[Optix]

Nope.

If the hacker have established a connection with your webserver, the bad is already made (a slot is opened), so PHP is useless and can't prevent these attacks.

You have to block attack at upstream.