Phoca Forum

In the last two days one or two hackers have attacked my site, downloading over 4.000 times a file of mine, consuming all the available bandwidth.

In the .log file of my site I can read thousands of lines like that:

"45.155.205.206 - - [12/Aug/2021:10:59:14 +0200] "GET /en/component/phocadownload/category/1-programs.html?download=20%3Aps-never-sitout-2%27%20ORDER%20BY%202087%23 HTTP/1.1" 404 5781 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0""

I don't want people must create a user account to download files... is not possible simply to check a box o to write a short CAPTCHA text so to can download a file?

Hi, there is no such option yes. The usual protection is to make the files available after login or standard security filtering on server side (like used against DDOS attacks or against spammers)

Jan