*Hey ,
I have finished developing my app
In my iphone apps I have a string (created by user)
And a button ,
When button is touched the php is activated with the user given string
How can I prevent from someone to run my PHP file directly a million times with diffrentes string each time ?
Is that possible ? How ?
This is importment because php file activating MySQL query insert command .
There are too many ways, but the simplest would be to increment a counter that you store in the session variable for each request and show a reject page when the counter hits a certain number.
This means, of course, that you’re trusting the client to use the same session id for each request. If you’re willing to do a bit more work, then make the app send in the device UUID with each request (and reject request that don’t include it), and base your counter on the UUID.