big wow - this worked great
&RequireCode("$vars_config{CGIPath}/ubb_lib_2.cgi");
&floodcheck;i just ran a webtrends report for last 6 hrs since i made this hack, and login url is no longer getting slammed! not even a blip on the chart after said fix, <50 in the time period. Where as it was avg'ing 100-300 hits per hour once i changed my password this morning's after hacker got me good.
so ok, rounding full circle with next question from my original issues. My list of hacks to re-apply after tonights 6.7 upgrade is nice and short. So I think I need one more little tweak - how do I make publicly displayed name a required field?