change attack to request method