paraxial 1.2.0 → 1.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 51fd89540b5bb3bea0b1487cc67e255c6b8597f87215ff70256370a1499b78c9
-  data.tar.gz: 863d248900cb324777b4bfe11dc7bd0dfffd9bc4766642c2d63502b2804fbfe2
+  metadata.gz: baa2ee1790a37ff9ba35dabce992774e0a7d1090e6b5ffd9fb24fcc3eefd037c
+  data.tar.gz: 8d454295bf64117f57e9df2c90a3cb6e888b291f0d40d101b3b264c02cbc7b8e
 SHA512:
-  metadata.gz: 33df2b745e8cc43b41a4bb36cff045039fc8db0d807676d025d38553ecaf39a9f2fde3b26aafe11f12b9ddd1ff5560c18146b7d481a695c14184a6943bbf85cb
-  data.tar.gz: be45476d228f23b7dc49436a97802c284abcaa6561f76ab49b5bfa1a729ecdaefb3d8f84d043737920eb2b72411e40eb84e42eec8eba1e433a0b801dce7f7df9
+  metadata.gz: 8406bf6da59a65c52c31b5dd2fa7c967924a4f6de9a6a6b1695877a01643ebc8e08d79e7f6cf53f5a95bf5af495dac550fdefbf6d28f98957afb8b1a34c46cac
+  data.tar.gz: f5327f15ba804a0a50fa3575fee33dd6db99cb99c0e1ab58aa22cd5248e9d169d3fe5c8c66e991d5dec18ca66640b1697e7ef86622381fbe0201a6c672aa862b

data/lib/paraxial/initializers/startup.rb

@@ -7,7 +7,7 @@ require_relative '../free_tier'
 
 Bundler.setup
 
-unless Rails.env.test? || File.basename($0) == 'rake' || defined?(Rails::Generators)
+unless Rails.env.test? || File.basename($0) == 'rake' || Paraxial.do_not_start?
   Rails.application.config.to_prepare do
     puts "[Paraxial] v#{Paraxial::VERSION} Agent starting..."
     api_key = Paraxial::Helpers.get_api_key

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '1.2.0'
+  VERSION = '1.3.1'
 end

data/lib/paraxial.rb

@@ -21,17 +21,26 @@ module Paraxial
   class Error < StandardError; end
   # Your code goes here...
 
-  class Defense
-    def initialize(app)
+  class PHPAttackMiddleware
+    VALID_LENGTHS = [:hour, :day, :week, :infinity]
+
+    def initialize(app, length: :hour)
       @app = app
+      if VALID_LENGTHS.include?(length)
+        @ban_length = length
+      else
+        puts "[Paraxial] PHPAttackMiddleware invalid ban length: #{length}, using hour"
+        @ban_length = :hour
+      end
     end
 
     def call(env)
-      request_path = env['PATH_INFO']
+      request = ActionDispatch::Request.new(env)
 
-      if request_path.end_with?('.php')
+      if request.path.downcase.end_with?('.php')
+        Paraxial.ban_ip_msg(request.remote_ip, @ban_length, "Sent request ending in .php")
         # Return a 404 response if the request path ends with '.php'
-        [404, { 'Content-Type' => 'text/plain' }, ['Not Found from Paraxial.io']]
+        [404, { 'Content-Type' => 'text/plain' }, ['Not Found']]
       else
         # Pass the request to the next middleware or the application
         @app.call(env)
@@ -167,7 +176,7 @@ module Paraxial
 
   def self.check_exploit_guard
     if configuration.nil?
-      puts "[Paraxial] Exploit Guard, no configuration exists, will not run"
+      # puts "[Paraxial] Exploit Guard, no configuration exists, will not run"
       return
     end
 
@@ -190,4 +199,21 @@ module Paraxial
       @exploit_guard = nil
     end
   end
+
+  def self.do_not_start?
+    defined?(Rails::Command::CredentialsCommand) ||
+      defined?(Rails::Command::Db::System::ChangeCommand) ||
+      defined?(Rails::Command::DbConsoleCommand) ||
+      defined?(Rails::Command::DestroyCommand) ||
+      defined?(Rails::Command::DevCommand) ||
+      defined?(Rails::Command::EncryptedCommand) ||
+      defined?(Rails::Command::GenerateCommand) ||
+      defined?(Rails::Command::InitializersCommand) ||
+      defined?(Rails::Command::NotesCommand) ||
+      defined?(Rails::Command::RoutesCommand) ||
+      defined?(Rails::Command::RunnerCommand) ||
+      defined?(Rails::Command::SecretsCommand) ||
+      defined?(Rails::Command::AboutCommand) ||
+      defined?(Rails::Command::DbconsoleCommand)
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.3.1
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-11-07 00:00:00.000000000 Z
+date: 2024-11-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec
@@ -133,7 +133,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
+rubygems_version: 3.5.23
 signing_key:
 specification_version: 4
 summary: Paraxial.io Ruby Agent