[mod-security-users] need help fighting spam from PHP scripts

[Justin G. <web...@sw...>]

hi,

I'm trying to see how mod_security can help me prevent POST to vulnerable scripts
I host on several servers. I've been hit 3 times in the last couple of days by a spammer
who found 3 different scripts, on 3 different servers and used them to send spam to AOL.

I'm trying to put some logic together and see how mod_security can help.
I believe a POST with a @ in it, and without referer is a start, but as we know referer
can be faked. It can be a start though, anyone can make such a rule?

Also, any ideas on this matter are welcome.

thanks,
	Justin