PHP : DOS attack possible