If a user has posted more than x times in y minutes, they should not be able to post again z minutes
If a user has commented more than x times in y minutes, they should not be able to comment again for z minutes
If a user has failed to login with the same account more than x times in y minutes, they should not be able to attempt again
If an IP address has failed to login with any account more than x times in y minutes, they should not be able to attempt again
If a user has posted more than x times in y minutes, they should not be able to post again z minutes If a user has commented more than x times in y minutes, they should not be able to comment again for z minutes If a user has failed to login with the same account more than x times in y minutes, they should not be able to attempt again If an IP address has failed to login with any account more than x times in y minutes, they should not be able to attempt again
*this needs to be thought out further