Within the SLR rules I have came across several joomla rules which all
share a similar syntax
that looks like a query-string, e.g.
SecRule REQUEST_LINE "@contains /index.php" "chain,phase:2..."
> "(?i:UNION.+SELECT)" "ctl:auditLog..."
In regards to the second part (chained), I wonder if this means:
Check if within ARGS, option=comjoomla, and controller=auction
and view=auction and task=edit and also do @rx matching for ARGS:aid
Did i get the meanings of this rule right?