note 53523 deleted from function.sleep by danbrown

From: Date: Sat, 14 Mar 2009 14:38:26 +0000
Subject: note 53523 deleted from function.sleep by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-151879@lists.php.net to get a copy of this message
Note Submitter: Breeze at Hotmail dot com ---- I would consider adding a random sleep (2 to 5 sec), before checking the login-information, and an IP-based ban-list, making multithreaded attacks useless, to be a good protection. "[...] Fill[ing] the wire with datagrams [...]" may slow down, but won't block your server. If a "very bad hacker" (tm) has the possibility to use hundreds of machines to attack your server he will surely bring down your system insignificantly if you're using a sleep() or not. mit freundlichen Grüßen, (german for "Yours sincerely" :) Breeze PS: I'm german, so don't be bothered by my english. :)

« previous php.notes (#151879) next »