[
Home
/
Overboard
/
Stats
]
[
g
]
[
calm
/
brabant
/
drenthe
/
q
/
qa
/
zellig
]
[
booru
/
wiki
]
[
v
]
[
Rules
/
Contacts
]
[
Search
]
🔍
[
Register
/
Settings
/
Log in
]
Markup /qa/13215
Comment
Also it's weird that they try to get into physical servers while being unable to set up simple rate limiting, in PHP it's just 7 lines, but it can (and should) be done on the server level, ideally also using fail2ban. Or just set up cuckflare properly, don't leak the server address, and use turnstile captcha. ```php $limit = 30; $window = 60; $key = "rate_limiting_" . $_SERVER['REMOTE_ADDR']; $requests = apcu_inc("$key", 1, $success, $window); if (!$success || $requests > $limit) { http_response_code(429); exit(); } ```