570 Commits

Author SHA1 Message Date
brectanus
f6de76b053 Removed CGI style HTTP_* variables in favor of REQUEST_HEADERS:Header-Name. (trac #23) 2007-03-27 17:18:21 +00:00
brectanus
485c664a42 Enhance debug log output for capturing to detect all regex/capture mismatches (trac #21). 2007-03-27 17:13:42 +00:00
brectanus
891859f9c5 Revert back to using captured regex execution as it seems to be more effecient as the ovector can be used for working space even if it is not used for captures.
Warn when captures are used in the regex, but "capture" not specified.
2007-03-27 15:32:53 +00:00
brectanus
4676132ed4 Add the file/line to the rule so we can use it in the debug log and eventually in the alerts. 2007-03-21 21:20:35 +00:00
brectanus
58afede3f3 Do not log 'allow' action as intercepted in the debug log. 2007-03-21 14:38:57 +00:00
brectanus
d1ada359dd Optimize regex execution to not capture unless 'capture' action used. 2007-03-21 14:06:36 +00:00
brectanus
8876a03ab1 Recycle the mptmp pool (trac #43). 2007-03-20 22:09:04 +00:00
brectanus
bce096216e Fixed collection variable name printing in debug log (trac #45) 2007-03-20 18:23:48 +00:00
brectanus
ab55a8716e Fix potential memory corruption in msre_create_var_ex allocating per-request data out of global pool. 2007-03-08 16:15:45 +00:00
brectanus
4370819f7b Fixed potential DIV0 when a collection var was fetched in the same second as creation 2007-03-07 15:56:22 +00:00
brectanus
4e02be6219 Fixed parsing of ASCIIZ for application/x-www-form-urlencoded forms 2007-03-06 16:14:54 +00:00
ivanr
8aeff06fc2 Fixed faulty REQUEST_FILENAME. 2007-03-01 12:17:17 +00:00
brectanus
f4fb4ed4f6 Updates to quiet some compiler warnings. 2007-03-01 11:49:56 +00:00
brectanus
79d232ccff Fixed some casting issues for compiling on NetWare (Guenter Knauf). 2007-03-01 11:34:13 +00:00
ivanr
3e95d3c347 Changed version number to 2.1.0. 2007-02-22 13:20:17 +00:00
ivanr
f9999c440c Downgraded 'Connection reset by peer' from ERROR to NOTICE, as it has nothing to do with us. 2007-02-22 12:14:10 +00:00
ivanr
6c5d19ed84 Removed the (harmless) message mentioning LAST_UPDATE_TIME missing. 2007-02-22 11:40:48 +00:00
ivanr
8eb0aa7e4a Updated fix message. 2007-02-22 10:52:49 +00:00
ivanr
f807697e3d SecRuleRemoveById was unable to remove a phase 4 rule. 2007-02-22 10:44:01 +00:00
ivanr
3f80fdac3b Import ModSecurity 2.1.0-rc7 2007-02-06 12:29:22 +00:00