Catch double words in URL requests

In that case, you should just be able to parse the timestamp value out of the URI and check it against the session table. If it isn't there, then save it in the session table with your N second timeout. If it is there, then that timestamp was seen in the last N seconds, and you can take whatever action you want. Make sense?