Variables

Keyword	Description
`ARGS`	All request parameters (GET and POST)
`ARGS_GET`	GET request parameters
`ARGS_POST`	POST request parameters
`ARGS_NAMES`	All parameter names
`ARGS_GET_NAMES`	GET parameter names
`ARGS_POST_NAMES`	POST parameter names
`ARGS_COMBINED_SIZE`	Combined size of all arguments
`REQUEST_HEADERS`	Request headers
`REQUEST_HEADERS_NAMES`	Request header names
`REQUEST_COOKIES`	Request cookies
`REQUEST_COOKIES_NAMES`	Request cookie names
`REQUEST_BODY`	Request body content
`REQUEST_BODY_LENGTH`	Request body length
`REQUEST_METHOD`	HTTP request method
`REQUEST_URI`	Request URI
`REQUEST_URI_RAW`	Raw request URI
`REQUEST_FILENAME`	Request filename
`REQUEST_BASENAME`	Request basename
`REQUEST_PROTOCOL`	Request protocol
`REQUEST_LINE`	Full request line
`QUERY_STRING`	Query string
`FULL_REQUEST`	Full request
`FULL_REQUEST_LENGTH`	Full request length
`RESPONSE_BODY`	Response body content
`RESPONSE_HEADERS`	Response headers
`RESPONSE_HEADERS_NAMES`	Response header names
`RESPONSE_STATUS`	Response status code
`RESPONSE_PROTOCOL`	Response protocol
`RESPONSE_CONTENT_LENGTH`	Response content length
`RESPONSE_CONTENT_TYPE`	Response content type
`REMOTE_ADDR`	Client IP address
`REMOTE_HOST`	Client hostname
`REMOTE_PORT`	Client port
`REMOTE_USER`	Authenticated username
`SERVER_ADDR`	Server IP address
`SERVER_NAME`	Server name
`SERVER_PORT`	Server port
`AUTH_TYPE`	Authentication type
`PATH_INFO`	Path info
`MULTIPART_FILENAME`	Multipart filename
`MULTIPART_NAME`	Multipart name
`MULTIPART_PART_HEADERS`	Multipart part headers
`MULTIPART_CRLF_LF_LINES`	Multipart CRLF/LF lines
`MULTIPART_STRICT_ERROR`	Multipart strict error
`MULTIPART_UNMATCHED_BOUNDARY`	Multipart unmatched boundary
`MULTIPART_BOUNDARY_QUOTED`	Multipart boundary quoted
`MULTIPART_BOUNDARY_WHITESPACE`	Multipart boundary whitespace
`MULTIPART_DATA_BEFORE`	Multipart data before
`MULTIPART_DATA_AFTER`	Multipart data after
`MULTIPART_HEADER_FOLDING`	Multipart header folding
`MULTIPART_LF_LINE`	Multipart LF line
`MULTIPART_MISSING_SEMICOLON`	Multipart missing semicolon
`MULTIPART_INVALID_QUOTING`	Multipart invalid quoting
`MULTIPART_INVALID_PART`	Multipart invalid part
`MULTIPART_INVALID_HEADER_FOLDING`	Multipart invalid header folding
`MULTIPART_FILE_LIMIT_EXCEEDED`	Multipart file limit exceeded
`REQBODY_ERROR`	Request body error
`REQBODY_ERROR_MSG`	Request body error message
`REQBODY_PROCESSOR`	Request body processor
`REQBODY_PROCESSOR_ERROR`	Request body processor error
`INBOUND_DATA_ERROR`	Inbound data error
`OUTBOUND_DATA_ERROR`	Outbound data error
`URLENCODED_ERROR`	URL encoding error
`STATUS_LINE`	Response status line
`HIGHEST_SEVERITY`	Highest severity
`MSC_PCRE_LIMITS_EXCEEDED`	PCRE limits exceeded
`ENV`	Environment variables
`GEO`	Geolocation data
`RULE`	Rule metadata
`SESSIONID`	Session ID
`USERID`	User ID
`WEBAPPID`	Web application ID
`XML`	XML data
`MODSEC_BUILD`	ModSecurity build info
`FILES`	Uploaded files
`FILES_NAMES`	Uploaded file names
`FILES_SIZES`	Uploaded file sizes
`FILES_TMPNAMES`	Uploaded file temp names
`FILES_TMP_CONTENT`	Uploaded file temp content
`FILES_COMBINED_SIZE`	Uploaded files combined size
`TX`	Transaction variables
`GLOBAL`	Global collection
`IP`	IP address collection
`SESSION`	Session collection
`USER`	User collection
`RESOURCE`	Resource collection
`MATCHED_VAR`	Last matched variable
`MATCHED_VAR_NAME`	Last matched variable name
`MATCHED_VARS`	All matched variables
`MATCHED_VARS_NAMES`	All matched variable names
`UNIQUE_ID`	Unique transaction ID
`DURATION`	Transaction duration
`TIME`	Current time
`TIME_EPOCH`	Unix timestamp
`TIME_YEAR`	Current year
`TIME_MON`	Current month
`TIME_DAY`	Current day
`TIME_HOUR`	Current hour
`TIME_MIN`	Current minute
`TIME_SEC`	Current second
`TIME_WDAY`	Current weekday