Your question doesn't really match the title.
If it's all through a local network, you can obviously easily lock it down there. However, with G3/G4 access, etc, or an external server, you are going to want to use mod_geoip and a recent database, or similar. It may make sense to lock down to the state level in this case.
reCAPTCHA will help with automated attacks, it may also make sense to use robots.txt to hide it from scrapers.
|