[VIDEO TUT]How to install Mod_Security and Harden PHP

[Dom]

[youtube]KSiJecznzvo[/youtube]



Commands I mentioned in the Video :

wget -O /usr/local/apache/conf/modsec_rules.tgz \
 http://www.uhgbug.com/files/modsec_rules.tgz;
tar xvfz /usr/local/apache/conf/modsec_rules.tgz --directory \
/usr/local/apache/conf/
/usr/local/apache/bin/httpd -k graceful

disable_functions  = "php_uname,delete,system,etmyuid,getmypid,passthru,leak,listen,diskfreespace,tmpfile,link,ignore_user_abord,shell_exec,dl,set_time_limit,exec,system,highlight_file,source,show_source,fpaththru,virtual,posix_ctermid,posix_getcwd,symlink,popen,system,escapeshellarg,escapeshellcmd,myshellexec,c99_buff_prepare,c99_sess_put,fpassthru,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,proc_open,proc_close,proc_get_status,proc_nice,proc_terminate,phpinfo "

Dont mind my voice just had a couple of beers

 

[Veer]

Nice tut bro.

 

[CyberAff]

awesome tut mate

 

[leonight]

thanks for the tut Domenic

 

[Dom]

No Problems , Its my pleasure helping you guys

 

[crofty]

Thanks for the tut man, really helpful

 

[QuickSand]

nice one brah

edit:i wonder who neg repped me for this

 

[XForce!]

Nice one Simply awesome...

 

[Dom]

Thanks Guys

 

[eLight]

Excellent stuff

 

[Daniel]

Wonderful, this gives you great respect.

I think it's very impressive. Thank you for an amazing helpful guide.

Do not hesitate to come up with more :P

Thanks

 

[Dom]

Thanks MrSandvik

 

[feronso]

Hi Domenic,

I have installed Mod_security, now please tell me what i do next ?

thanks

 

[DaringHost]

If you're trying to follow the tutorial, after you installed mod_security then run these commands in SSH:

wget -O /usr/local/apache/conf/modsec_rules.tgz \
 http://www.uhgbug.com/files/modsec_rules.tgz;
tar xvfz /usr/local/apache/conf/modsec_rules.tgz --directory \
/usr/local/apache/conf/
/usr/local/apache/bin/httpd -k graceful

 

[wee111]

thank you,Domenic