it is a good idea, but normally you must rely on the provider to protect you against DOS.

There is a famous apache module mod_evasive that do this job at the wire level.
Doing this in PHP is an option if the provider do not use mod_evasive or a hardware protection, otherwise it is not the php module or the php fastcgi server that will die, but more apache itself first ;-)

The webhotel I am using went crazy after I tested this mambot. I did as the prior writer said... Hit a high use page several times in a row. The problem was that I didnīt notice anything but the webhotel I am using did. They got some junk (.time file and my ipnumber) in their flood folder. Their system warned and they contacted me wondering what the heck I was doing with their server... :(

Anyone know how to reconfig this mambot so it use another folder instead? Like wwwroot/mysite/flood for example..
Would be a great feature for all of us who donīt run our own server.

I realy want this mambot but my webhotel didnīt like the result of it... And I would be better off with my own log I think. I donīt know if itīs of any importance but my Joomla site is running on IIS. Works great though and this mambot aswell.. Obvious. ;)

I've installed this mambot and the other security tool request filter on a couple of sites that were recently flood attacked and so far so good.

On one site where it's installed I can see it working straight away - comes up with Flood detect! if I try hit a high use page too many times in a row..

Will post further results after further testing