O'Reilly logo

ModSecurity 2.5 by Magnus Mischel

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Appendix A. Directives and Variables

Directives

This section contains a list of the directives available for use in your ModSecurity configuration file. These directives can be used in the main Apache configuration file, but as we have seen in previous chapters, placing your ModSecurity directives in a separate file is recommended as this makes it much easier to maintain your configuration.

SecAction

SecAction lets you unconditionally execute actions. This essentially makes it a SecRule statement without the conditional part.

Syntax: SecAction action1,action2,action3
Example: SecAction setuid:%{REMOTE_USER},nolog

SecArgumentSeparator

Specifies which character to use as a separator in forms and other content that uses the MIME type application/x-www-form-urlencoded ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required