Generalized Oracle calls to DBMS_ Packages. There are more
Oracle DBMS_ Packages. The new rule captures all DBMS_ calls
instead of only the 2 ones.
Added Oracle UTL_INADDR
Added Oracle sys_context
Thanks for the Pull Request, however the base_rules/modsecurity_41_sql_injection_attacks.data file has been deprecated. This was previously used as part of pre-qualification to quickly find plain text strings using @pmFromFile. These are good additions to the sqli rules but they will have to be added to the regexes and not the .data files. I will look into this.
Deleted unused file
Updated DBMS_XXXX. Oracle calls
A thx haven't recognized this. Will try to update the regex and reopen the pull request when finished.
Added Oracle SYS_CONTEXT and UTL_INADDR functions
Regex updated. Feedbacks appreciated
Merged your Pull request, thanks!