SafeGuard

Account Protection hardens Paymenter against automated signups, abusive logins, and malicious actors. It adds registration validation, IP intelligence, account suspension workflows, audit tooling, webhooks, and CLI recovery utilities without modifying Paymenter core.

Feature HighlightsCopy Anchor Link

• Name, email & password validation – blocks registrations with gibberish names, disposable domains, and weak passwords that fail configurable requirements.
• Login Fail2Ban – configurable strike thresholds that temporarily ban abusive IPs or fingerprints, complete with admin telemetry and whitelist bypasses.
• Disposable email blocklist – merge your own deny-list with the open-source disposable database, auto-sync it on a schedule, and manage entries inside the admin panel.
• Dynamic suspensions – temporary or permanent account bans with automated logout, optional IP blocking, and audit history.
• IP reputation cache – stores API responses and local findings to avoid repeated lookups and speed up requests.
• Admin tooling – dedicated Filament pages for suspensions, IP bans, account/IP/email whitelists & blocklists, and historical IP log review.
• CLI recovery – artisan commands to manage whitelists, bans, logs, and the disposable email sync even if the UI is inaccessible.
• Webhook alerts – send Discord-style notifications for key security events.

---