Try for free
Try for free Log in

CloudFilt on PHP

Any PHP website, framework or not, plugs into CloudFilt with two snippets: one line of HTML for the front end, a few lines of PHP (native or cURL) for the back end.

Get the PHP code Create a free account

Free up to 3,000 requests per month and per site. No credit card required.

Server code FREE

In the box

1×
PHP server, allowed to make outbound HTTPS requests
1×
line of HTML, before </head>
1×
block of PHP, keys already filled in

Fitting instructions

4 steps, from sign-up to the first verdict.

  1. Create your free account and add your website

    CloudFilt gives you a public key and a private key, free up to 3,000 requests per month.

  2. Add the front end snippet

    Paste it before the </head> tag of every page.

  3. Add the back end code

    Paste it at the beginning of the PHP code of every page. The dashboard gives it with your keys already filled in.

  4. Watch the verdicts

    Allowed, challenged and blocked requests show up in your live journal within the minute.

    Allowed Challenge Blocked

How it works

With PHP, CloudFilt runs in two places. The front end snippet, one line of HTML in your pages, loads the CloudFilt script that spots automation in the browser. The back end code runs at the top of every page: it sends the IP, the URL and the user agent of the request to CloudFilt and applies the verdict before your page is built.

Real visitors go through, doubtful ones get a captcha, bad bots are blocked. The code of your dashboard already holds your keys: copy, paste, deploy. Your rules (countries, URLs, anti-flood thresholds) are then edited from the dashboard, without a new deployment.

What you get

  • Front and back end analysis
  • Code generated with your keys already filled in
  • Captcha for doubtful visitors, not a hard block
  • Search engine crawlers verified and let through

From request to verdict

Once PHP is plugged in, each request is scored from the front and the back end, then allowed, challenged or blocked.

  1. Visitor

    A browser, a script or a bot sends a request to your website or API.

  2. Nearest point of presence

    The CDN WAF, or your plugin, hands the request to the closest point of presence.

  3. Signals

    IP reputation, behaviour, rate, country and your own rules, weighed in real time.

  4. Verdict

    • Allowed to your site
    • Challenge captcha first
    • Blocked never reaches you

Other integration options

All integrations