neiyou_user_web/app/Http/Middleware/isSecurity.php

<?php

namespace App\Http\Middleware;

use App\Components\Helpers;
use Cache;
use Closure;
use Log;

class isSecurity
{
	/**
	 * 是否需要安全码才访问(仅用于登录页)
	 *
	 * @param         $request
	 * @param Closure $next
	 *
	 * @return mixed
	 */
	public function handle($request, Closure $next)
	{
		$ip = getClientIP();
		$code = $request->input('securityCode');
		$cacheKey = 'SecurityLogin_'.ip2long($ip);
		$websiteSecurityCode = Helpers::systemConfig()['website_security_code'];

		if($websiteSecurityCode && !Cache::has($cacheKey)){
			if($code != $websiteSecurityCode){
				Log::info("拒绝非安全入口访问(".$ip.")");

				return response()->view('auth.error', ['message' => trans('error.SecurityError').', '.trans('error.Visit').'<a href="/login?securityCode=" target="_self">'.trans('error.SecurityEnter').'</a>']);
			}else{
				Cache::put($cacheKey, $ip, 120); // 缓存120分钟，因为每个session默认存活120分钟
			}
		}

		return $next($request);
	}
}