diff --git a/conf/modsecurity.conf b/conf/modsecurity.conf index be4a71c..1ba74f3 100644 --- a/conf/modsecurity.conf +++ b/conf/modsecurity.conf @@ -8,7 +8,7 @@ SecAuditLogType Serial SecAuditLog /var/log/modsecurity/audit.log # sql injection -SecRule ARGS "(?i)(['\"]|--|#|/\*|\*/)" \ +SecRule ARGS|REQUEST_BODY "['\"].*--" \ "id:950001,phase:2,deny,status:403,msg:'SQL Injection: Escape or Comment',log,t:urlDecode,t:lowercase" # sql keyword diff --git a/relatorio/imgs/the-luscious-middle-empire-by-v0-e6o4aifoa6zg1.png b/relatorio/imgs/the-luscious-middle-empire-by-v0-e6o4aifoa6zg1.png new file mode 100644 index 0000000..768bb3d Binary files /dev/null and b/relatorio/imgs/the-luscious-middle-empire-by-v0-e6o4aifoa6zg1.png differ