Thinkphp6.0 middleware with limited access frequency think throttle

effect

The middleware can limit the number of visits of users in a period of time , It can be used to protect the interface from climbing and explosion .

install

composer require topthink/think-throttle

After installation, the project will be automatically generated  conf/throttle.php  The configuration file , Components are not automatically enabled after installation , Manual setting required .

Turn on

Components work as middleware , Therefore, its startup is the same as other middleware , For example, in global middleware  app/middleware.php :

<?php
return [
    \think\middleware\Throttle::class,
];

Configuration instructions

stay  config/throttle.php  configuration option :

<?php
//  Middleware configuration 
return [
    //  Cache key prefix , Prevent key values from conflicting with other applications 
    'prefix' => 'throttle_',
    //  The cache keys ,true  Indicates the source of use ip
    'key' => true,
    //  The type of request to be restricted , eg: GET POST PUT DELETE HEAD
    'visit_method' => ['GET'],
    //  Set access frequency , for example  '10/m'  It means allowing requests per minute 10 Time . value  null  Means unrestricted , eg: null 10/m  20/h  300/d 200/300
    'visit_rate' => '100/m',
    //  Response returned when access is restricted 
    'visit_fail_response' => function (Throttle $throttle, Request $request, int $wait_seconds) {
        return Response::create('Too many requests, try again after ' . $wait_seconds . ' seconds.')->code(429);
    },
];

When the configuration item meets any of the following conditions , Access frequency will not be limited ：

1. key  The value is  false  or  null;
2. visit_rate  The value is  null.

among  key  The key used to set the cache ; and  visit_rate  Used to set the access frequency , The unit can be seconds , branch , when , God , for example ：1/s, 10/m, 98/h, 100/d , It can also be  100/600 （600 Maximum in seconds 100 Requests ）.

Flexible customization

Example 1 ： Make restrictions on individual users , key  The value of can be set as a function , This function returns the new cache key value ( need Session Support ), for example ：

'key' => function($throttle, $request) {
    $user_id = $request->session->get('user_id');
    return $user_id ;
},

  Example 2 ： You can also customize the generation for different controllers and methods in the callback function key, The middleware will transform :

'key' => function($throttle, $request) {
    return '__CONTROLLER__/__ACTION__/__IP__';
},

Or set it directly :

'key' => '__CONTROLLER__/__ACTION__/__IP__',

PS： This example requires the middleware to be enabled after routing the middleware , In this way, the preset replacement function will take effect .

Example 3 ： It is allowed to modify the current access frequency or temporarily change the current limiting policy within the closure ：

'key' => function($throttle, $request) {
    $throttle->setRate('5/m');                      //  Set the frequency 
    $throttle->setDriverClass(CounterSlider::class);//  Set current limiting policy 
    return true;
},

Example 4 ： Allow independent configuration in route definition (1.3.x Versioning support )

Route::group(function() {
    // Route registration 
 
})->middleware(\think\middleware\Throttle::class, [
    'visit_rate' => '20/m',
    'key' => '__CONTROLLER__/__ACTION__/__IP__',
]);

thinkphp6.0 Middleware with limited access frequency think-throttle_ Zhongzhong's blog -CSDN Blog _thinkphp Limit request frequency