basic-usage.php

<?php
declare(strict_types=1);

require_once __DIR__ . '/../PHPBotDetect.php';

// Optional: point to a writable directory for logs and cache (rDNS, behavior).
// If omitted, the system's temporary directory will be used.
PHPBotDetect::setBaseDirectory(__DIR__ . '/../storage');

// Basic usage: detect a bot in the current request.
if (PHPBotDetect::detect()) {
    http_response_code(403);
    echo 'Access denied.';
    exit;
}

// With logging of detected bots to a CSV file (disabled by default):
$isBot = PHPBotDetect::detect(logs: true);

// DNS verification and behavioral analysis disabled (e.g. under very high traffic):
$isBot = PHPBotDetect::detect(logs: true, checkDns: false, checkBehavior: false);

// Example form with a honeypot field:
?>
<form method="post">
    <input type="text" name="email" placeholder="Your email">

    <!-- Honeypot field: must remain empty and invisible to humans -->
    <input type="text"
           name="<?= PHPBotDetect::HONEYPOT_FIELD_NAME ?>"
           value=""
           autocomplete="off"
           tabindex="-1"
           style="position:absolute; left:-9999px;">

    <button type="submit">Submit</button>
</form>
<?php

// Checking the honeypot when processing the form:
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    if (PHPBotDetect::honeypotTriggered()) {
        // The field was filled in — almost certainly a bot. Silently reject the request.
        exit;
    }

    // ... further form processing
}