F5 怎么做anti sql injection
问题描述:
如题,怎么在F5中做到anti sql injection
答
Local Trafic -> iRules -> create -> name{your irule name} -> Definition ->
[code="tkl"]when HTTP_REQUEST {
switch -glob [URI::decode [string tolower [HTTP::uri]]] {
"*delete *" -
"*select *" -
"*insert *" -
"*update *" {
pool pool_error
}
default {
pool pool_normal
}
}
}
[/code]
Local Trafic -> Virutal Servers -> Resources -> iRules -> manage -> enabled -> Finished
大概就是这么玩的。