKey);
  104.     }
  105. }