Any suggestions on how to make it?
I've already a working script for uploading.

Example:

User uploads a file. --> Success
5 sec later: user uploads another file --> "Try again in 5 minutes"

cookies

I've been playing around with strtotime without luck

And if the user deletes the cookie? not a good option.

Log the IP of the user and put it in a database and create a function that checks if a file was uploaded by that IP.

I finally did this via mysql

thx for suggestions all

this is actually pretty close to what most websites use. the cookie stores an id which is a key to a session stored on the server. one of the fields for the session could be an expiration time.

This post was edited by irimi on Nov 28 2012 12:43am

Yeah... And that's how you can get session hijacked as well =/

This post was edited by StormHasHe on Nov 28 2012 07:29am

Only if your hash function is retarded and/or if you're communicating through a secure layer. Of course, if you're doing stuff in the clear without signature verification, it really doesn't matter anyway.

This post was edited by irimi on Nov 28 2012 01:13pm

1. Get current user IP
2. Get current time stamp when upload is pressed
3. Add both in database
4. When form is submitted again, check the user IP and Timestamp, compare that timestamp with the interval you wish
5. Clear and insert a new timestamp when form is succesfully submitted again