how to print ModSecurity variables

ddaas · 09-03-2007, 06:01 AM

Hello,
Does anyone know if there is a possibility to print ModSecurity variables?

I mean, I want to see the content of variables like REQUEST_FILENAME, SCRIPT_FILENAME, REQUEST_URI etc.

Some of them are a little bit confusing.

Thanks,
ddaas

shezaf · 09-03-2007, 08:05 AM

Either set the debug level to 9 and examine the debug log - any variable referenced in a rule would be there), or alternatively write an action that prints a variable using substitution:

SecAction "msg:'%{VAR_NAME}'"

For more support for ModSecurity, you might want look at the ModSecurity site at http://www.modsecurity.org or join the ModSecurity mailing list at https://lists.sourceforge.net/lists/...security-users

~ Ofer Shezaf
CTO, Breach Security
ModSecurity Core Rule Set project leader

ddaas · 09-03-2007, 12:43 PM

Thanks
That was exactly what I was looking for. ModSecurity is a great tool.

ddaas