<?php namespace App\Http\Middleware; use Closure; class ActivatedAccount { /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { if (guest() || !user()->confirmed) { abort(403, "Only users with active accounts can do this."); } return $next($request); } }