Hi,
This might be easy but it's not clear to me how to do this from
reading the reference manual (especially 'setvar' and MATCHED_VAR) and
going through all of the rules files that I have at my disposal.
In Phase 2, I want to save the value of a get query string parameter,
say "menu=700".
So the rule might start off as:
SecRule ARGS_GET:menu ...
and somehow I need to set a variable with the value 700.
Then in Phase 4 I want to access the value and invoke a rule if a
match, otherwise bypass the rule
SecRule ??? "!@eq 700" "t:none,pass,skip:2"
SecRule RESPONSE_BODY "..." "phase:4:..."
How can I do this?
Any help is appreciated.
Stephen
|