Skip to content

http.request.base_uri — Path (without query)

metin

In the console: Path (without query)

The full path without the query string: for a request to /admin/login?next=/panel its value is /admin/login. It is the primary field for path-based rules (directory protection, endpoint targeting) — http.request.uri.path carries only the last segment, while base_uri gives you the whole path.

OperatorDescription
==Exact match
!=Not equal
inIn list
not_inNot in list
containsContains
not_containsDoes not contain
has_prefixStarts with
has_not_prefixDoes not start with
has_suffixEnds with
has_not_suffixDoes not end with
IF http.request.base_uri has_prefix /api/
THEN ratelimit 100/60s
IF http.request.base_uri has_suffix .php
THEN block