title: Preventing mass form submits by $_SESSION
body: <p>If I'm getting bombed by a .NET program created in C# - bombed as in the user is submitting the $_POST fields on my form in mass quantities... It's specifically my contact form.</p>
  
  <p>I'm not sure how exactly the mass <code>$_POST</code> occurs in the .NET program or it even could be a c++ program, I have no idea. However I had an idea to counter this.</p>
  
  <p>My first idea requires <code>$_SESSION</code> but... Would those <code>$_POST</code> bombing program(s) the user created handle/accept a <code>$_SESSION</code>?  I really don't want to find out but maybe someone with experience with the WebClient class in C# would know if it handled <code>$_SESSION'S</code> or whatever it is the user is using.  I was considering using <code>$_SESSION['submitted'] = $count;</code> and another part of <code>$count++;</code></p>
  
  <pre><code>if($_SESSION['submitted'] &gt; 5) {
      //display captcha or block from site
  } else {
      $count++;
  }
  </code></pre>
  
  <p>If the user's program didn't handle a $_SESSION is there anyway possible I can disable the site to them? So they can't attack my contact form?</p>