Don’t you love the outrageous claims makers of security products proclaim?
Check out this one: Firewall Script
“Firewall Script offers unparalleled protection against web based attacks for any website supporting PHP.
Never before has this level of protection been available without costly routers or hardware.”
Yes, because we all know that routers, you know, the Layer 3 devices, block PHP, Layer 7, (Application Layer) attacks!
“100% protection guaranteed
When properly configured, FWS can block any attacks on your site, guaranteed.”
What is their great formula? Enumerating Badness.
Check out what Marcus Ranum has to say about why Enumerating Badness is a dumb idea.
Ok, I’m done ranting and raving…
Josh
Defensive Depth 