我有一个 Plone 站点，Anonymous 可以在其中使用 invokeFactory（在特定文件夹中）。我害怕 DDoS 攻击。我能做些什么？
我有一个克隆站点，其中匿名用户为会议创建“订阅”对象。
事实是：恶意用户可以多次调用此屏幕并导致我的网站崩溃。我可以使用验证码来避免它，但我只想在同一用户尝试“x”次之后才使用它，就像用户尝试多次发帖时的 SO 方法一样。有没有一个模块可以为我做这个？在用户多次尝试同一网址后显示验证码？
I have a Plone Site where anonymous users create a "Subscription" object for a conference.
Fact is: a malicious user can call this screen a lot of times and crash my site. I can use a captcha to avoid it, but I would like to use it only after "x" attempts of the same user, something like the SO approach when a user tries to post a lot. Is there a module that does this for me? Show a recaptcha after a user tries the same url too many times?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
对于起始内容而言，并不是所有问题的解决方案。在您的情况下，使用自定义内容类型来处理订阅似乎有点矫枉过正。永远问问自己，你所做的事情是否真的很满足。它是否需要包含、可导航、可搜索，无论其他内容是什么？对于会议订阅来说绝对不是。
简而言之，您可以：
关于验证码，如果您采用手动方式并自己创建所有内容，则可以使用 cookie 来“记住”访问。请参阅如何在 Zope 中获取和设置 cookie和克隆人？
For a start content in not the solution to everything. In your case having a custom content type for handling subscriptions seems like an overkill. Always ask yourself if what you are doing is really content-ish. Does it need to be contained, navigable, searchable whatever else content can be? For a conference subscription definitely not.
In brief you could:
Concerning the captcha if you go the manual way and create everything yourself, you could use cookies to "remember" visits. See How do you get and set cookies in Zope and Plone?
很明显，您的系统会以各种方式受到大规模注册形式的操纵，而无需在提交注册表后采取进一步的措施，例如验证码或额外的电子邮件验证。但这与流量控制、DDOS 等无关。
It's obvious that your system is subject for manipulations in form of mass-registrations in every way without further measures like a captcha or additional email validation after submission of the registration form. But this is independent of flow control, DDOS etc.