What is rate limiting and do I need it?

Rate limiting caps how many requests a single visitor or IP can make in a set period. It protects your site from being overwhelmed by abusive traffic, aggressive bots, brute-force attempts and scraping, while letting normal visitors through untouched.

On Dirham A Day, some rate limiting already works for you at the server level: the CSF firewall limits excessive connections, and LFD bans IPs that hammer logins. You generally do not need to configure this yourself.

You can add application-level rate limiting where it helps most:

• Login pages: limit attempts on wp-login.php with a security plugin to slow brute-force attacks.
• APIs and forms: throttle submissions to reduce spam and abuse.
• Behind Cloudflare: its rate-limiting rules can challenge or block IPs that exceed a threshold on chosen paths.

When to consider more:

• You are getting repeated spam form submissions.
• A bot is scraping your site heavily and using bandwidth.
• Your login page shows constant failed attempts.

If you want stronger server-level rate limits applied to your account, or help configuring Cloudflare rules, contact our 24/7 UAE team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae and describe the traffic you are seeing.