IOSEC is a simple PHP script that can be added to any PHP project to provide a simple protection mechanism against users with a huge amount of HTTP requests/second.
When IOSEC detects a problematic user it blocks him from accessing the website and sends him a generic page where he's informed of the current active limitation.
If he's not a bot, the user can easily lift this limitation by filling in a reCAPTCHA field.
The limitations IOSEC dispatchs can be one-time, time-based or implicit. Implicit bans are recommended only when the webmaster is 100% sure about the source of flood or DoS attacks.
IOSEC also comes with a pretty comprehensive and large configuration file where various options can be tweaked to lower or improve the site's security level.
Features:
- Enable or disable reCAPTCHA field
- Customize limitation interval between HTTP requests
- Limit the connection count
- Block proxy servers
- Redirect infringing users users to specific pages
- Send email notifications
- Debug tool included
- Use whitelist or blacklist approach
- And more...
What is new in this release:
- Improved implicit deny for banned IP addresses (deny without detection).
- Minor performance tweaks.
Comments not found