[mod-security-users] How to save value of a query string parameter then use it in Phase 4?

[Stephen C. E. <ste...@gm...>]

Hi,

This might be easy but it's not clear to me how to do this from
reading the reference manual (especially 'setvar' and MATCHED_VAR) and
going through all of the rules files that I have at my disposal.

In Phase 2, I want to save the value of a get query string parameter,
say "menu=700".

So the rule might start off as:
SecRule ARGS_GET:menu ...

and somehow I need to set a variable with the value 700.

Then in Phase 4 I want to access the value and invoke a rule if a
match, otherwise bypass the rule
SecRule  ???  "!@eq 700" "t:none,pass,skip:2"
SecRule RESPONSE_BODY "..."  "phase:4:..."

How can I do this?

Any help is appreciated.
Stephen