[mod-security-users] Re: What best to do with php, xmlrpc, cvs, mambo, blog, drupal, wordpress injection attacks?

[John T. <gma...@jt...>]

Andras Got wrote:

> Just ban wget, fetch and other dl clients, suspicious name is URL-s and 

Apologies for my ignorance, but does this mean you add lines to the conf 
file as follows:

SecFilter wget
SecFilter fetch


> of course you should secure your PHP (safe_mode, disable_functions, 
> open_basedir).

Does this apply if I am the only console user on the box?  I read that 
safe mode breaks some apps and it is most commonly useful when the box 
is shared.

Also, if I may, what are the most dangerous functions you disable with 
disable_functions?