I have a lua script for upload verification.
I have false positives , in case if even upload script not exist at
EG. POST request to test.com/uploader.php ( uploader.php doesn't exists
). I thought that apache should return 404 error, but lua script starts
Here is phase2 in use:
SecRule FILES_TMPNAMES "@inspectFile
/root/hosting/apache/security/check.lua" "t:none,phase:2, log"
Could you advice something?