Script Flooded

[rod]

Edited by me

[AndrewT]

Flood with a photo gallery script?

Andrew told me that a gallery module I use in my phpnuke was used to flood, someone can tell me how to protect that script?

here is the file:
http://www.rosalab.net/index.zip

That is not what happened. Please re-read my replies to your ticket as well as your various forum posts. The script was flooded with requests from multiple IPs, essentially being DoS attacked. The script was not USED to flood.

[rod]

Sorry, im not an php or network expert.

The script is now disabled, but please someone tell me how to protect this for happening again.

[AndrewT]

There is no fix to preventing it from happening. DoS attacks of many kinds can happen regardless.

[rod]

but my site will be permantly suspended if happened again

[AndrewT]

I've split this into a seperate topic as it had nothing to do with the other one and have moved it to a more appropriate forum.

You cannot prevent DoS attacks from occuring. But if a domain is continually a target for DoS attacks then it needs to find a hosting service that specifically meets that need.

[-Oz-]

DOS happen mainly if you annoy someone, they're very targeted. So think about that?

[rod]

Well, I run a Music portal, or more like a music blog, I talk about music, tv, and movies, maybe a fan from a movie or group artist is mad? I dont think so really, but if a script kiddie could turn my account down, thats really bad.

Thats the first time this happened, that site has more than 4 years and 2 years on dathorn.

I have some questions:

What is considered in dathorn a denial of service attack?
I mean, numbers of requests per minute? how many?

If my site gets linked by slashdot o digg or boing boing or those massive sites, dathorn will consider that a DOS?

I dont mind that my site gets offline because of "slashdot effect", that happens really often when a site is slashdoted, and i understand that the best think to do by dathorn is put my site offline for a couple of hours, but not suspend my site for ever...
--
There are some scripts that prevent this? If some script, file or folder gets X hits in X seconds or minutes, disables or rename a file?

What should I look in a hosting that tell me that supports this kind of stuff or traffic?


I use the smile because for some reason sometimes moderators and other people really react in a bad way for simple questions, so be cool.

[AndrewT]

The domain has at least one hidden link in it that could be the result of the problem, I suggest removing these. You can re-open your ticket if you need specifics. DoS attacks happen for a reason, generally in retaliation to something else.

There is no magic defintion of what is a DoS attack and what isn't. A denial of service attack is just that - something that results in many requests creating poor performance or worse. As you've mentioned this can be inseperable from heavy floods of traffic from being slashdoted, etc. I wouldn't exactly call what happened a DoS attack, it's just the easiest way to explain it - it was basically just a mass flooding of GET requests to a specific PHP script from different sources.

No shared hosting provider in their right mind would have continued to leave the site online as it was with the activity that was occuring earlier today.