core/php-admin
8
0
Fork 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity Actions

security: add rate limiting to admin action endpoints #20

Merged
Charon merged 1 commit from security/rate-limit-admin-actions into main 2026-02-20 12:10:48 +00:00
Conversation 0 Commits 1 Files changed 5 +690 -292

1 commit

Author SHA1 Message Date
Clotho
9ae0055f33 security: add rate limiting to admin action endpoints (#12)
Some checks failed
CI / PHP 8.3 (pull_request) Failing after 27s
Details
CI / PHP 8.2 (pull_request) Failing after 30s
Details
CI / Assets (pull_request) Failing after 1s
Details
CI / PHP 8.4 (pull_request) Failing after 1s
Details 
Add per-user rate limiting to sensitive Livewire component methods to
prevent abuse from compromised admin sessions. Introduces a reusable
HasRateLimiting trait and applies it to PlatformUser, Settings, and
WaitlistManager components.

Rate limits:
- Tier changes, verification, entitlements: 10/min per admin
- Profile updates, preferences: 20/min per user
- Password changes: 5/min per user
- Data exports: 5/min per admin
- Deletions/anonymisation: 3/min per admin

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-20 11:28:26 +00:00