hello there,
what im trying to do now is to setup cookies on visitor browser and to make the cookie hit counter, so if the visitor click 5 times in 1 minute to say -to many hits

im trying to make my own anti ddos ... hope someone can help me with. This is the last thing what i need to do ...

thank you all for the support

I believe your intent here is misguided. A DDOS attack can easily not store cookies -- you're relying on the end user to be trusted which is inherently what you can't do on a DDOS attack. You might try recording IP addresses on the backend and if there is an excessive number of hits from the IP, then flag that, but even then hackers can use 1000's of IPs to attack you via proxies, etc.

I believe there is server stuff that can be configured for this, but I don't know that realm of the web.

One additional alternative is to record all page hits and if the rate becomes higher than expected, reduce the number of allowed hits.

I think you need to set .htaccess file.
Look at this example.