Prevent multiple posting.

function-antiMultiPosting.php

/**
 * Prevent multiple posting.
 *
 * @return bool
 */
public function antiMultiPosting() {
	/**
	 * @var $user User
	 */
	$user = auth()->user();
	
	// permission error
	if (! $user)
		return false;

	// anti multi-posting token
	$token = strtolower('_last_creation_'. $user->username);

	// if token isn't set, ensure $allow will always be true
	$last = session()->get($token, -1);
	$time = microtime(true);

	// calculate difference
	$allow = (($time - $last) > 10);

	// check if we're multi-posting
	if (! $allow) {
		$log = [];
		$log[] = $user->id;
		$log[] = $user->username;
		$log[] = '('. ($time - $last) .' seconds between attempts)';

		logger()->warning('[Anti Multi-Posting] '. implode(', ', $log));

		return false;
	}

	// update anti multi-posting token
	// use actual microtime here, not the already older $time variable
	session()->put($token, microtime(true));

	return true;
}