Forum Discussion
sbobic_232506
Nimbostratus
NimbostratusApplying iRule to ASM policy - file upload form protection
So, I have found the following iRule which should block the upload of PHP files in file upload forms:
when HTTP_REQUEST {
if { [HTTP::header exists "Content-Disposition"] } {
...
sbobic_232506Nimbostratus
NimbostratusI've done everything you wrote but DAVW still let's me upload PHP files. Either the iRule is not working in my version of ASM 12.0 or something else is wrong?
Here is the log from the intercepted POST submit:
POSTDATA =-----------------------------125462240720208 Content-Disposition: form-data; name="MAX_FILE_SIZE"
100000 -----------------------------125462240720208 Content-Disposition: form-data; name="uploaded"; filename="up2.php" Content-Type: application/octet-stream
-----------------------------125462240720208 Content-Disposition: form-data; name="Upload"
Upload -----------------------------125462240720208--
