kys20
This commit is contained in:
@@ -8,7 +8,7 @@ SecAuditLogType Serial
|
|||||||
SecAuditLog /var/log/modsecurity/audit.log
|
SecAuditLog /var/log/modsecurity/audit.log
|
||||||
|
|
||||||
# sql injection
|
# sql injection
|
||||||
SecRule ARGS "(?i)(['\"]|--|#|/\*|\*/)" \
|
SecRule ARGS|REQUEST_BODY "['\"].*--" \
|
||||||
"id:950001,phase:2,deny,status:403,msg:'SQL Injection: Escape or Comment',log,t:urlDecode,t:lowercase"
|
"id:950001,phase:2,deny,status:403,msg:'SQL Injection: Escape or Comment',log,t:urlDecode,t:lowercase"
|
||||||
|
|
||||||
# sql keyword
|
# sql keyword
|
||||||
|
|||||||
Binary file not shown.
|
After Width: | Height: | Size: 2.0 MiB |
Reference in New Issue
Block a user