Do you think Mod_Security is needed?

[raphael]

Quote: do not have a good understanding of mod_security as its pretty confusing to use

you must first understand how it operates and how to use it; just like any other tool being used on a server

Quote:but with those mentioned files chowned to root

you didn't chown anything

Quote:is there aything else i should worry about?

a thousand things

Quote:Mind you i have had clients php scripts exploited to mass email or spam via that script, so i assumed mod_security would stop this too??

see my first answer in this post (not thread)