Variable name for "data"

homesh joshi <[email protected]> Tue, 31 May 2022 17:35:56 +0530
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <CAAjxK7um0K1U5vbLLvKygEO58QJuJhDkpXUwO-ZiqXCiudJm3A@mail.gmail.com>
Hi All,

Please refer to the following from modsec logs in json format.

[file \"/usr/share/modsec/rules/10_gen_rules.conf\"] [line \"283\"] [id
\"11\"] [rev \"43\"] [msg \"SQL Injection\"] [data \"or 2=2\"] [severity
\"CRITICAL\"]

I am able to get the values of msg, id &  severity variables(using rule.msg,
rule.id,rule.severity) but I can't find the variable name for data ([data
\"or 2=2\"])

I have searched on google as well as on modsec handbook pdf but can't find
the name.

Can someone share some info on this please.

Thanks,
Homesh

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/