On Thu, Feb 19, 2009 at 8:57 AM, Jamie Holly <hovercrafter@earthlink.net> wrote:

M. Fioretti wrote:

No, as I already said several times in this thread. More exactly: I do
control the one where I'd need this first, but not others on which
I'll have to work soon, that's why I'm looking for one solution which
doesn't rely on access to server. So, this wouldn't work, would it:


If you are doing this for other sites, then I can only assume it's because they are asking you to (if not then that opens up a whole new debate on ethics).


Indeed. In fact, the whole conversation has inspired me to write a module that blocks flooding by tracking form tokens instead of hosts. I get that (attempted DOS via automated comment submissions) periodically.