Re: captcha and blacklist

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



So you want a blacklist that bans IPs for some amount of time, and that's capable of sharing the blacklist between multiple HTTP servers...

Seems to me that you need some sort of central or shared database...I'm not quite sure why SQL wouldn't be an option, but it seems to me that it should be. You could also use something like memcache on one of the servers to store blocked IPs. It would likely be somewhat faster than SQL, and is simpler as well. Memcache has a built-in timeout mechanism that could work rather well for that sort of thing as well.

If you need to block IPs without using a PHP solution, you could hack something together with your platform's native firewall utility (e.g. iptables/netfilter for Linux). It seems to me that DNS would be even more of a kludge.

I believe that memcache or SQL would be a significantly cleaner solution.

jon

nicolas figaro wrote:
Hi,

I'd like to set a captcha on my web server(s).

The code works quite fine, but I'd like to blacklist (for an amount of time) the ips that failed
with the captcha x times.

The web server works with an SQL server, but I cannot ask the page to check for each IP
with a request to the database.

I can't also store the blocked IP to a filename on the server, because the site is served by several
http servers.

I thought about a DNS server for the blacklist (the same way it works for antispam), but
perhaps someone has a better idea ?

thanks

N F


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux