Re: regex for matching urls

Peter Wood wrote:
> I'm having someone help me test these rules. On my machine, this rule
> matches just fine. On his machine, it doesn't match at all. He is
> running mod_security 1.8.6, I'm running 1.8.7. Is there any difference
> in between the two that might cause this not to match?

  No, there shouldn't be any.

  Is he running Apache 1.x and you Apache 2.x?

  These two have completely different regular expression
  engines. (The one in Apache 2.x being much better.)

  In my experience (I can't test now) \w does not work in Apache 1.x.
  (Neither do \d and \s.) The really interesting thing is that the
  documentation for Apache 1.x regex engine does not exist.

  Try replacing \w with [:word:], but beware [:word:] works only
  when used in [ and ]. So [\w\-_.]* becomes [[:word:]\-_.]

--
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click