You should be running mod_security to protect apache, php and mysql from exploits.