brenosilva
cf97731cc0
Fix logging MATCHED_VARS issue
2011-04-25 19:46:33 +00:00
brenosilva
775f105986
MODSEC-221
2011-04-10 14:46:30 +00:00
brenosilva
6d3b3802de
return value to unique_id
2011-04-03 13:44:54 +00:00
brenosilva
104f0de46e
New License
2011-03-30 14:12:44 +00:00
brenosilva
49732256f6
Improvements, fixes and new features
2011-03-25 13:51:13 +00:00
brenosilva
7f52d86e4b
Include data edition, sanitizematched and few fixes
2011-02-14 12:49:55 +00:00
brenosilva
d0e2546f9b
MODSEC-21
2011-01-14 16:22:15 +00:00
brenosilva
1260d2b097
MODSEC-104
2010-12-23 12:27:57 +00:00
brenosilva
549f059480
move 2.5.13 into trunk
2010-12-08 18:58:18 +00:00
b1v1r
08edc0c26f
Merge 2.5.x (2.5.12) changes into trunk.
2010-02-05 19:05:20 +00:00
ivanr
0ecfe86c3c
Add PERF_GC.
2010-02-03 08:46:42 +00:00
ivanr
5c4733f1ab
Add REQUEST_BODY_LENGTH.
2010-02-02 13:48:30 +00:00
ivanr
86407062e4
Do not use 'total' to refer to PERF_COMBINED in the logs. Use 'combined' instead.'
2010-02-01 12:31:32 +00:00
ivanr
221af6f5c1
Add PERF_ALL, sepearate PERF_STORAGE into PERF_SREAD and PERF_SWRITE.
2010-02-01 12:10:28 +00:00
ivanr
bc35ab7e0b
Implement variables for access to performance measurements.
2010-02-01 11:44:32 +00:00
ivanr
a4d5d50be9
Integrate with mod_log_config (MODSEC-108).
2010-02-01 11:01:17 +00:00
ivanr
d259373331
Add DURATION.
2010-01-27 14:11:33 +00:00
ivanr
6d5e752cb3
Added URLENCODED_ERROR, which is raised when invalid URL encoding is encountered
2009-12-12 14:21:17 +00:00
b1v1r
b01f8190e4
Merged 2.5.x changes for 2.5.11 into trunk.
2009-11-06 18:38:15 +00:00
b1v1r
9d26b16e23
Merge 2.5.x changes into trunk.
2009-05-16 07:54:17 +00:00
b1v1r
dc0a2161ac
Merge 2.5.9 changes into trunk.
2009-03-12 15:31:10 +00:00
brectanus
10713fbd37
Sync up branches/2.5.x and trunk.
2008-07-31 22:36:24 +00:00
brectanus
f428d37680
Cleanup - remove extraneous whitespace and tabs.
2008-02-07 21:45:05 +00:00
brectanus
7250e4d03c
Fix crash when there is no parameter to ENV target var. See #459 .
2008-02-04 18:22:51 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
b5033e6e29
It is 2008 now :)
2008-01-11 00:00:31 +00:00
brectanus
4e7c243c39
Make libxml2 *required*.
2007-12-19 18:13:41 +00:00
brectanus
2203428507
Prefer "offset" to "pos".
2007-12-12 18:43:40 +00:00
brectanus
aff6900539
Initial full pass through code to fix issues with 64-bit/mismatch sign/mismatch size printf style formatters.
...
Still need to look more into how we are handling time and convert to apr_time_t (or time_t) where appropriate.
Still need to look into our use of 'long' as windows is LLP64 where 'long' is still 32-bit.
2007-11-15 19:09:14 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
793b576701
Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123 .
2007-10-15 16:50:36 +00:00
brectanus
b784e6cb73
Change from TX:LAST_MATCHED_VAR_NAME to MATCHED_VAR. See #123 .
2007-10-03 00:23:46 +00:00
brectanus
63a47c370e
Prefer %d string formatter to %i so we do not get warnings on some platforms.
2007-09-27 21:34:29 +00:00
ivanr
0769f2378c
More multipart improvements. Added MULTIPART_MISSING_SEMICOLON.
2007-09-07 13:16:40 +00:00
ivanr
608f7f2b44
Fix LF line detection, add MULTIPART_CRLF_LINE, MULTIPART_CRLF_LF_LINES.
2007-08-20 15:25:05 +00:00
ivanr
baf6f59dff
Multipart parsing improvements.
2007-08-17 15:47:33 +00:00
brectanus
e275162463
Quiet "warning: int format, pid_t arg" type warnings.
2007-08-13 17:49:37 +00:00
ivanr
222f1f6f78
Cleanup. MULTIPART_STRICT_ERROR now returns 1 on parsing error too.
2007-08-10 15:04:42 +00:00
ivanr
c85773b343
Added MULTIPART_UNMATCHED_BOUNDARY. Not very reliable, as it detects anything that looks like a boundary, which means any line that begins with -- but we don't think it's a boundary.
2007-08-10 09:59:57 +00:00
brectanus
8f6385f784
Added logdata action (still needs byte limit). See #40 .
2007-08-10 00:22:15 +00:00
brectanus
9cfdd8f0d2
Rename TX_SEVERITY to HIGHEST_SEVERITY, fix and document.
2007-08-09 14:32:02 +00:00
ivanr
c520886e10
Detect and prevent multipart evasion.
2007-08-09 10:50:53 +00:00
ivanr
cb0cb93752
Sorted variables in the registration code.
2007-08-09 10:17:42 +00:00
brectanus
648037fdb5
Added TX_SEVERITY variable. See #60 .
2007-08-08 22:11:02 +00:00
brectanus
f41c27a28c
Added ARGS_GET, ARGS_POST, ARGS_GET_NAME, ARGS_POST_NAMES variables. See #136 .
2007-08-08 20:49:51 +00:00
brectanus
fe8c564ed0
Added MODSEC_BUILD variable. See #38 .
2007-08-08 18:25:03 +00:00
brectanus
72832c1b32
Working on cache enhancements. See trac #14 .
2007-08-02 20:25:06 +00:00
ivanr
8de8e44e09
Removed RESPONSE_CONTENT_ENCODING, which never worked as intended.
2007-06-20 11:10:47 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
a68eb04884
Add geo lookup support. See #22 .
2007-05-11 16:14:11 +00:00
