Take a look at the modsec-clamscan.pl script in the modsecurity util directory. You can invoke the script with something like:

SecRule FILES_TMPNAMES "@inspectFile /opt/modsecurity/bin/modsec-clamscan.pl" \
    phase:2,t:none,log,block

- J

On Tue, Feb 23, 2010 at 5:58 AM, beshoo <beshoo@gmail.com> wrote:
Dear user , i need to scan any POSTED data with clamAV ,
 eg :
User open Cpanel ,

Create a New File in Cpanel

Edit the file with Cpanel Editor

Copy and paste , the Code as PhpShell code .

Save the file .. :)

i need to scan the POST data with ClamAV .

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Appliances, Rule Sets and Support:
http://www.modsecurity.org/breach/index.html