[mod-security-users] blocking php uploads

[Clayton D. <cla...@gm...>]

Folks,
    I'm new to this list and I'm researching mod_security.  So far it
seems like a very good tool.  At my company, we host shared SugarCRM
instances for our customers.  Thus, we would need to know if
mod_security can be configured so that it provides a strong level of
defense against common PHP, SQL-injection, and Apache attacks.  One
thing we want to do is to prevent anyone from uploading php files (or
any executable code for that matter).  Can mod_security do this?

Best regards,


Clayton Taylor Dillard

http://hspcd.blogspot.com/