如何解决Facade\Ignition\Http\Middleware\IgnitionEnabled？

Question

----------------------------------------------------------------------------------+
| Domain | Method   | URI                        | Name             | Action                                                                 | Middleware
                                                                                  |
+--------+----------+----------------------------+------------------+------------------------------------------------------------------------+--------------------------------------------------
----------------------------------------------------------------------------------+
|        | GET|HEAD | /                          |                  | Closure                                                                | web
                                                                                  |
|        | POST     | _ignition/execute-solution |                  | Facade\Ignition\Http\Controllers\ExecuteSolutionController             | Facade\Ignition\Http\Middleware\IgnitionEnabled,F
acade\Ignition\Http\Middleware\IgnitionConfigValueEnabled:enableRunnableSolutions |
|        | GET|HEAD | _ignition/health-check     |                  | Facade\Ignition\Http\Controllers\HealthCheckController                 | Facade\Ignition\Http\Middleware\IgnitionEnabled
                                                                                  |
|        | GET|HEAD | _ignition/scripts/{script} |                  | Facade\Ignition\Http\Controllers\ScriptController                      | Facade\Ignition\Http\Middleware\IgnitionEnabled
                                                                                  |
|        | POST     | _ignition/share-report     |                  | Facade\Ignition\Http\Controllers\ShareReportController                 | Facade\Ignition\Http\Middleware\IgnitionEnabled,F
acade\Ignition\Http\Middleware\IgnitionConfigValueEnabled:enableShareButton       |
|        | GET|HEAD | _ignition/styles/{style}   |                  | Facade\Ignition\Http\Controllers\StyleController                       | Facade\Ignition\Http\Middleware\IgnitionEnabled

Answer 1

这不是一个需要解决的问题，这些是Larave6的新调试包Facade/Ignition的路径

它们是必需的，以便Laravel可以在发生错误时向您显示错误

所以就忽略它们吧

但是，如果要删除这些路由(不推荐)，则可以从composer.json中删除此行

 "require-dev": {
        "facade/ignition": "^1.4", <--- Remove this one
        "fzaninotto/faker": "^1.4",
        "mockery/mockery": "^1.0",
        "nunomaduro/collision": "^3.0",
        "phpunit/phpunit": "^8.0"
    },

然后运行

composer update

但是，您将不会看到自定义错误页面，而是默认的PHP7错误表和堆栈跟踪。

您仍然可以通过安装旧的软件包filp/whoops来获取它

composer require filp/whoops

Answer 2

如果您生产服务器中有大量由随机攻击者发出的POST请求/_ignition/execute-solution，且您注意到对以下控制器和中间件的请求调用：

Controller  Facade\Ignition\Http\Controllers\ExecuteSolutionController
Middleware  Facade\Ignition\Http\Middleware\IgnitionEnabled, Facade\Ignition\Http\Middleware\IgnitionConfigValueEnabled:enableRunnableSolutions

您必须在.env文件中将APP_DEBUG设置为false，而不是删除Facade/Ignition包。

Answer 3

此问题的最新解决方案：

1. 更新facade/ignition

composer update facade/ignition

1. 如果您没有config/ignition.php，请运行：

php artisan vendor:publish --tag=ignition-config

1. 制作这个版本：

'enable_runnable_solutions' => false,