To avoid that a user can query my website (doing POSTs too fast) more than one query every 15 sec Any script doing that based on ip?
Record the time the user last POSTed in a session, then check against it to see if he is POSTing too soon?
Yea not bad, thanks Matthew but I guess some scripters could still automate the session handling (ex: using curl) and do lots of queries? Is it not better to only rely on server side countermeasures?
Well, i suppose a more complex way is to have a database table containing the time last posted, based on the user's ip address.
I created a 30 second post limit function using database, fairly easily. All it calls for is a simple table recording the user's id and the time of last post using DATETIME. Then, a check when posting that will add however long you want the user to wait between posts, and checking the current time to validate. Pre-made forums such as vBulletin and phpBB will be fun to modify. But, you should check the forum's website for an add-on like this.