search

ucinc / naxsi

Automatically exported from code.google.com/p/naxsi
Other
0 stars 0 forks source link

how do the "BODY|NAME" setting? #53

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
NAXSI_FMT:ip=xxx.xxx.xxx.xxx&server=www.xxx.com&uri=/common/comment/ciadmin/writ
e_option_save.php&total_processed=4294967302&total_blocked=-4618193787234024825&
zone0=BODY|NAME&id0=1000&var_name0=tablename&zone1=BODY|NAME&id1=1000&var_name1=
ref_table, client: xxx.xxx.xxx.xxx, server: www.xxx.com, request: "POST 
/common/comment/ciadmin/write_option_save.php HTTP/1.1", host: "www.xxx.com", 
referrer: 
"http://www.xxx.com/common/comment/ciadmin/write_option.php?confidx=198&rurl=%2F
common%2Fcomment%2Fciadmin%2Fconf_list.php%3F"

A. BODY|NAME var_name0=tablename
B. BODY|NAME var_name1=ref_table

i want to be registered in the whitelist, A and B 
so i was set up as below 

BasicRule wl:1000 "mz:$BODY_VAR:tablename|NAME";
BasicRule wl:1000 "mz:$BODY_VAR:ref_table|NAME";

but did not apply why?

how do the "BODY|NAME" setting?

Original issue reported on code.google.com by acela...@gmail.com on 10 Dec 2012 at 3:31

GoogleCodeExporter commented 8 years ago 
Hello,

I have commited a fix in the SVN.
Can you please give it a try and confirm it works for you ?

Original comment by ori...@gmail.com on 18 Dec 2012 at 10:44