Originally Posted by
s-p-n
How u gonna do that with a list of users and passwords? And what's stopping the hacker from hacking/brute-forcing the login-server in order to perform ddos on ur game?
If you get more than a maximum number of requests per second, ignore the requests from that IP long enough for the database to log the user out. If you want to forward the requests to a dumby server, then u don't have to rely on it to log ur users in.
If you want to implement your plan as-is, then go ahead. I only gave advice because you posted.