ReJeCtAll / naxsi

Automatically exported from code.google.com/p/naxsi
Other
0 stars 0 forks source link

Whitelist a POST event #88

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
This is with phpbb and Spambot countermeasure 'Sortables CAPTCHA', when 
attempting to register it issues:

nginx 1.5.11

2014/03/01 21:20:05 [error] 2532#2436: *7 NAXSI_FMT: 
ip=127.0.0.1&server=127.0.0.1&uri=/ucp.php&learning=0&vers=0.53-1&total_processe
d=zu&total_blocked=zu&block=1&cscore0=$SQL&score0=zu&zone0=BODY|NAME&id0=1000&va
r_name0=sortables_confirm_id&zone1=BODY|NAME&id1=1000&var_name1=sortables_option
s_left[], client: 127.0.0.1, server: localhost, request: "POST 
/ucp.php?mode=register&sid=c6ab24394 HTTP/1.1", host: "127.0.0.1", referrer: 
"http://127.0.0.1/ucp.php?mode=register&sid=b42b28b"

I've tried:
BasicRule wl:1000 "mz:$BODY_VAR_X:^sortables_";
BasicRule wl:1000 "mz:$URL:/ucp.php|BODY";
BasicRule wl:1000;

But nothing different happens, I have verified the working of white-listing 
with the '/wp-content/plugins/ultimate-.....' prove test and that works fine.

Any ideas what to try next?

Original issue reported on code.google.com by i...@ecsystems.nl on 1 Mar 2014 at 8:52