On Feb 15, 2005, at 12:02 PM, Jonathan Vanasco wrote:

preemptive defense of potential SQL injection attacks

Check out mod_security <http://www.modsecurity.org> -- it has this built-in. (There's an intro here: <http://www.onlamp.com/pub/a/apache/2003/11/26/mod_security.html>, and the main guy is writing a book called "Apache Security" for O'Reilly, <http://www.apachesecurity.net/> which should be interesting.


'human only' readable gifs on forms to preemtively defent against bots without using some crazed throttling scheme

There may be a pre-made module out there, but your best bet is to use ImageMagick or gd to generate your own from perl. The more unique your images are, the better...


Although, you may want throttling implemented somewhere in your setup to prevent basic DoS attacks... Check out <http://www.snert.com/Software/mod_throttle/>.

- ben



Reply via email to