From 2812b08be8e09ff8b4fb14f2df1ac95c2abe5f22 Mon Sep 17 00:00:00 2001
From: Pedro Simoes <pedro.m.simoes@gmail.com>
Date: Wed, 16 Oct 2013 11:01:22 +0100
Subject: [PATCH] Fix for wrong signatures display

For signatures like "sensitive_data: sensitive data - eMail addresses" (sid:5 gid:138) squert was displaying the wrong description.
---
 .inc/callback.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.inc/callback.php b/.inc/callback.php
index aaa0c88..6a4a6e3 100644
--- a/.inc/callback.php
+++ b/.inc/callback.php
@@ -121,7 +121,12 @@ function urlMkr($line) {
 
                     foreach($ruleLines as $line) {
 
-                        $searchCount = preg_match("/sid\:\s*$sigID\s*\;/",$line);
+                        if ( $gID > 100 ) {
+                                $searchCount = preg_match("/sid\:\s*$sigID\s*\;\s*gid\:\s*$gID\s*\;/",$line);
+                        } else {
+                                $searchCount = preg_match("/sid\:\s*$sigID\s*\;/",$line);
+                        }
+
 
                         if($searchCount > 0) {
                             $tempMsg = preg_match("/\bmsg\s*:\s*\"(.+?)\"\s*;/i",$line,$ruleMsg);