Re: [mod-security-users] Verifying credit cards

[Chris W. <c.d...@re...>]

Ofer discussed this very thing in the Modsecurity Blog

http://www.modsecurity.org/blog/archives/2008/01/detecting_credi.html

Chris

Matthew Tice wrote:
> Hello,
> 
> I'm trying to setup something to verify that credit card numbers are not
> returned (phase 4 I believe).
> 
> Easily enough I can setup a regex to verify - but that could lead to false
> positives.  I know that you can execute an external script when you get a
> match, but can you then get the results of that external script?
> I'd just like to run a Luhn check on the number, if it comes back positive
> then I'll react, otherwise I'll let it through.  Any help is appreciated.
> 
> Thanks,
> 
> Matt
> 
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users

-- 
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin,                           c.d...@re...
IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK              Fax: +44 (0)118 975 3094