From b47059a5b34a607738bfb35df09c39ea37b68049 Mon Sep 17 00:00:00 2001 From: brectanus Date: Thu, 3 May 2007 01:52:47 +0000 Subject: [PATCH] Remove docs for HTTP_* vars. See #23. --- doc/modsecurity2-apache-reference.xml | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/doc/modsecurity2-apache-reference.xml b/doc/modsecurity2-apache-reference.xml index d8ec6cf8..ea272a75 100644 --- a/doc/modsecurity2-apache-reference.xml +++ b/doc/modsecurity2-apache-reference.xml @@ -1745,7 +1745,7 @@ SecAction setsid:%{REQUEST_COOKIES.PHPSESSID} SecDefaultAction "log,pass,phase:2" -SecRule HTTP_Host "!^$" "deny,phase:1" +SecRule REQUEST_HEADERS:Host "!^$" "deny,phase:1" Note on Rule and Phases @@ -1994,21 +1994,6 @@ SecRule ENV:tag "suspicious" SecRule FILES_TMPNAMES "@inspectFile /path/to/inspect_script.pl" -
- <literal moreinfo="none">HTTP_</literal> - - This variable is a special prefix that is followed by a header - name and can be used to access any request header. Example: - - SecRule HTTP_REFERER "www\.badsite\.com" - - Note - - This variable is for backward-compatibilty with ModSecurity 1.X - rules. It has been superceded by the REQUEST_HEADERS variable - (REQUEST_HEADERS:Headername) -
-
<literal moreinfo="none">PATH_INFO</literal>