avoid libinjection wrappers to mix var_name/content in EXLOG

nbs-system · Apr 9, 2015 · e3e1ac8 · e3e1ac8
1 parent 03e8478
commit e3e1ac8
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/naxsi_src/naxsi_runtime.c b/naxsi_src/naxsi_runtime.c
@@ -1337,7 +1337,7 @@ void ngx_http_libinjection(ngx_pool_t *pool,
     libinjection_sqli_init(&state, (const char *)name->data, name->len, FLAG_NONE);
     issqli = libinjection_is_sqli(&state);
     if (issqli == 1) { 
-      ngx_http_apply_rulematch_v_n(nx_int__libinject_sql, ctx, req, name, name, zone, 1, 1);
+      ngx_http_apply_rulematch_v_n(nx_int__libinject_sql, ctx, req, name, value, zone, 1, 1);
     }
 
     /* hardcoded call to libinjection on CONTENT, apply internal rule if matched. */
@@ -1352,7 +1352,7 @@ void ngx_http_libinjection(ngx_pool_t *pool,
     /* first on var_name */
     issqli = libinjection_xss((const char *) name->data, name->len);
     if (issqli == 1) {
-      ngx_http_apply_rulematch_v_n(nx_int__libinject_xss, ctx, req, name, name, zone, 1, 1);
+      ngx_http_apply_rulematch_v_n(nx_int__libinject_xss, ctx, req, name, value, zone, 1, 1);
     }
 
     /* hardcoded call to libinjection on CONTENT, apply internal rule if matched. */