Intrusion Detection System

[trialnick]

Quote:but not allowing members to perform some basic functionalites on the site.

injection scanner is fine, I used that too. If it doesn't allow some fuctions you can simply filtered them out. In the list of exploits , some codes are missing as the list is made in 2007.

I use googleseo, and unistalled injection scanner; so I modified htaccess file -putting there many exploit codes (so far I've  mainly for sql , xss and javascript inj.), I used bulletproof + my queries (like|rlike etc)

hope it helps