30 Jun 12:18
How to save value of a query string parameter then use it in Phase 4?
From: Stephen Craig Evans <stephencraig.evans <at> gmail.com>
Subject: How to save value of a query string parameter then use it in Phase 4?
Newsgroups: gmane.comp.apache.mod-security.user
Date: 2008-06-30 10:20:08 GMT
Subject: How to save value of a query string parameter then use it in Phase 4?
Newsgroups: gmane.comp.apache.mod-security.user
Date: 2008-06-30 10:20:08 GMT
Hi, This might be easy but it's not clear to me how to do this from reading the reference manual (especially 'setvar' and MATCHED_VAR) and going through all of the rules files that I have at my disposal. In Phase 2, I want to save the value of a get query string parameter, say "menu=700". So the rule might start off as: SecRule ARGS_GET:menu ... and somehow I need to set a variable with the value 700. Then in Phase 4 I want to access the value and invoke a rule if a match, otherwise bypass the rule SecRule ??? "!@eq 700" "t:none,pass,skip:2" SecRule RESPONSE_BODY "..." "phase:4:..." How can I do this? Any help is appreciated. Stephen ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php
RSS Feed