attack...pinging...overload on database.. hunging & chocking

[marhoons]

hello dears,

my problem is someone or more than one; trying attack my website by opening my dynamic pages (working through database) more than 100 times per min and refreshing that pages during a day, that mean causing to consuming my limit queries on server & killing the database connection (chocking) & exceeding the bandwidth and causing the huge traffics.

 

from the statics my daily visitor average is 28000 Hits before but in last 4 days ago up to 48000 Hits that mean there is something up normal as I checked the logs on my root  I deduce that traffic comes from same destination with same URL (duplicated), that mean he is refreshing the page!.

 

i Modified my script by using cookies to close all connection if he refreshing the page in more than 5 times per min, but that isn't the finle suluation if he disable the cookies from his browsers my modifed isn't useful.

 

$_SESSION["str_attack"] = 1;

if (!$_COOKIE["timerv"])
{
setcookie("timerv","1");
}
else
{
$h= $_COOKIE["timerv"] +1;
setcookie("timerv",$h);
}

if ($current_time % 2 ==0)
{
if (isset($_SESSION["str_attack"]) && $_COOKIE["timerv"] > 5)
{
setcookie("timerv","");
print "<script>self.close();</script>";
exit();
}
} 

 

please.. advice me!

need your help brothers...