Oh yeah.
I have passed the big 10 and edited my sig.
groovy baby.
A 6 minute cool off seems to be in force, I logged in and that counts as a post.
I assume, the board is being pounded by bots.
The 6 minute cool off should only be enforced if a bot type action is detected.
e.g. 3 strikes and you get a 6 minute cool off put on you.
Keep it up and a ban on your IP will be implemented.
A strike is defined as hitting the same URL 3 or 4 times a second.
Something no normal human would do.
3 strikes in 5 seconds, bye bye.
They will need to write a small php function and make another table for SQLi.
If I am missing any scenarios, put them forward.