I have a typical search form as one of the main functions. As it is a public one, I am scared of getting DDOS attacked.
The only way I think of to avoid it is to:
I will use a
method="post"
form
withtoken
on it.When the user/attacker submit the
form
.I will check if the button is clicked and if the
token
is correct.If both true, I will reload the page along with the search value. ex
www.url.com/?q=search_value
Will this prevent the DDOS attack?