Home > Configuration > Application Firewall > bindappfwprofile_sqlinjection

bindappfwprofile_sqlinjection

Use this method to bind sqlinjection to appfw profile.

Syntax



Parameters

name

Name of the profile to which to bind an exemption or rule.
This is mandatory parameter.

sqlinjection

Exempt the specified HTTP header, web form field and the form action URL, or cookie from the SQL injection check. An SQL injection exemption (relaxation) consists of the following items: *Item name. Name of the web form field, cookie, or HTTP header to exempt from this check. * Form action URL. If the item to be exempted is a web form field, the action URL for the web form. * IsRegex flag. The IsRegex flag, followed by YES if the name or form action URL is a regular expression, or NO if it is a literal string. * Location. Location that should be examined by the SQL injection check, either FORMFIELD for web form field, HEADER for HTTP header, or COOKIE for cookie.

formactionurl

Form action URL for exceptions in fields, or request URL for exceptions in headers and cookies.

isregex

Is a regular expression?
Possible Values : REGEX, NOTREGEX.

location

Location of SQL injection exception - form field, header or cookie.
Possible Values : FORMFIELD, HEADER, COOKIE.

valuetype

SQL value type. (Keyword | SpecialString | Wildchar | None
Possible Values : Keyword, SpecialString, Wildchar.

valueexpression

SQL value expressions consistituting expressions for Keyword, SpecialString and Wildchars.

isvalueregex

Is a regular expression?
Possible Values : REGEX, NOTREGEX.

Return Value

Returns simpleResult

See Also