brectanus
f394c6faa2
Add atomic updates for persistent counters. See #20 .
2008-05-13 00:05:02 +00:00
brectanus
b4f473f87f
Expand macros in expirevar and deprecatevar. See #477 .
...
Cleaned up debug logs in actions.
Warn on mismatched curly braces in macro expansion.
2008-04-24 16:23:35 +00:00
brectanus
7a1e2db148
Fixed code according to Ivan's review.
2008-02-20 00:41:43 +00:00
brectanus
e4eaade2ca
Make Lua support optional since it is still experimental (--without-lua). If someone still uses SecRuleScript, however, it iignores it and just warns on Apache startup.
2008-02-16 00:27:44 +00:00
brectanus
f428d37680
Cleanup - remove extraneous whitespace and tabs.
2008-02-07 21:45:05 +00:00
brectanus
13b5cdd5fc
Expand macros in setenv (name and value). See #458 .
2008-02-04 18:26:35 +00:00
brectanus
a3584993f5
Implement "block" pseudo-action. See #441 .
2008-01-24 05:16:35 +00:00
brectanus
c4e1ede358
Fixed merging actionsets so we can build a more accurate rule for auditing.
2008-01-22 05:39:33 +00:00
brectanus
96ff268f64
Replace TABs with 4 spaces.
2008-01-18 01:04:47 +00:00
brectanus
9fb03d277d
Fixing code based on review comments...
...
Cleaned up what vars are cacheable.
Added parens around "*foo++" where it clarified the operation to be "*(foo++)".
Added " at VARNAME" to operator matches where needed.
Escaped var->name in the var generation (user-supplied data).
Marked a bunch of TODOs as ENHs instead.
Transformed some C++ style comments to C style.
Removed the %0-9 macros code which was commented out.
Optimized some ctl action code so that multiple ifs are else ifs.
Implemented some error messages marked as ENH.
Make commented out acmp debugging a configure-time option.
Cleanup GEO debug log messages.
Added relative filename support for geo dbs.
Added help text to Sec* directives.
2008-01-18 00:47:30 +00:00
brectanus
b5033e6e29
It is 2008 now :)
2008-01-11 00:00:31 +00:00
brectanus
b6446dc836
Fixed an old bug in ctl:auditLogParts that was fixed in 2.1.x, but not trunk.
2008-01-09 01:02:51 +00:00
ivanr
2068357af8
Added m.getvars() and finalised Lua support.
2007-12-21 12:50:03 +00:00
ivanr
f64c7c39e8
Lua: Added support for scripting to @inspectFile.
2007-12-20 15:53:23 +00:00
ivanr
4cecdf4c5b
Added support for Lua to the exec action.
2007-12-20 12:06:30 +00:00
ivanr
4414cb8527
Lua: Support retrieval of individual variables from scripts.
2007-12-19 14:35:20 +00:00
ivanr
a703c9c626
Minor allow bug fix.
2007-12-17 15:11:18 +00:00
ivanr
b9a28882b2
Enhanced allow.
2007-12-17 11:22:47 +00:00
brectanus
5065852dfe
More efficient collection persistance and deletion on retrieval. See #345 and #426 .
2007-12-14 19:53:23 +00:00
brectanus
54cac6461b
Add IS_NEW and IS_EXPIRED collection variables. See #345 .
2007-12-12 22:52:08 +00:00
brectanus
aff6900539
Initial full pass through code to fix issues with 64-bit/mismatch sign/mismatch size printf style formatters.
...
Still need to look more into how we are handling time and convert to apr_time_t (or time_t) where appropriate.
Still need to look into our use of 'long' as windows is LLP64 where 'long' is still 32-bit.
2007-11-15 19:09:14 +00:00
brectanus
e45ea12fc8
Fix warnings on Solaris and/or 64bit builds.
2007-11-02 22:31:47 +00:00
brectanus
9d49adf028
Basic implementation of skipAfter (still need to implement placeholders so it works with removed rules). See #258 .
2007-10-17 19:59:28 +00:00
brectanus
974298a76c
Added ctl:ruleRemoveById action. See #259 .
2007-10-17 19:11:47 +00:00
brectanus
9efa02f423
Change ctl parameters to be case insensitive.
...
Initial implementation of ctl:removeRuleById. See #259 .
2007-10-16 00:14:42 +00:00
brectanus
793b576701
Added support for MATCHED_VAR and MATCHED_VAR_NAME. See #123 .
2007-10-15 16:50:36 +00:00
brectanus
9d4965b29e
Fix macro expansion in setvar. See #126 .
2007-10-01 17:24:10 +00:00
brectanus
63a47c370e
Prefer %d string formatter to %i so we do not get warnings on some platforms.
2007-09-27 21:34:29 +00:00
brectanus
426ce1aea7
Fixed deprecatevar. See #59 .
2007-09-25 21:40:04 +00:00
brectanus
8f6385f784
Added logdata action (still needs byte limit). See #40 .
2007-08-10 00:22:15 +00:00
brectanus
81d0f84ad3
Update copyright text to Breach Security, Inc.
...
Merge in changes from branches/2.1.x
2007-06-14 16:05:45 +00:00
brectanus
c0c5d8d894
Removed extraneous symbols from dso via DSOLOCAL.
2007-05-03 16:17:42 +00:00
ivanr
e0a8602929
Added experiemental support for content injection.
2007-05-02 11:22:09 +00:00
brectanus
a3c3f25ae0
Fix macro expansion. See #118 .
...
Fix some debug log output to escape NULs properly in preparation for #54 .
Up version to prepare for 2.2.0 pre-releases.
2007-05-01 21:36:24 +00:00
brectanus
ab55a8716e
Fix potential memory corruption in msre_create_var_ex allocating per-request data out of global pool.
2007-03-08 16:15:45 +00:00
brectanus
f4fb4ed4f6
Updates to quiet some compiler warnings.
2007-03-01 11:49:56 +00:00
ivanr
6c5d19ed84
Removed the (harmless) message mentioning LAST_UPDATE_TIME missing.
2007-02-22 11:40:48 +00:00
ivanr
3f80fdac3b
Import ModSecurity 2.1.0-rc7
2007-02-06 12:29:22 +00:00
