Re: [mod-security-users] Macro documentation?

[Brian R. <Bri...@br...>]

I made note of lacking a section on this in the manual.  What "macro
expansion" is is just replacing a placeholder (macro) with a value at
runtime.  This can only be used in places where the macro would be
evaluated at runtime (ie not in a @rx or @pm or similar operator that is
"pre-compiled" on startup.)

The format is:

%{VARNAME}

or

%{COLLECTION.VARNAME}


EX:  Deny if IP parameter and client IP do not match

SecRule ARGS:ip \
  "!@streq %{REMOTE_ADDR}" \
  "phase:2,deny,status:403,msg:'IP parameter != client IP'"


-B

Rajkumar S wrote:
> Hi,
> 
> Can some one point to the documentation where macros are explained. I
> saw the references to it in Reference documentation: v2.5.0, but did
> not find it explained any where.
> 
> with regards,
> raj
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> 


-- 
Brian Rectanus
Breach Security