[@anointed Participant 15 years, 4 months ago]

It is not the individual words but the combination spaces and keywords that are usually used to ‘inject malicious code’ into a db.

select|grant|delete|insert|drop|alter|replace|truncate|update|create|rename|describe

*each host uses diff keywords, so your rules may vary

I’d wait until you hear from JJ, just in case the info is saved to the db differently before you mod anything in mod-security