Anyone ever tried 'FireWall Script'?
 

Title says it all.

If so is it worth paying $120 and did it help you out in any way?

Why would you pay for a firewall script, there are plenty of free ones on the web and most are easily configurable.

Because you pay for what you get (quality wise) and being secured is my number one priority. Plus this isn't just for vBulletin this is for any PHP script and it has a lot more configurations, whether they're "easily configurable" or not.

You're probably better off with an open-source system firewall and something like Suhosin/mod_security.

There is no reason to pay for a firewall script as both myself & dismounted pointed out, whether its for vb or for the server, there are plenty of good free firewall programs on the net to dl & configure yourself, just to name a few, apf or csf by configserver, as dismounted pointed out mod_sec, that can be a pain in the arse depending on who's version you run as there are a few out there, tracking down errors with it can sometimes be difficult as its not commented correctly depending on version & coder.

Hmm - I wouldn't use it. Security system have to be open, that one requires Ioncube in order to run so this makes another PHP extension, another additional thing that needs to be cared off.
Maybe invest the money in some books - Suhosin / mod_security are maybe better solutions because both do the analyzing, filtering on an earlier level before the PHP parser gets active. Just want to say it's maybe useless to prevent PHP scripts from doing something with another PHP script - that should be done before the script gets parsed and the code gets executed. :)

I don't say this software is useless, just that there're some other, more open solutions available that maybe fit better.

It has a nice interface, but is best suited for sites on shared hosting services. It protects at the domain/site level, by executing as a php script that is called via your existing php script or a htaccess file. As long as the respective shared hosting service adequately locked down the server you were using, this may be a worthwhile option.

However, if you run your own server (or VPS), this won't provide the protection you need.