[meow]

I agree with your first statement, about PHP not being the right place to mitigate ddos. But your second part "DDoS attacks should not be mitigated at the application layer." How do you mitigate an application layer DDoS attack without application layer protection?

1. This thread is old and the person you're replying to is banned
2. He was talking about transport layer DDoS attacks.