Do you think Mod_Security is needed?

[robmorin]

I wanted to use it to protect my web server from php programmers that do not program properly, and leave open exploitable scripts....

I do not have a good understanding of mod_security as its pretty confusing to use... never mind create excludes!

but with those mentioned files chowned to root , is there aything else i should worry about? Mind you i have had clients php scripts exploited to mass email or spam via that script, so i assumed mod_security would stop this too??

Rob..

raphael Wrote:it all depends on what you use mod_security for. But remember it doesn't provide full protection (and it can, sometimes, be really bogus)