Apache Moduler

Apache Moduler

Cancelled

Job Description

i NEED this mod_sec rule in apache.

SecFilterSelective ARGS "drop[[:space:]]+(database|table|column|procedure)"
SecFilterSelective ARGS "delete[[:space:]]+from|create[[:space:]]+table|update.+set.+=|insert[[:space:]]+into.+values"
SecFilterSelective ARGS "select.+from|bulk[[:space:]]+insert|union.+select|alter[[:space:]]+table"
SecFilterSelective ARGS "or.+1[[:space:]]*=[[:space:]]1|or 1=1--'|'.+--"
SecFilterSelective ARGS "into[[:space:]]+outfile|load[[:space:]]+data|/\*.+\*/"

This one currently works, however it blocks too much. We want it to only match IF the following conditions are there:

- If "dashboard" isn't in the URL
- If "ticket" isn't in the URL

Make sense? So, if they hit one of those words are they are on ticket2.php, it wouldn't alert, but if they were on order.php, it would.


Kindly let me know if you are able to do this. This is a very simple job, and shouldn't take more than 30 minutes for someone who knows apache. My budget for the job is $3. However, I assure you that this is a recurrent work. And you will get more than 50 jobs of such kind from me every month.

Regards

---
Skills: apache, server-administration

Other open jobs by this client