Re: [mod-security-users] Setenv and checking ENV_

[Ivan R. <iv...@we...>]

Christian Martorella wrote:
> I'm using a 1.9dev2
> 
> In the logs i have the warning of the example.asp:

   Please send the complete log fragments with configuration.
   Otherwise I won't be able to recreate the same environment.

   I tried this:

SecfilterSelective REQUEST_URI "example" "setenv:test=1,log,pass"
SecFilterSelective ENV_test "1" "log,pass"

   And it works, like this:

Checking signature "example" at REQUEST_URI
Checking against "/example"
Warning. Pattern match "example" at REQUEST_URI
Signature check returned 0 (337 usec)
Checking signature "1" at ENV(test)
Checking against "1"
Warning. Pattern match "1" at ENV(test)
Signature check returned 0 (373 usec)

   Now you try the same :)

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org