NYCPHP Meetup

[sbeam]

On Monday 24 November 2008 22:29, mikesz at qualityadvantages.com wrote:
> Any comments on possible ways to detect and/or redirect and/or prevent
> automated hacker tools like this from hijacking your site?

one option: assuming you have root and use Apache, you could setup 
mod_security
http://www.onlamp.com/pub/a/apache/2003/11/26/mod_security.html
http://www.modsecurity.org/projects/modsecurity/apache/index.html

and most competent shared hosts will have this installed already. It will 
block most automated and/or common attacks. As with any security measure, 
sometimes it can be a PITA due to false positives, and it is only one part of 
a good defense. But I wouldn't run any non-trusted PHP code on a public 
server without it, if your host doesn't use it get one who does.