There is absolutely no way you can do better than google to prevent DoS attacks or any other concerted effort to hang your server. as it is now, the forum does not update in real time when user heavy. even if you ditch sql for flatfiles you will have this issue. why would you spend valuable time reinventing the wheel? i suggest stepping outside the technical aspects for just a sec and look at it from a practical view.