note 92179 added to function.sleep

for marpetr at gmail dot com, about brute force: sleep() won't prevent or hinder brute force attacks on logins, unless you also serialize the login procedude e.g. the attacker starts 1000 login requests simultaneously, your script delay by 1 second each request; the result is that the 1000-login batch gets delayed by only 1 second (not 1000 seconds) bear in mind that php web request are parallel - you have to somehow limit one login request at a time (maybe per username?) until the last one succeded or failed ---- Server IP: 213.92.11.19 Probable Submitter: 94.86.136.58 ---- Manual Page -- http://www.php.net/manual/en/function.sleep.php Edit -- https://master.php.net/note/edit/92179 Del: integrated -- https://master.php.net/note/delete/92179/integrated Del: useless -- https://master.php.net/note/delete/92179/useless Del: bad code -- https://master.php.net/note/delete/92179/bad+code Del: spam -- https://master.php.net/note/delete/92179/spam Del: non-english -- https://master.php.net/note/delete/92179/non-english Del: in docs -- https://master.php.net/note/delete/92179/in+docs Del: other reasons-- https://master.php.net/note/delete/92179 Reject -- https://master.php.net/note/reject/92179 Search -- https://master.php.net/manage/user-notes.php