title: Safety from ajax bomb
body: <p>There are some servlets which I call from ajax to check user availability and some other work. An ajax request can be send only if user is login. </p>
  
  <p>But the problem is, user can hit server through ajax call mass number of times in a second using javascript injections. It can make server down.</p>
  
  <p>There is one possibility to control it;</p>
  
  <ol>
  <li>If number of hits from same IP in a
  second(or some period) crosses the
  maximum limit then I can invalidate
  the session.</li>
  </ol>
  
  <p>But some of my colleagues are not in favor of limiting the user. Is there any other way to safe my server from ajax bomb.</p>