deny access to certain URIs based on client source IP address and URI being accessed

The switch -glob syntax allows you to catch wildcard data, so if the user added a hash tag and some text at the end of the URI, the application would probably ignore it, but then so would your static evaluation. I would then recommend something like this:

 

 

switch -glob [string tolower [HTTP::uri]] {

 

"/blah-blah-blah*" -

 

"/system/yada-yada-yada?config=1&usertype=1&other-stuff=true*" -

 

"/system/yada-yada-yada?config=1&usertype=2&other-stuff=true*" { drop }

 

}

 

 

Just added the star "*" to the end of each URI to catch anything AFTER that string as well.