diff --git a/doc/modsecurity2-apache-reference.xml b/doc/modsecurity2-apache-reference.xml index d8ec6cf8..ea272a75 100644 --- a/doc/modsecurity2-apache-reference.xml +++ b/doc/modsecurity2-apache-reference.xml @@ -1745,7 +1745,7 @@ SecAction setsid:%{REQUEST_COOKIES.PHPSESSID} SecDefaultAction "log,pass,phase:2" -SecRule HTTP_Host "!^$" "deny,phase:1" +SecRule REQUEST_HEADERS:Host "!^$" "deny,phase:1" Note on Rule and Phases @@ -1994,21 +1994,6 @@ SecRule ENV:tag "suspicious" SecRule FILES_TMPNAMES "@inspectFile /path/to/inspect_script.pl" -
- <literal moreinfo="none">HTTP_</literal> - - This variable is a special prefix that is followed by a header - name and can be used to access any request header. Example: - - SecRule HTTP_REFERER "www\.badsite\.com" - - Note - - This variable is for backward-compatibilty with ModSecurity 1.X - rules. It has been superceded by the REQUEST_HEADERS variable - (REQUEST_HEADERS:Headername) -
-
<literal moreinfo="none">PATH_INFO</literal>