🔒 SecureLaravel

A lightweight Laravel security enhancement package by Bilal Khilji — designed to add advanced licensing, authorization, and integrity protection layers to your Laravel applications.

---

🚀 Features

• 🧩 Plug-and-play Laravel Service Provider
• 🪪 License validation and encryption
• 🖥️ Machine fingerprinting support
• 🌐 IP, domain, and usage tracking
• 🧱 Pre-boot protection for unauthorized copies
• ⚙️ Helper functions for secure key management
• 🪶 Zero configuration — autoloaded via Composer
• 🧩 Dynamic patch injection for Application.php and index.php

---

📦 Installation

Require the package via Composer:

composer require ibilalkhilji/secure-laravel

Then run the migrations (this step is required):

php artisan migrate

This will create the necessary database tables for license management and usage tracking.

---

⚙️ Configuration

No manual configuration or file export is required. The package auto-registers its service provider and uses sensible defaults for most environments.

You can, however, override behavior directly through environment variables or by extending the default classes under src/.

Example:

SECURE_LARAVEL_ENDPOINT=https://your-license-server.com

---

🧩 Dynamic Patch Injection

SecureLaravel allows you to dynamically patch your Laravel core files — like Application.php and index.php — without modifying them manually.

Simply place your patch files inside the Patches folder located at the Laravel base path:

/basepath/Patches/
    ├── Application.php
    └── index.php

At runtime, the package automatically detects and injects these patch files, ensuring seamless updates and rollback safety.

This is particularly useful for:

• Injecting licensing validation before Laravel boot
• Enforcing pre-startup checks for unauthorized copies
• Extending bootstrap logic securely

Fallback behavior: If no dynamic patch files are provided in the Patches folder, SecureLaravel will fall back to its built-in default implementations (no changes to your core files).

---

🧠 Usage

1️⃣ Register License

You can register or verify your license key using the helper:

use Ibilalkhilji\\SecureLaravel\\Facades\\SecureLaravel;

SecureLaravel::validateLicense('YOUR-LICENSE-KEY');

2️⃣ Retrieve Machine Fingerprint

Get a unique hash based on system and environment data:

$fingerprint = SecureLaravel::fingerprint();

3️⃣ Track Usage

Record usage meta for your application:

SecureLaravel::track([
    'ip' => request()->ip(),
    'user_agent' => request()->userAgent(),
]);

---

🧰 Helper Functions

Function	Description
secure_check()	Validates if the app is licensed
secure_fingerprint()	Returns system fingerprint
secure_encrypt($data)	Encrypts data with package key
secure_decrypt($data)	Decrypts data securely

---

🧩 Folder Structure

src/
 ├── Facades/
 ├── Http/
 ├── Services/
 ├── Traits/
 ├── Helpers/helpers.php
 └── SecurityServiceProvider.php

---

🔐 Example Middleware

You can use the provided middleware to protect routes:

Route::middleware(['secure.license'])->group(function () {
    Route::get('/dashboard', [DashboardController::class, 'index']);
});

---

‍💻 Author

Bilal Khilji 📧 kbinfo4u@gmail.com 🌍 GitHub: ibilalkhilji

---

📜 License

This package is open-sourced software licensed under the MIT license.

---

💡 Notes

If you’re building a SaaS or distributed Laravel product, this package is ideal for embedding robust licensing and usage validation directly into your codebase.

---

🧱 Version

v1.0.11