During the latest swiss  Usergroup-Day TYPO3, on January 24, 2009, I demonstrated how TYPO3 may be protected against Web attacks using Suhosin as a PHP module and ModSecurity2 for Apache.

Slides

•  Protecting TYPO3 with Suhosin and ModSecurity (1.8 MB)

Links

• Suhosin:  http://www.hardened-php.net/suhosin/
• ModSecurity:  http://www.modsecurity.org
  • Additional Rules:  http://www.gotroot.com/mod_security+rules
• WAF Project for TYPO3
  • Project on Forge:  http://forge.typo3.org/projects/show/extension-waf
  • Description:  http://docs.google.com/View?docid=dfmxfb6f_4gs6fm4
  • Rules for ModSecurity:  http://typo3.org/waf.txt
  • Newsgroup:  news://news.netfielders.de/typo3.projects.waf