you could just use modsecurity locally on whatever's between the internet and your web application if you insist something external like cloudflare is out of yo

you could just use modsecurity locally on whatever's between the internet and your web application if you insist something external like cloudflare is out of your control https://github.com/SpiderLabs/ModSecurity https://github.com/SpiderLabs/ModSecurity but bogging this up at application level is not going to work in anyone's favour