if (!isset($_SERVER["HTTP_REFERER"]) || strpos($_SERVER["HTTP_REFERER"], $_SERVER["HTTP_HOST"]) === false) { header("HTTP/1.1 403 Forbidden"); exit(json_encode(["error" => "Bot access denied"])); }