note 53523 deleted from function.sleep by danbrown
| From: | danbrown@php.net | Date: | Sat, 14 Mar 2009 14:38:26 +0000 |
| Subject: | note 53523 deleted from function.sleep by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-151879@lists.php.net to get a copy of this message | ||
Note Submitter: Breeze at Hotmail dot com
----
I would consider adding
a random sleep (2 to 5 sec),
before checking the login-information,
and an IP-based ban-list,
making multithreaded attacks useless,
to be a good protection.
"[...] Fill[ing] the wire with datagrams [...]" may slow down, but won't block your
server.
If a "very bad hacker" (tm) has the possibility to use hundreds of machines to attack your
server he will surely bring down your system insignificantly if you're using a sleep() or not.
mit freundlichen Grüßen, (german for "Yours sincerely" :)
Breeze
PS: I'm german, so don't be bothered by my english. :)