Quote:
Originally Posted by |Jordan|
This mod is great but i've been having some troublesome problems with it.
Bots are blocked from registering, but they keep trying to register non-stop (for several hours/days) and after awhile of this, my forum increases the server load (my previous web host already warned me about this).
It would be great if there was an option to automatically ban the user/bot after "x" amount of tries.
|
I would also like to see this solution. Adding their IP addresses to the ban list, or to .htaccess (better), would be ideal.
My forums were recently hammered with tens of thousands of requests such as:
Code:
121.230.23.25 - - [07/Jan/2009:08:16:20 -0500] "POST /forums/ajax.php?do=imagereg&imagehash=null HTTP/1.1" 200 145 "http://www.pipcop.com/forums/register.php?do=signup" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
121.230.23.25 - - [07/Jan/2009:08:16:21 -0500] "POST /forums/ajax.php?do=imagereg&imagehash=null HTTP/1.1" 200 145 "http://www.pipcop.com/forums/register.php?do=signup" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
121.230.23.25 - - [07/Jan/2009:08:16:21 -0500] "POST /forums/ajax.php?do=imagereg&imagehash=null HTTP/1.1" 200 145 "http://www.pipcop.com/forums/register.php?do=signup" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)"
It seems like it would be trivial to block anyone who hits the ajax page more than 10 times in a minute... right?