Hi,
While this would stop some brute force attackers, it won't prevent them all. A lot of times an attacker will use a parser and not just rely on the status code the server provides. It will stop a lot of attackers, I do give you credit for that, but parser based sniffers won't be fooled.
Either way, this is a good and inexpensive solution to at least cut down on brute force, not eliminate it but to at least cut back on server hits.
WG
__________________
I play with Google.
|