I don't think any of those walls help except for a WAF that knows what to look for. I don't know exactly what the real exploits look like but I heard something about constructing multipart form bodies that expand to a surprisingly large amount of PHP memory compared to the size of the request body, and that's probably something a heuristic on a WAF could detect. I would want to do more research before relying on that.