Re: [mod-security-users] mod_security enhancement idea

[Ivan R. <iva...@gm...>]

On 4/12/06, Terry Dooher <tdo...@na...> wrote:
>
> This much I understand, but I'm looking for some clarification on whether=
 or
> not REQUEST_URI contains the query string in POST requests. I would assum=
e
> not, but my confusion arises from the use of the term URI in this context=
.

It can do. But if it does those won't be the parameters transmitted in
the request body. It is possible (and common) to have parameters in
the query string *and* in the request body.

--
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall