Users Abusing my script

Anon

Any ideas on the best way to prevent users from running my php script too many times in a day/hour/minute/etc.

I'm just trying to prevent some users (presumably running bots) from abusing my site, while still letting others to use it fully.

I don't want to require cookies, or user log ins so I guess that leaves me with just using their IP.

I was hoping that there would be a package already available but I have yet to find anything.

Thanks in advance-

bretticus

Well, there could be a "package already available", but I don't know of one. Off the top of my head I might try using a db such as MySQL to keep a table of ip addresses and a update a counter column. But that could imply some strain on system resources. If you're using Apache (1.3), I've heard a 'lil bit about (never used) a mod:

http://www.snert.com/Software/Throttle/

Good luck

sarahk

Through the httpheaders you are able to identify some unique info, chuck it into a table with a date/timestamp and if they revisit within 2 minutes (say) then prevent processing.

Just did a quick search on "flood" at hotscripts and came up heaps of code which incorporate some sort of flood control including www.hotscripts.com/Detailed/9051.html. Have a look at some of them and see how their authors have tackled the problem.

-- if only you could send those bots my way 🙂

Anon

Another idea worth considering is to use GD to create a small graphic that will print out a random number. User must enter that random number into a form field before processing can take place.

This completely cuts robots out.

If interested, see an example here: http://sabyo.dyns.cx/ffa.php3?trust=1

Richie.
geocities.com/akindele/