VERY interesting idea you have there, JP!
The rule would be similar to this, though this probably isn't 100%
correct. If someone hits addtocart.php 10 times in 60 seconds, a level
10 is triggered.
<rule id="1000000" level="10" frequency="10" timeframe="60">
<url>/addtocart.php</url>
<description>Shopping cart overload</description>
</rule>
--
HostGIS, Open Source solutions for the global GIS community
Greg Allensworth - SysAdmin, Programmer, GIS Person, Security
Network+ Server+ A+ Security+ Linux+
PHP PostgreSQL MySQL DHTML/JavaScript/AJAX
"No one cares if you can back up — only if you can recover."