


How do I create a new middleware in Laravel? (php artisan make:middleware)
Jun 18, 2025 am 12:16 AMRun the php artisan make:middleware command to quickly create middleware, used to process logic before or after request, such as permission verification, logging, etc.; 1. The functions of middleware include authentication, permission control, logging, and adding response headers; 2. After using the command to generate middleware, edit the handle method to implement pre-or-post logic; 3. Register middleware must be bound in the $routeMiddleware array of Kernel.php, and then called through the middleware method in the route; 4. Note that the middleware execution order is an onion model, avoid output content and dead loops, and the $next parameter cannot be omitted.
When you run php artisan make:middleware
command, Laravel will help you quickly create a middleware class. This middleware can be used to process logic before or after request, such as permission verification, logging, etc.
Here are a few key points and steps you need to know:
The role and applicable scenarios of middleware
Middleware plays an important role in the Laravel request lifecycle. It is located before the request enters the route or after the response returns to the browser, and is often used in the following situations:
- User authentication (such as login or not)
- Permission control (such as whether it is an administrator)
- Log access logs
- Add response header information
You can understand it as a "door guard" and do some inspections or pre-processing before release.
How to generate middleware using commands
Run the following Artisan command to create a middleware:
php artisan make:middleware CheckAdmin
This generates a file named CheckAdmin.php
in app/Http/Middleware/
directory. You can edit the logic in it.
The default generated middleware structure is as follows:
public function handle(Request $request, Closure $next) { // Write your pre-logical $response = $next($request); // Write your post-logical return $response here; }
-
$request
is the current HTTP request object. -
$next
is the closure that calls the next middleware or final controller. -
$response
is the response returned from the subsequent process.
How to register and use middleware
Generating middleware is only the first step, and it also needs to be registered to take effect.
The steps are as follows:
Bind middleware to kernel
Openapp/Http/Kernel.php
file and add a line to the$routeMiddleware
array:'admin' => \App\Http\Middleware\CheckAdmin::class,
Using middleware in routing
Add
->middleware('admin')
when defining the route:Route::get('/dashboard', function () { return view('dashboard'); })->middleware('admin');
Multiple middleware can also be used together
->middleware(['auth', 'admin'])
Some FAQs and Notes
- Middleware execution order : If you have multiple middleware, they will execute the pre-logic in order of registration, and then reverse the post-logic (similar to the onion model).
- Don't output content in middleware : unless you have special needs, it is recommended to only make logical judgments and not directly output HTML or JSON.
- Avoid dead loops : For example, jumping to the same route in middleware can easily lead to infinite redirection.
- The Closure parameter must be retained : even if you do not use it,
$next
parameter cannot be omitted, otherwise the request process will be interrupted.
Basically that's it. Creating middleware is not complicated by itself, but the combination and logical design between middleware will affect the structure and security of the entire project, so it should be planned and used reasonably.
The above is the detailed content of How do I create a new middleware in Laravel? (php artisan make:middleware). For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

Efficient methods for testing Laravel API interfaces include: 1) using Laravel's own testing framework and third-party tools such as Postman or Insomnia; 2) writing unit tests, functional tests and integration tests; 3) emulating a real request environment and managing database status. Through these steps, the stability and functional integrity of the API can be ensured.

Custom Laravel user authentication logic can be implemented through the following steps: 1. Add additional verification conditions when logging in, such as mailbox verification. 2. Create a custom Guard class and expand the authentication process. Custom authentication logic requires a deep understanding of Laravel's authentication system and pay attention to security, performance and maintenance.

The steps to create a package in Laravel include: 1) Understanding the advantages of packages, such as modularity and reuse; 2) following Laravel naming and structural specifications; 3) creating a service provider using artisan command; 4) publishing configuration files correctly; 5) managing version control and publishing to Packagist; 6) performing rigorous testing; 7) writing detailed documentation; 8) ensuring compatibility with different Laravel versions.

Integrating social media login in the Laravel framework can be achieved by using the LaravelSocialite package. 1. Install the Socialite package: use composerrequirelaravel/socialite. 2. Configure the service provider and alias: add relevant configuration in config/app.php. 3. Set API credentials: Configure social media API credentials in .env and config/services.php. 4. Write controller method: Add redirection and callback methods to handle social media login process. 5. Handle FAQs: Ensure user uniqueness, data synchronization, security and error handling. 6. Optimization practice:

Implementing password reset function in Laravel requires the following steps: 1. Configure the email service and set relevant parameters in the .env file; 2. Define password reset routes in routes/web.php; 3. Customize email templates; 4. Pay attention to email sending problems and the validity period of tokens, and adjust the configuration if necessary; 5. Consider security to prevent brute-force attacks; 6. After the password reset is successful, force the user to log out of other devices.

Common security threats in Laravel applications include SQL injection, cross-site scripting attacks (XSS), cross-site request forgery (CSRF), and file upload vulnerabilities. Protection measures include: 1. Use EloquentORM and QueryBuilder for parameterized queries to avoid SQL injection. 2. Verify and filter user input to ensure the security of output and prevent XSS attacks. 3. Set CSRF tokens in forms and AJAX requests to protect the application from CSRF attacks. 4. Strictly verify and process file uploads to ensure file security. 5. Regular code audits and security tests are carried out to discover and fix potential security vulnerabilities.

Middleware is a filtering mechanism in Laravel that is used to intercept and process HTTP requests. Use steps: 1. Create middleware: Use the command "phpartisanmake:middlewareCheckRole". 2. Define processing logic: Write specific logic in the generated file. 3. Register middleware: Add middleware in Kernel.php. 4. Use middleware: Apply middleware in routing definition.

Laravel's page caching strategy can significantly improve website performance. 1) Use cache helper functions to implement page caching, such as the Cache::remember method. 2) Select the appropriate cache backend, such as Redis. 3) Pay attention to data consistency issues, and you can use fine-grained caches or event listeners to clear the cache. 4) Further optimization is combined with routing cache, view cache and cache tags. By rationally applying these strategies, website performance can be effectively improved.
