HEX
Server: LiteSpeed
System: Linux spg20.cloudpowerdns.com 5.14.0-611.35.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Feb 25 03:46:09 EST 2026 x86_64
User: carrerup (3153)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: //opt/bitninja-waf3/coreruleset/regex-assembly/942190.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##!+ i

##!> define quotes [\"'`]

##!> assemble
  {{quotes}}
  ##!=>
  \s*!\s*[\"'`\w]
  ##!> assemble
    ;?\s*
    ##!=>
    having
    select
    ##!> assemble
      union\b\s*
      ##!=>
      all
      distinct
      select
    ##!<
    ##!=>
    \b\s*[^\s]
  ##!<
##!<

##!> assemble
  \b
  ##!=>
  ##!> assemble
    connection_id
    current_user
    database
    schema
    user
    ##!=>
    \s*?\(
  ##!<

  exec\s+master\.
  execute\s+master\.
  from\W+information_schema\W
  ##!> assemble
    into[\s+]+
    ##!=>
    dumpfile
    outfile
    ##!=>
    \s*?{{quotes}}
  ##!<

  select.*?\w?user\(
  union\sselect\s@
  union[\w(\s]*?select
##!<

\s*?exec.*?\Wxp_cmdshell
\s*?execute.*?\Wxp_cmdshell
\Wiif\s*?\(