Adds support to capture this fingerprint of the detectSQLi operator

This commit is contained in:
Felipe Zimmerle
2015-10-27 10:40:35 -03:00
parent 93031d93d0
commit 11a1045f47
3 changed files with 9 additions and 3 deletions

View File

@@ -26,6 +26,7 @@
#include "operators/pm.h"
#include "operators/rx.h"
#include "operators/contains.h"
#include "operators/detect_sqli.h"
namespace ModSecurity {
namespace actions {
@@ -49,6 +50,11 @@ bool Capture::evaluate(Rule *rule, Assay *assay) {
match = &contains->matched;
}
operators::DetectSQLi *dsqli = dynamic_cast<operators::DetectSQLi *>(op);
if (dsqli != NULL) {
match = &dsqli->matched;
}
if (match->empty()) {
return false;
}