Re: [mod-security-users] Impossible reinitialise a collection?

[Ryan B. <RBa...@tr...>]

Hey Nick,
Yes, these types of persistent collections (SESSION, USER, RESOURCE,
etc..) can only be initiated once per transaction.

Can you give a better use case example of when you would need to
re-initialize a collection within the same transaction?

-Ryan



On 7/13/11 10:54 AM, "Nick Gearls" <nic...@gm...> wrote:

>Hi,
>
>Isn't it possible to reinitialise a collection?
>Ex:
>  SecRule REQUEST_FILENAME "^(.*)"
>"phase:1,t:none,capture,pass,initcol:RESOURCE=%{TX.1}"
>  [...]
>  SecAction  "phase:2,pass,initcol:RESOURCE=AnyString"
>  SecAction  "phase:2,pass,log,msg:'RESOURCE.KEY=<%{RESOURCE.KEY}>'"
>
>RESOURCE.KEY stays assigned to the request filename.
>I also tried with everything in phase:1.
>
>Is it a limitation (only one initialise per request)?
>
>Thanks,
>
>Nick
>
>
>--------------------------------------------------------------------------
>----
>AppSumo Presents a FREE Video for the SourceForge Community by Eric
>Ries, the creator of the Lean Startup Methodology on "Lean Startup
>Secrets Revealed." This video shows you how to validate your ideas,
>optimize your ideas and identify your business strategy.
>http://p.sf.net/sfu/appsumosfdev2dev
>_______________________________________________
>mod-security-users mailing list
>mod...@li...
>https://lists.sourceforge.net/lists/listinfo/mod-security-users
>ModSecurity Services from Trustwave's SpiderLabs:
>https://www.trustwave.com/spiderLabs.php
>


This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.