1[ 2 { 3 "enabled":1, 4 "version_min":300000, 5 "title":"Testing USERID variable (1/2)", 6 "expected":{ 7 "debug_log": "Target value: \"zimmerle2\"" 8 }, 9 "client":{ 10 "ip":"200.249.12.31", 11 "port":123 12 }, 13 "request":{ 14 "headers":{ 15 "Host":"localhost", 16 "User-Agent":"curl/7.38.0", 17 "Accept":"*/*", 18 "User-Agent":"My sweet little browser", 19 "Cookie": "USER=zimmerle" 20 }, 21 "uri":"/?key=value&key=other_value", 22 "method":"GET" 23 }, 24 "server":{ 25 "ip":"200.249.12.31", 26 "port":80 27 }, 28 "rules":[ 29 "SecRuleEngine On", 30 "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900018',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}%,nolog,pass\"", 31 "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900068',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}2,nolog,pass\"", 32 "SecRule USERID \".*\" \"id:1239,phase:1,log,pass\"" 33 ] 34 }, 35 { 36 "enabled":1, 37 "version_min":300000, 38 "title":"Testing USERID variable (2/2)", 39 "expected":{ 40 "debug_log": "Target value: \"whee\"" 41 }, 42 "client":{ 43 "ip":"200.249.12.31", 44 "port":123 45 }, 46 "request":{ 47 "headers":{ 48 "Host":"localhost", 49 "User-Agent":"curl/7.38.0", 50 "Accept":"*/*", 51 "User-Agent":"My sweet little browser", 52 "Cookie": "USER=whee" 53 }, 54 "uri":"/?key=value&key=other_value", 55 "method":"GET" 56 }, 57 "server":{ 58 "ip":"200.249.12.31", 59 "port":80 60 }, 61 "rules":[ 62 "SecRuleEngine On", 63 "SecRule REQUEST_HEADERS:User-Agent \"^(.*)$\" \"id:'900018',phase:1,t:none,t:sha1,t:hexEncode,setuid:%{REQUEST_COOKIES:USER}%,nolog,pass\"", 64 "SecRule USERID \".*\" \"id:1239,phase:1,log,pass\"" 65 ] 66 } 67] 68