php - How to limit a form submission rate per user -
i trying limit form's
submission rate 1 per user per 120 seconds.
i thinking using $_session
variable, i'm not sure how work, , cookies can deleted. guess $_session
variable worked around intuitive user logging out
, in.
i'm theorizing @ moment not have code.
how around problem?
edit --
the reason user querying because item , bestiary database. need slow down user queries acceptable rate because going on rate of 10 queries/minute or else application may "banned" or denied hour.
$_session
, $_cookie
variables removed user, , therefore abused them. need store submits somewhere on server. perhaps mysql. check before processing form.
something like
select count(*) attempts, max(submit_time) last form_submits user_id = ? , submit_time > - interval 2 minute
then
if ($row['attempts'] > 0) { echo "you must wait " . (time() - strtotime($row['last'])) . " seconds before can submit form again."; return; }
Comments
Post a Comment