[ { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (1/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"1\" \\(Variable: RULE:id\\)" }, "rules":[ "SecRuleEngine On", "SecRule RULE:id \"@contains test\" \"id:1,phase:3,rev:1.3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (2/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"200\" \\(Variable: RULE:rev\\)" }, "rules":[ "SecRuleEngine On", "SecRule RULE:rev \"@contains test\" \"id:1,rev:200,phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (3/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"2\" \\(Variable: RULE:severity\\)" }, "rules":[ "SecRuleEngine On", "SecRule RULE:severity \"@contains test\" \"id:1,phase:3,severity:critical,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (4/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Target value: \"data123\" \\(Variable: RULE:logdata\\)" }, "rules":[ "SecRuleEngine On", "SecRule RULE:logdata \"@contains test\" \"id:1,logdata:'data123',phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (5/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":" Target value: \"message123\" \\(Variable: RULE:msg\\)" }, "rules":[ "SecRuleEngine On", "SecRule RULE:msg \"@contains test\" \"id:1,msg:'message123',phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (6/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":" Target value: \"message123\" \\(Variable: RULE:msg\\)" }, "rules":[ "SecRuleEngine On", "SecRule rule:msg \"@contains test\" \"id:1,msg:'message123',phase:3,pass,t:trim\"" ] }, { "enabled":1, "version_min":300000, "title":"Testing Variables :: RULE (7/7)", "client":{ "ip":"200.249.12.31", "port":123 }, "server":{ "ip":"200.249.12.31", "port":80 }, "request":{ "headers":{ "Host":"localhost", "User-Agent":"curl/7.38.0", "Accept":"*/*", "Content-Length": "27", "Content-Type": "application/x-www-form-urlencoded" }, "uri":"/", "method":"POST", "body": [ "param1=value1¶m2=value2" ] }, "response":{ "headers":{ "Date":"Mon, 13 Jul 2015 20:02:41 GMT", "Last-Modified":"Sun, 26 Oct 2014 22:33:37 GMT", "Content-Type":"text/html" }, "body":[ "no need." ] }, "expected":{ "debug_log":"Saving variable: IP:block_reason with value: message123" }, "rules":[ "SecRuleEngine On", "SecRule rule:msg \"@contains message\" \"id:1,msg:'message123',setvar:'ip.block_reason=%{RULE.msg}%',phase:3,pass,t:trim\"" ] } ]