@pmFromFile for blocked vars
Reindl Harald <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Organization | the lounge interactive design |
| Message-ID | <[email protected]> |
Hi
the rule below needs some love
no hit: ?base_dir=x&x=1
hit: ?base_dir=x
why in the world does that only hit if the url ends with a listed param
and is the some nicer way for "exact macth" than the ***var*** hack?
--------------------------------
SecRule ARGS_NAMES ^(.*)$
"id:'89',chain,setvar:tx.var='***%{matched_var}***',msg:'blocked
variable: %{matched_var}'"
SecRule TX:VAR "@pmFromFile 99_blocked_vars.data"
--------------------------------
99_blocked_vars.data:
***base_dir***
_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/