[mod-security-users] Verifying credit cards

[Matthew T. <mj...@gm...>]

Hello,

I'm trying to setup something to verify that credit card numbers are not
returned (phase 4 I believe).

Easily enough I can setup a regex to verify - but that could lead to false
positives.  I know that you can execute an external script when you get a
match, but can you then get the results of that external script?
I'd just like to run a Luhn check on the number, if it comes back positive
then I'll react, otherwise I'll let it through.  Any help is appreciated.

Thanks,

Matt