[yahsuah]

Originally Posted by Dave

That's not possible due to how PHP works.

Browser > HTTP(S) request to the server > PHP script executed > DB connection > complete PHP script result returned to browser.

Thank you for your explanation Dave. I don't have experience/knowledge about PHP.

I have been using this php script via include method in php: https://sourceforge.net/projects/iosec/

It is protecting us against DOS attacks. It is working in global.php (before all codes) It is checking/filtering the traffic before global.php codes.

I have been also using http://www.php-firewall.info via include method in php.

<?php

include('iosec.php'); //DOS FIREWALL

define('PHP_FIREWALL_REQUEST_URI', strip_tags( $_SERVER['REQUEST_URI'] ) );
define('PHP_FIREWALL_ACTIVATION', true );
if ( is_file( @dirname(__FILE__).'/xxxxxx/firewall.php' ) )
	include_once( @dirname(__FILE__).'/xxxxxx/firewall.php' );  //HACK FIREWALL

...

I wonder how I can add a prevention for non-js bot traffic.