Re: [mod-security-users] THE_REQUEST vs. REQUEST_URI vs. REQUEST_FILE

[Ryan B. <rcb...@gm...>]

On 8/5/05, Ivan Ristic <iv...@we...> wrote:
>   As an reminder, here's what these variables contain:
>=20
>   THE_REQUEST - GET /index.php?x=3Dy
>   REQUEST_URI /index.php?x=3Dy
>   REQUEST_FILENAME - /var/www/htdocs/index.php
>   SCRIPT_FILENAME - /var/www/htdocs/index.php
>=20

My understanding is that the THE_REQUEST directive also includes the
HTTP version data.  For example -

THE_REQUEST - GET /index.php?x=3Dy HTTP/1.1

This is what is documented in Mod_Rewrite for this variable.

--=20
Ryan C. Barnett
Web Application Security Consortium (WASC) Member
CIS Apache Benchmark Project Lead
SANS Instructor: Securing Apache
GCIA, GCFA, GCIH, GSNA, GCUX, GSEC