Thibault Koechlin
October 26, 2010 03:30PM

I have started to write a module which goal is to act in a similar way
to "mod_security" in Apache. To keep it short, it will provide
applicative filtering, denying some requests if the module think they
are evil or contains specific attack signatures. Nginx will be used as a
reverse proxy here.

So far, I've managed to make a really basic module (based on
ngx_http_access_module) that is able to allow or deny a request
according to various (extremely simple) pattern matching. I have now to
parse the uri, args and post data, to start the "real stuff". When I say
"parse", I mean being able to cut down every argument (POST or GET), in
order to be able to run regexp (or things like that) on both value and
variable name. So this brings me to my question :
- Is there, inside the ngx_http_request_t structure (or somewhere else),
a "parsed" version of get/post args ?
- If not, is there any module that is actually performing this kind of
operation ?

PS: I've looked to the "ngx_http_variable_value_t *variables;" in the
ngx_http_request struct, but it doesn't seem to be that ... On the other
hand, some folks on the channel told me that the python interface is
able to access those vars, so they must be somewhere ! ;)

Best regards,

nginx-devel mailing list
Subject Author Views Posted

Question about arguments from a GET/POST request

Thibault Koechlin 2823 October 26, 2010 03:30PM

Re: Question about arguments from a GET/POST request

Franchoze Eric 802 November 01, 2010 08:44AM

Re: Question about arguments from a GET/POST request

Thibault Koechlin 1084 November 02, 2010 07:18AM

Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 82
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready