neiyou_user_web/app/Http/Middleware/isSecurity.php

<?php

namespace App\Http\Middleware;

use App\Components\Helpers;
use Cache;
use Closure;
use Log;

class isSecurity
{
	/**
	 * 是否需要安全码才访问(仅用于登录页)
	 *
	 * @param         $request
	 * @param Closure $next
	 *
	 * @return mixed
	 */
	public function handle($request, Closure $next)
	{
		$ip = getClientIP();
		$code = $request->input('securityCode');
		$cacheKey = 'SecurityLogin_' . ip2long($ip);
		$websiteSecurityCode = Helpers::systemConfig()['website_security_code'];

		if ($websiteSecurityCode && !Cache::has($cacheKey)) {
			if ($code != $websiteSecurityCode) {
				Log::info("拒绝非安全入口访问(" . $ip . ")");

				return response()->view('auth.error', ['message' => trans('error.SecurityError') . ', ' . trans('error.Visit') . '<a href="/login?securityCode=" target="_self">' . trans('error.SecurityEnter') . '</a>']);
			} else {
				Cache::put($cacheKey, $ip, 120); // 缓存120分钟，因为每个session默认存活120分钟
			}
		}

		return $next($request);
	}
}