diff --git a/CHANGES b/CHANGES index 1bb417f5..1c55ad16 100644 --- a/CHANGES +++ b/CHANGES @@ -74,6 +74,8 @@ XX NNN 2012 - 2.7.0-rc1 * Added build system support for KfreeBSD and HURD. + * Updated Reference manual into doc/ directory. + * Fixed Variable DURATION contains the elapsed time in microseconds for compatible reasons with apache and other variables. diff --git a/doc/Reference_Manual.html b/doc/Reference_Manual.html index 98c1948e..c7a72c24 100644 --- a/doc/Reference_Manual.html +++ b/doc/Reference_Manual.html @@ -55,7 +55,7 @@ type="text/css"> var wgUserLanguage = "en"; var wgContentLanguage = "en"; var wgBreakFrames = false; - var wgCurRevisionId = 500; + var wgCurRevisionId = 502; var wgVersion = "1.15.1"; var wgEnableAPI = true; var wgEnableWriteAPI = true; @@ -753,65 +753,67 @@ class="tocnumber">10.34 sanitiseResponseHeaderbeginsWith
  • 11.2 contains
    • -
  • 11.3 +
  • 11.3 + containsWord
    • +
  • 11.4 endsWith
    • -
  • 11.4 +
  • 11.5 eq
    • -
  • 11.5 +
  • 11.6 ge
    • -
  • 11.6 +
  • 11.7 geoLookup
    • -
  • 11.7 +
  • 11.8 gsbLookup
    • -
  • 11.8 +
  • 11.9 gt
    • -
  • 11.9 +
  • 11.10 inspectFile
    • -
  • 11.10 +
  • 11.11 ipMatch
    • -
  • 11.11 +
  • 11.12 ipMatchF
  • 11.12 ipMatchFromFile
    • -
  • 11.13 +class="tocnumber">11.13 ipMatchFromFile
    • +
  • 11.14 le
    • -
  • 11.14 +
  • 11.15 lt
    • -
  • 11.15 +
  • 11.16 pm
    • -
  • 11.16 +
  • 11.17 pmf
    • -
  • 11.17 +
  • 11.18 pmFromFile
    • -
  • 11.18 +
  • 11.19 rbl
    • -
  • 11.19 +
  • 11.20 rsub
    • -
  • 11.20 +
  • 11.21 rx
    • -
  • 11.21 +
  • 11.22 streq
    • -
  • 11.22 +
  • 11.23 strmatch
  • 11.23 validateByteRange
    • -
  • 11.24 +class="tocnumber">11.24 validateByteRange
    • +
  • 11.25 validateDTD
  • 11.25 validateEncryption
    • -
  • 11.26 +class="tocnumber">11.26 validateEncryption
    • +
  • 11.27 validateSchema
  • 11.27 validateUrlEncoding
    • +class="tocnumber">11.28 validateUrlEncoding
  • 11.28 validateUtf8Encoding
    • -
  • 11.29 +class="tocnumber">11.29 validateUtf8Encoding
    • +
  • 11.30 verifyCC
    • -
  • 11.30 +
  • 11.31 verifyCPF
    • -
  • 11.31 +
  • 11.32 verifySSN
    • -
  • 11.32 +
  • 11.33 within
    • @@ -5241,6 +5243,24 @@ string before comparison. 
    # Detect ".php" anywhere in the request line 
 SecRule REQUEST_LINE "@contains .php"
    +

    containsWord

    +

    Description: Returns true if the parameter string (with word +boundaries) is found anywhere in the input. Macro expansion is performed + on the parameter string before comparison. +

    Example: +

    +
    # Detect "select" anywhere in ARGS 
+SecRule ARGS "@containsWord select" 
+
    +

    Would match on -
    +-1 union select +BENCHMARK(2142500,MD5(CHAR(115,113,108,109,97,112))) FROM wp_users WHERE + ID=1 and (ascii(substr(user_login,1,1))&0x01=0) from wp_users where + ID=1-- +

    But not on -
    +Your site has a wide selection of computers. +

    endsWith

    Description: Returns true if the parameter string is found at @@ -6227,13 +6247,13 @@ SecCookieFormat 0 - +

    Retrieved from "http://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual"
    @@ -6343,7 +6363,7 @@ pages href="http://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual&printable=yes&printable=yes" rel="alternate" title="Printable version of this page [alt-shift-p]" accesskey="p">Printable version @@ -6355,15 +6375,15 @@ href="http://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Referen src="Reference_Manual_files/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki"> - +