• Table of Contents
• ModSecurity® Reference Manual
• Current as of v2.6 v2.7 v2.8 v2.9 v3.0
• Copyright © 2004-2022 Trustwave Holdings, Inc.
• Variables
• ARGS
• ARGS_COMBINED_SIZE
• ARGS_GET
• ARGS_GET_NAMES
• ARGS_NAMES
• ARGS_POST
• ARGS_POST_NAMES
• AUTH_TYPE
• DURATION
• ENV
• FILES
• FILES_COMBINED_SIZE
• FILES_NAMES
• FULL_REQUEST
• FULL_REQUEST_LENGTH
• FILES_SIZES
• FILES_TMPNAMES
• FILES_TMP_CONTENT
• GEO
• HIGHEST_SEVERITY
• INBOUND_DATA_ERROR
• MATCHED_VAR
• MATCHED_VARS
• MATCHED_VAR_NAME
• MATCHED_VARS_NAMES
• MODSEC_BUILD
• MULTIPART_CRLF_LF_LINES
• MULTIPART_FILENAME
• MULTIPART_NAME
• MULTIPART_PART_HEADERS
• MULTIPART_STRICT_ERROR
• MULTIPART_UNMATCHED_BOUNDARY
• OUTBOUND_DATA_ERROR
• PATH_INFO
• PERF_ALL
• PERF_COMBINED
• PERF_GC
• PERF_LOGGING
• PERF_PHASE1
• PERF_PHASE2
• PERF_PHASE3
• PERF_PHASE4
• PERF_PHASE5
• PERF_RULES
• PERF_SREAD
• PERF_SWRITE
• QUERY_STRING
• REMOTE_ADDR
• REMOTE_HOST
• REMOTE_PORT
• REMOTE_USER
• REQBODY_ERROR
• REQBODY_ERROR_MSG
• REQBODY_PROCESSOR
• REQUEST_BASENAME
• REQUEST_BODY
• REQUEST_BODY_LENGTH
• REQUEST_COOKIES
• REQUEST_COOKIES_NAMES
• REQUEST_FILENAME
• REQUEST_HEADERS
• REQUEST_HEADERS_NAMES
• REQUEST_LINE
• REQUEST_METHOD
• REQUEST_PROTOCOL
• REQUEST_URI
• REQUEST_URI_RAW
• RESPONSE_BODY
• RESPONSE_CONTENT_LENGTH
• RESPONSE_CONTENT_TYPE
• RESPONSE_HEADERS
• RESPONSE_HEADERS_NAMES
• RESPONSE_PROTOCOL
• RESPONSE_STATUS
• RULE
• SCRIPT_BASENAME
• SCRIPT_FILENAME
• SCRIPT_GID
• SCRIPT_GROUPNAME
• SCRIPT_MODE
• SCRIPT_UID
• SCRIPT_USERNAME
• SDBM_DELETE_ERROR
• SERVER_ADDR
• SERVER_NAME
• SERVER_PORT
• SESSION
• SESSIONID
• STATUS_LINE
• STREAM_INPUT_BODY
• STREAM_OUTPUT_BODY
• TIME
• TIME_DAY
• TIME_EPOCH
• TIME_HOUR
• TIME_MIN
• TIME_MON
• TIME_SEC
• TIME_WDAY
• TIME_YEAR
• TX
• UNIQUE_ID
• URLENCODED_ERROR
• USERID
• USERAGENT_IP
• WEBAPPID
• WEBSERVER_ERROR_LOG
• XML