Fast Start: Adding BotVerify to Your ASP Project

BotVerify for ASP: Complete Guide to Integration and Setup

Overview

BotVerify is a bot-detection/check service (assumed API-based). This guide shows a practical, end-to-end integration into an ASP (classic ASP or ASP.NET?) web application. I will assume you mean ASP.NET (C#) MVC or Web Forms; if you need classic ASP, say so and I’ll provide that version.

Goals

• Add BotVerify client-side challenge to forms/pages
• Verify tokens server-side in ASP.NET
• Handle errors, retries, and logging
• Securely store and use API keys

Prerequisites

• ASP.NET project (MVC or Web Forms) using .NET Framework 4.7+ or .NET Core/6+
• HTTPS enabled for your site
• BotVerify site key (public) and secret key (private)
• NuGet access to add packages (if using HttpClient helpers)

1) Register and get keys

• Sign up for BotVerify and register your domain.
• Copy the Site Key (used in the browser) and Secret Key (used server-side). Store the secret in environment variables or app secrets (never in source code).

2) Client-side: include BotVerify widget

• Add the BotVerify script to pages that will present a challenge, typically in your form view or layout:

html
Copy CodeCopied
<script src=“https://cdn.botverify.example/widget.js” async defer></script>

• Render the widget on the form with your site key (example for Razor view):

html
Copy CodeCopied
<form method=“post” action=“/Account/Submit”>

  <div id=“botverify-container”></div>
  <input type=“hidden” id=“botverify-token” name=“botverifyToken” />
  <button type=“submit”>Submit</button>
</form>

<script>
  BotVerify.render(’#botverify-container’, {
    siteKey: ‘YOUR_SITE_KEY’,
    callback: function(token) {
      document.getElementById(‘botverify-token’).value = token;
    }
  });
</script>

• Behavior: the widget produces a short-lived token on success; the token is posted with the form.

3) Server-side: verify token in ASP.NET (C#)

• Use HttpClient to call BotVerify’s verification endpoint (example URL: https://api.botverify.example/verify).
• Verify on every action that accepts user input (login, register, contact forms).

Example helper class:

csharp
Copy CodeCopied
using System.Net.Http;
using System.Text.Json;
using System.Threading.Tasks;

public class BotVerifyService
{
    private readonly HttpClient _http;
    private readonly string _secretKey;

    public BotVerifyService(HttpClient http, string secretKey)
    {
        _http = http;
        _secretKey = secretKey;
    }

    public async Task<BotVerifyResult> VerifyAsync(string token, string remoteIp = null)
    {
        var req = new
        {
            secret = _secretKey,
            response = token,
            remoteip = remoteIp         };
        var resp = await http.PostAsJsonAsync(“https://api.botverify.example/verify”, req);
        resp.EnsureSuccessStatusCode();
        var json = await resp.Content.ReadAsStringAsync();
        return JsonSerializer.Deserialize<BotVerifyResult>(json, new JsonSerializerOptions { PropertyNameCaseInsensitive = true });
    }
}

public class BotVerifyResult
{
    public bool Success { get; set; }
    public double Score { get; set; }      // if BotVerify returns a score
    public string Action { get; set; }     // optional
    public string[] ErrorCodes { get; set; }
}

csharp
 ffON2NH02oMAcqyoh2UU MQCbz04ET5EljRmK3YpQ CPXAhl7VTkj2dHDyAYAf” data-copycode=“true” role=“button” aria-label=“Copy Code”>Copy CodeCopied
[HttpPost]
public async Task<IActionResult> Submit(MyFormModel model)
{
    var token = Request.Form[“botverifyToken”].ToString();
    var ip = HttpContext.Connection.RemoteIpAddress?.ToString();
    var result = await _botVerifyService.VerifyAsync(token, ip);

    if (!result.Success || result.Score < 0.5)
    {
        ModelState.AddModelError(””, “Bot verification failed.”);
        return View(model);
    }

    // proceed with normal processing
}