mac address matching attack pattern

[lvwr]

Hello everyone,

I've been using php-ids on some forms and, in one of them, I've to
deal with mac adresses submission. I got very surprised when php-ids
displayed a false-positive, detecting the mac address data as an
attack attempt.

Did someone already had this problem? How did you deal with it?

Thanks,
João.

[Mario Heiderich]

Hi,

MAC addresses - hmm - we haven't tested on that pattern yet. Thanks for pointing out!
I just committed a new revision of the rules (.944). The problem is fixed now.

Greetings!
.mario

--
_______________________
php-ids.org

.ﻩﻨﺮﻪﺴ