I have a system setup on my server where users who consistently refresh the page at a ridiculously high rate are redirected to a special page where they have to wait a certain amount of time or to enter a special code to continue.
As I was using powermapper to test the normal site for compliance in other factors, the testing utility apparently got filtered out and it ended up testing my flagging page instead. One thing it reported to me is this:
I just think its nonsense to enable a separate privacy page to the screens that potential hackers and high-speed bots can see. Currently I have it set so the page only appears to anything that makes over 15 requests within a one-second time frame to a domain where the normal requests per second is roughly 4.