Regular expressions can be pretty powerful. Here is how you can check whether a parameter is an integer between 0 and 99999:
SecFilterSelective ARG_parameter "!^[0-9]{1,5}$"
Forbid file upload for the application as a whole, but allow it in a subfolder:
# Reject requests with header "Content-Type" set # to "multipart/form-data" SecFilterSelective HTTP_CONTENT_TYPE multipart/form-data # Only for the script that performs upload <Location /upload.php> # Do not inherit filters from the parent folder SecFilterInheritance Off </Location>
Earlier versions of FormMail could be abused to send email to any recipient (I've been told that there is a new version that can be secured properly).
# Only for the FormMail script <Location /cgi-bin/FormMail> # Reject request where the value of parameter "recipient" # does not end with "@webkreator.com" SecFilterSelective ARG_recipient "![a-zA-Z0-9]+@webkreator\.com$"> </Location>