<?php 
/////////////////////////////////////////////////////
// sample API code for use with the BotScout.com API
// code by MrMike / version 2.0 / LDM 2-2009 
/////////////////////////////////////////////////////

/////////////////// START CONFIGURATION ////////////////////////
// use diagnostic output? ('1' to use, '0' to suppress)
// (normally set to '0')
$diag = '0';
////////////////////////
// init vars
$diag='';
$returned_data='';
$botdata='';
$APIKEY='';
$USEXML='';
$XMAIL='';
$XIP='';
$multi_test='';
$ch='';
$botdata='';
////////////////////////
// your optional API key (don't have one? get one here: http://botscout.com/
$APIKEY = '';
////////////////////////
// use XML output responses?
// '1' to use XML, '0' to use standard responses
$USEXML = '0';
/////////////////// END CONFIGURATION ////////////////////////


////////////////////////
// test values 
// an email value...a bot, perhaps?
// these would normally come from your 
// web form or registration form code 
$XMAIL = 'werasomax@mail.ru';

// an IP address
$XIP = '66.226.194.174';

// a name, maybe a bot?
$XNAME = 'erarmazepay';

////////////////////////

// sample query strings - you'd dynamically construct this 
// string and use it as in the example below - these examples use the optional API 'key' field 
// for more information on using the API key, please visit http://botscout.com

// in most cases the BEST test is to use the "MULTI" query and test for the IP and email
//$multi_test = "http://botscout.com/test/?multi&mail=$XMAIL&ip=$XIP&key=$APIKEY";

/* you can use these but they're much less efficient and (possibly) not as reliable
$test_string = "http://botscout.com/test/?mail=$XMAIL&key=$APIKEY";	// test email - reliable
$test_string = "http://botscout.com/test/?ip=$XIP&key=$APIKEY";		// test IP - reliable
$test_string = "http://botscout.com/test/?name=$XNAME&key=$APIKEY";	// test name (unreliable!)
$test_string = "http://botscout.com/test/?all=$XNAME&key=$APIKEY";	// test all (see docs)
*/

// make the url compliant with urlencode()
$XMAIL = urlencode($XMAIL);

// for this example we'll use the MULTI test 
$test_string = "http://botscout.com/test/?multi&mail=$XMAIL&ip=$XIP";

// are using an API key? If so, append it.
if($APIKEY != ''){
	$test_string = "$test_string&key=$APIKEY";
}

// are using XML responses? If so, append the XML format key.
if($USEXML == '1'){
	$test_string = "$test_string&format=xml";
}

////////////////////////
if($diag=='1'){print "Test String: $test_string";}
////////////////////////


////////////////////////
// use file_get_contents() or cURL? 
// we'll user file_get_contents() unless it's not available 

if(function_exists('file_get_contents')){
	// Use file_get_contents
	$returned_data = file_get_contents($test_string);
}else{
	$ch = curl_init($test_string);
	curl_setopt($ch, CURLOPT_HEADER, 0);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	$returned_data = curl_exec($ch);
	curl_close($ch);
}

// diagnostic output 
if($diag=='1'){
	print "RETURNED DATA: $returned_data";
	// sanity check 
	if($returned_data==''){ print 'Error: No return data from API query.'; exit; } 
} 


// take the returned value and parse it (standard API, not XML)
$botdata = explode('|', $returned_data); 

// sample 'MULTI' return string 
// Y|MULTI|IP|4|MAIL|26|NAME|30

// $botdata[0] - 'Y' if found in database, 'N' if not found, '!' if an error occurred 
// $botdata[1] - type of test (will be 'MAIL', 'IP', 'NAME', or 'MULTI') 
// $botdata[2] - descriptor field for item (IP)
// $botdata[3] - how many times the IP was found in the database 
// $botdata[4] - descriptor field for item (MAIL)
// $botdata[5] - how many times the EMAIL was found in the database 
// $botdata[6] - descriptor field for item (NAME)
// $botdata[7] - how many times the NAME was found in the database 


if(substr($returned_data, 0,1) == '!'){
	// if the first character is an exclamation mark, an error has occurred  
	print "Error: $returned_data";
	exit;
}


// this example tests the email address and IP to see if either of them appear 
// in the database at all. Either one is a fairly good indicator of bot identity. 
if($botdata[3] > 0 || $botdata[5] > 0){ 
	print $returned_data; 

	if($diag=='1'){ 
		print "Bot signature found."; 
		print "Type of test was: $botdata[1]"; 
		print "The {$botdata[2]} was found {$botdata[3]} times, the {$botdata[4]} was found {$botdata[5]} times"; 
	} 

	// your 'rejection' code would go here.... 
	// for example, print a fake error message and exit the process. 
	$errnum = round(rand(1100, 25000));
	print "Confabulation Error #$errnum, Halting.";
	exit;

}
////////////////////////


?> 

<%

'#####################################################
'##  ASP API code for use with the BotScout.com API ##
'##  version 1.0 asp code by Podge                  ##
'#####################################################
'Get the most recent version here
'http://sites.google.com/site/hypodof/botscout
######################################################

function botCheck(ipAddress, emailAddress, Username)
  botCheck = 0
  strBotScoutAPIKey = "YOUR API KEY" ' (register at botscout.com to get your key)
  Dim objXMLHTTP, xml
  Dim apiKey
  Dim responseArray
  Dim ipResponse, usernameResponse, emailResponse

  Set xml = Server.CreateObject("Microsoft.XMLHTTP")
  ' Set xml = Server.CreateObject("MSXML2.ServerXMLHTTP")

    xml.Open "GET", "http://botscout.com/test/?multi&name=" & Username & "&mail=" & emailAddress & "&ip=" & ipAddress & "&key=" & strBotScoutAPIKey, False
    xml.Send
    
    responseArray = Split(xml.responseText, "|")
    
    ipResponse = responseArray(3)
    usernameResponse = responseArray(5)  
    emailResponse = responseArray(7)
    
    botCheck = CLng(ipResponse) + CLng(usernameResponse) + CLng(emailResponse)

  Set xml = Nothing
end function

%>