Block disposable emails in PHP

How it works

Send the user's email and IP to Fidro with Guzzle, or any PHP HTTP client. Fidro checks the address, the network and what it has already seen from them, then answers allow, challenge or block in a single JSON response. No SDK needed.

One fake signup can look perfectly normal. Five from the same IP in an hour don't. Send event and user_id with each call and Fidro remembers, so it catches the pattern as well as the person. You get a score from 0 to 100 and one answer: allow, challenge or block.

2. Check every signup

Send the email and IP to POST /api/validate. Fidro checks for disposable domains, missing mail servers, VPNs, proxies and Tor, and answers allow, challenge or block. Let the allows straight in, ask the challenges to confirm their email, and turn the blocks away.

<?php

require_once 'vendor/autoload.php';

use GuzzleHttp\Client;
use GuzzleHttp\Exception\RequestException;

$client = new Client(['timeout' => 5]);

try {
    $response = $client->post('https://fidro.io/api/validate', [
        'headers' => ['Authorization' => 'Bearer ' . getenv('FIDRO_API_KEY')],
        'json' => [
            'email' => 'test@example.com',
            'ip'    => '8.8.8.8',
            'event' => 'signup',
        ],
    ]);

    $result = json_decode($response->getBody(), true);

    echo 'Risk score: ' . $result['risk_score'] . PHP_EOL;          // 0 to 100
    echo 'Recommendation: ' . $result['recommendation'] . PHP_EOL;  // allow, challenge or block

    if ($result['recommendation'] === 'block') {
        // Refuse the signup
    }
} catch (RequestException $e) {
    echo 'Error: ' . $e->getMessage() . PHP_EOL;
}