2083 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
brectanus	f6de76b053	Removed CGI style HTTP_* variables in favor of REQUEST_HEADERS:Header-Name. (trac #23)	2007-03-27 17:18:21 +00:00
brectanus	485c664a42	Enhance debug log output for capturing to detect all regex/capture mismatches (trac #21).	2007-03-27 17:13:42 +00:00
brectanus	891859f9c5	Revert back to using captured regex execution as it seems to be more effecient as the ovector can be used for working space even if it is not used for captures. ... Warn when captures are used in the regex, but "capture" not specified.	2007-03-27 15:32:53 +00:00
brectanus	59928bfe60	This was not meant to be checked in yet (trac #42)	2007-03-27 15:28:47 +00:00
brectanus	4676132ed4	Add the file/line to the rule so we can use it in the debug log and eventually in the alerts.	2007-03-21 21:20:35 +00:00
brectanus	58afede3f3	Do not log 'allow' action as intercepted in the debug log.	2007-03-21 14:38:57 +00:00
brectanus	d1ada359dd	Optimize regex execution to not capture unless 'capture' action used.	2007-03-21 14:06:36 +00:00
brectanus	09b704f114	Recycle the mptmp pool (trac #43).	2007-03-20 22:15:19 +00:00
brectanus	8876a03ab1	Recycle the mptmp pool (trac #43).	2007-03-20 22:09:04 +00:00
brectanus	f508c0a331	Fix a compile warning.	2007-03-20 22:01:30 +00:00
brectanus	473a471bba	Oops, forgot my parens.	2007-03-20 18:27:51 +00:00
brectanus	bce096216e	Fixed collection variable name printing in debug log (trac #45)	2007-03-20 18:23:48 +00:00
brectanus	ab55a8716e	Fix potential memory corruption in msre_create_var_ex allocating per-request data out of global pool.	2007-03-08 16:15:45 +00:00
brectanus	8898759c47	Add back the check for overflow on length	2007-03-07 16:54:41 +00:00
brectanus	9b56d63145	More generic Makefile	2007-03-07 16:02:20 +00:00
brectanus	4370819f7b	Fixed potential DIV0 when a collection var was fetched in the same second as creation	2007-03-07 15:56:22 +00:00
brectanus	4e02be6219	Fixed parsing of ASCIIZ for application/x-www-form-urlencoded forms	2007-03-06 16:14:54 +00:00
brectanus	cf024ded05	Fix segfault when logging NULL text during request reading errors and upcoming fix for sending alerts on such errors.	2007-03-05 22:12:34 +00:00
brectanus	ebdd0400dd	Generate an alerts for error log entries for requests we did not process *if* it has a UNIQUE_ID available.	2007-03-02 21:47:13 +00:00
ivanr	8aeff06fc2	Fixed faulty REQUEST_FILENAME.	2007-03-01 12:17:17 +00:00
brectanus	f4fb4ed4f6	Updates to quiet some compiler warnings.	2007-03-01 11:49:56 +00:00
brectanus	79d232ccff	Fixed some casting issues for compiling on NetWare (Guenter Knauf).	2007-03-01 11:34:13 +00:00
ivanr	3e95d3c347	Changed version number to 2.1.0.	2007-02-22 13:20:17 +00:00
ivanr	98188bd9b5	Document was not valid DocBook. Fixed.	2007-02-22 13:17:49 +00:00
ivanr	6ebecdb3e5	Small fixes.	2007-02-22 12:49:35 +00:00
ivanr	f9999c440c	Downgraded 'Connection reset by peer' from ERROR to NOTICE, as it has nothing to do with us.	2007-02-22 12:14:10 +00:00
ivanr	b57a1f0246	Fixed an invalid conversion specifier.	2007-02-22 11:45:06 +00:00
ivanr	6c5d19ed84	Removed the (harmless) message mentioning LAST_UPDATE_TIME missing.	2007-02-22 11:40:48 +00:00
ivanr	8eb0aa7e4a	Updated fix message.	2007-02-22 10:52:49 +00:00
ivanr	f807697e3d	SecRuleRemoveById was unable to remove a phase 4 rule.	2007-02-22 10:44:01 +00:00
brectanus	08c231a6b3	Fix some spelling, grammer and formatting issues.	2007-02-13 20:42:07 +00:00
ivanr	c482774094	Branched 2.1.0-rc7	2007-02-06 12:32:03 +00:00
ivanr	3f80fdac3b	Import ModSecurity 2.1.0-rc7	2007-02-06 12:29:22 +00:00