Hello, I have recently learned about firewallscript and was wondering whether or not the DDOS/DOS protection allows spiders through and will ignore them.

This is important so that the site does get indexed..

Additionally I was wondering if it's possible to enable captcha only after a failed login on an application I build.

When using FirewallScript with .htaccess, do all of the features still work?

Thank you for your time,
Howard

.htaccess method or file editing method makes no difference in terms of how FWS works.

For the DOS, the short answer is yes. Basically, what I'd recommend is to execute a php plugin on failure. The plugin would be simple - copy the example, and in it confirm if the user is a spider or not (this is done via user-agent matching). If so, just let the spider through, otherwise do whatever you want to do (exit script execution, etc.)

For the captcha - sure, you'd just need to know what you need to check.

Thank you for the reply, I am coding with the cakePHP Framework, are you familiar with that and would you know if it has any issues with integration?

I'm vaguely familiar with it. There's no reason our software wouldn't work with it that I can imagine.