Add all files

extensions/Others/Security/Services/FraudDetectionService.php

@@ -0,0 +1,82 @@
+<?php
+
+namespace Paymenter\Extensions\Others\Security\Services;
+
+use App\Models\User;
+use Paymenter\Extensions\Others\Security\Models\SuspendedAccount;
+use Paymenter\Extensions\Others\Security\Models\LoginAttempt;
+use Illuminate\Support\Facades\Auth;
+
+class FraudDetectionService
+{
+    public static function checkAndSuspendForFraud(User $user): bool
+    {
+        $extension = app(\Paymenter\Extensions\Others\Security\Security::class);
+        $config = $extension->getConfig();
+        
+        $autoSuspend = false;
+        foreach ($config as $setting) {
+            if ($setting['name'] === 'auto_suspend_fraud') {
+                $autoSuspend = $setting['default'] ?? false;
+                break;
+            }
+        }
+
+        if (!$autoSuspend) {
+            return false;
+        }
+
+        $fraudScore = static::calculateFraudScore($user);
+        
+        if ($fraudScore >= 70) {
+            SuspendedAccount::suspendUser(
+                $user->id,
+                "Auto-suspended due to suspected fraudulent activity (Score: {$fraudScore})",
+                Auth::id() ?? 1,
+                false,
+                now()->addDays(7),
+                "Automated fraud detection triggered suspension"
+            );
+            
+            return true;
+        }
+
+        return false;
+    }
+
+    protected static function calculateFraudScore(User $user): int
+    {
+        $score = 0;
+
+        $recentFailedLogins = LoginAttempt::where('email', $user->email)
+            ->where('successful', false)
+            ->where('attempted_at', '>', now()->subDay())
+            ->count();
+
+        if ($recentFailedLogins > 10) $score += 30;
+        elseif ($recentFailedLogins > 5) $score += 15;
+
+        $recentIPs = LoginAttempt::where('email', $user->email)
+            ->where('attempted_at', '>', now()->subHours(2))
+            ->distinct('ip_address')
+            ->count();
+
+        if ($recentIPs > 3) $score += 25;
+        elseif ($recentIPs > 2) $score += 10;
+
+        $rapidLogins = LoginAttempt::where('email', $user->email)
+            ->where('attempted_at', '>', now()->subMinutes(10))
+            ->count();
+
+        if ($rapidLogins > 10) $score += 35;
+        elseif ($rapidLogins > 5) $score += 20;
+
+        return min($score, 100);
+    }
+
+    public static function shouldFlagForReview(User $user): bool
+    {
+        $fraudScore = static::calculateFraudScore($user);
+        return $fraudScore >= 40 && $fraudScore < 70;
+    }
+}