title: Methods to prevent brute force & DoS attacks- PHP & Apache
body: <p>Solutions to preventing DoS and brute force attacks on the server and application level are innumerable-not to mention a little confusing. I am taking my first few steps to hardening a few of my php applications, and would like to know the best practices for preventing brute force/dictionary attacks on user forms, for example, keeping in mind that I already use captcha:) </p>
  
  <p>And what is the best practice for server level prevention of DoS attacks?</p>
  
  <p>Experimental implementations are welcome for discussion</p>
  
  <p>My environment is:</p>
  
  <ul>
  <li>php 5.2 </li>
  <li>apache 2x</li>
  <li>Custom Framework</li>
  </ul>
  
  <p>Note: Memcached is due for implementation, and Floodcontrol is one method I have yet to fiddle around with --- any elaboration on this is welcome, too. </p>