 	 variable="exrslt"
 	 arguments = "-#numberOfRequests# #Application.requestlog#" />
 <cfset x=queryNew("ts,ip,rqst,usrname")>
+
+<cfset firstRequestLine=listgetat(exrslt,1,"#chr(10)#")>
+<cfset firstRequestTime=listgetat(firstRequestLine,1,"|")>
+<cfset firstRequestTime=ISOToDateTime("#firstRequestTime#")>
+
 <cfloop list="#exrslt#" delimiters="#chr(10)#" index="i">
 	<cfset t=listgetat(i,1,"|","yes")>
 	<cfset ipa=listgetat(i,5,"|","yes")>



<cfmail to="#application.logemail#" subject="click flood detection" from="clickflood@#Application.fromEmail#" type="html">
	<cfloop list="#maybeBad#" index="o" delimiters=",">
		<cfset thisIP=listgetat(o,1,"|")>
		<cfset cfcnt=listgetat(o,2,"|")>

				<br>thisTime: #thisTime#::::#rqst#::::::#usrname#
				---->
				<cfset ttl=DateDiff("s", lastTime, thisTime)>
				<cfif ttl lt timeBetweenQueries>
					<!----
					<br>triggered!
					---->
