ben syverson wrote:


On Feb 15, 2005, at 12:02 PM, Jonathan Vanasco wrote:

preemptive defense of potential SQL injection attacks


Check out mod_security <http://www.modsecurity.org> -- it has this built-in. (There's an intro here: <http://www.onlamp.com/pub/a/apache/2003/11/26/mod_security.html>, and the main guy is writing a book called "Apache Security" for O'Reilly, <http://www.apachesecurity.net/> which should be interesting.

'human only' readable gifs on forms to preemtively defent against bots without using some crazed throttling scheme


There may be a pre-made module out there, but your best bet is to use ImageMagick or gd to generate your own from perl. The more unique your images are, the better...

Although, you may want throttling implemented somewhere in your setup to prevent basic DoS attacks... Check out <http://www.snert.com/Software/mod_throttle/>.

- ben

FWIW, the technique of generating 'human only' images is called *[captcha* (an acronym for "/*c*/ompletely /*a*/utomated /*p*/ublic /*T*/uring test <http://en.wikipedia.org/wiki/Turing_test> to tell /*c*/omputers and /*h*/umans /*a*/part")]

http://en.wikipedia.org/wiki/Captcha

Search CPAN for captcha. There are a few modules that already do this sort of thing.



Arshavir




Reply via email to