Re: PHP Denial of service

From: Date: Fri, 13 Oct 2006 23:16:21 +0000
Subject: Re: PHP Denial of service
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-243110@lists.php.net to get a copy of this message
On Fri, 2006-10-13 at 22:16 +0100, Ryan Barclay wrote: > A simple question I imagine, but I am wondering how I would combat DoS > attacks by users holding the REFRESH key on their browsers? > > I have reproduced this error on a PHP-MYSQL website and when I hold the > REFRESH key on for a while, page gen times shoot up dramatically and > hundreds of processes are created. > > Is there a way I can stop this/limit the connections/processes in apache > conf/php.ini? > > What can I do to combat this method of DoS? Check if the following is enabled in php.ini ignore_user_abort Or in the code via: ignore_user_abort() Cheers, Rob. -- .------------------------------------------------------------. | InterJinn Application Framework - http://www.interjinn.com | :------------------------------------------------------------: | An application and templating framework for PHP. Boasting | | a powerful, scalable system for accessing system services | | such as forms, properties, sessions, and caches. InterJinn | | also provides an extremely flexible architecture for | | creating re-usable components quickly and easily. | `------------------------------------------------------------'

« previous php.general (#243110) next »